{"report_id":"c05d091e-b4a9-428b-973b-93e8b7d17be2","version":0,"status":"done","tags":[],"date":"2026-06-12T02:36:16Z","url":{"schema":"http","addr":"marriott-hiring.com","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"marriott-hiring.com/","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"title":"Jobs at Marriott International","dom":{"size":2367,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2367), with no line terminators","md5":"0e9ab2c4796b7fea42992463be8125db","sha1":"a5965ae28e2de683ad11cfe02c4ecc110e255b2e","sha256":"80585d3b8f9404bf7ef898ce0bd2fd0660e9750bfcbdeed44c72cde7d42351be","sha512":"18a03ec0e4cd54a2a6fc46507537e15d6f434bb2c85a9d3346752f4b402768ca90b4077f4ae921819822e2bb0035b46ad607ddc37aca50d6fdbf14f40676c445","ssdeep":"","tlshash":"824112e34c4ad1375b9342d6e137b6ecd462484ceca32d1118e353a59be9de0d613c98","dom_hash":"domhash5ae2eed76c634e4e41611e593dde8ba5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"marriott-hiring.com","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T02:36:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":1,"received_data":483857,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"marriott-hiring.com","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":4,"received_data":385149,"sent_data":2072,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":2,"received_data":27395,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":1,"received_data":39961,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"careers.marriott.com","ip":{"addr":"95.101.10.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1993-01-05","domain_rank":114735,"first_seen":"2016-07-06T07:41:53Z","last_seen":"2026-06-06T15:21:21.087962Z","alert_count":0,"request_count":2,"received_data":5569,"sent_data":1104,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-06-08T13:51:42.084319Z","alert_count":0,"request_count":1,"received_data":10909,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"marriott-hiring.com/","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f2a554de3668ca54d3489c3adf9d149","sha1":"f68860c63f11a9a50f8c1ed658ba217bc38ddc9f","sha256":"30a4897896e43f724bef01d3fbcfb1652d5d55967f048638455e233c4827a858","sha512":"a59e6291f6491dd624cc00b4e51cdc182759c9e0f8916e8cfa0c32803d8529c80420aeb937c56c491ede591b16dbccee26177f313ee6352bcafa93957ba860dd","ssdeep":"","tlshash":"10b022b82a038cb282ef0ba00baf22002822232280a03b280832b0082232c233000c80","size":129,"data":"","first_seen":"2025-09-23T05:46:57.201531Z","last_seen":"2026-06-12T02:42:37.406095Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-123NZLZV56","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2cf1439359aa93615002408e02f2a63","sha1":"bc87691129053668f915561e8c9f7a3a03327f5d","sha256":"069346f1caf7ea835ab84e73d44cd5e7a9af59c14d3b64f942af7f8118aff74e","sha512":"49c14290699db30958c43e78f673fcf8550128d93d584f2611a59cbb1ae9157baa2f3b0e94e8ec1d5e0b5b182fe8dda10f0557104f58f444ea7c1836a42870b4","ssdeep":"6144:sM/bRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:9mnTsEZXysu","tlshash":"a0a4e9ceb3d674225296f478903f018ba57b29e2b44cc899f189cce42e7469a4177f7c","size":483253,"data":"","first_seen":"2026-06-12T02:36:23.919851Z","last_seen":"2026-06-12T02:36:23.919851Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marriott-hiring.com/static/js/main.e57cf49c.js","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f44e4e4be6a480b2d1aa610eddfdc2c2","sha1":"ca019827aa360fd66b06081941ba3bf6240d63c0","sha256":"a6f48a5067a142d2961f42fcc86ecab74ee135850ff6aaf4688342af8436c6e8","sha512":"8b4d320619566ffb966fc0cee0913e26c5efecc12262b0e168401ff1c2530126a1579c10fbc2c0cf5d720e5bcabecb65c275dcd7ff3b1badb472d26e0022ab52","ssdeep":"3072:+P8qxlVs/hf18do0fIilc129XwAXD+hgUxPjulkl9PbsGn5Dj:+P8qxlV2acLAXD+hgqdlgK","tlshash":"9f545bd87566f565beb202e740af140a733d1a2f6c0d88a0b260fc5d74b885e712bfd9","size":291080,"data":"","first_seen":"2026-05-29T16:28:20.58041Z","last_seen":"2026-06-12T02:36:23.911024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"marriott-hiring.com/static/js/main.e57cf49c.js","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:49.310Z","timestamp":1781231749310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marriott-hiring.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 17:47:38 GMT","end":"Fri, 21 Aug 2026 17:47:37 GMT"},"fingerprint":{"sha1":"1E:40:3D:6C:C9:7C:F9:13:1C:E1:AB:20:31:15:D4:36:FE:29:0A:1D","sha256":"EE:9B:DA:CF:67:7C:B5:88:B5:F0:91:74:C0:61:3C:D6:D8:41:A2:9D:96:3A:AB:75:E7:81:EA:8F:2F:DB:38:E9"}}},"request":{"raw":"GET /static/js/main.e57cf49c.js HTTP/1.1\r\nHost: marriott-hiring.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 12 Jun 2026 02:35:49 GMT\r\netag: \"d13f84ed47d1b8af133b0af18bcd1818-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KTWTZ2731PBPNGTWNG8MK339\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":291080,"size_decoded":83483,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"f44e4e4be6a480b2d1aa610eddfdc2c2","sha1":"ca019827aa360fd66b06081941ba3bf6240d63c0","sha256":"a6f48a5067a142d2961f42fcc86ecab74ee135850ff6aaf4688342af8436c6e8","sha512":"8b4d320619566ffb966fc0cee0913e26c5efecc12262b0e168401ff1c2530126a1579c10fbc2c0cf5d720e5bcabecb65c275dcd7ff3b1badb472d26e0022ab52","ssdeep":"3072:+P8qxlVs/hf18do0fIilc129XwAXD+hgUxPjulkl9PbsGn5Dj:+P8qxlV2acLAXD+hgqdlgK","tlshash":"9f545bd87566f565beb202e740af140a733d1a2f6c0d88a0b260fc5d74b885e712bfd9","first_seen":"2026-05-29T16:28:20.58041Z","last_seen":"2026-06-12T02:36:23.911024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:49.921Z","timestamp":1781231749921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Jun 2026 02:35:50 GMT\r\ndate: Fri, 12 Jun 2026 02:35:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":2428,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b9f037ad2bf34f0e66cb12a391456d5f","sha1":"9e5e9fa857e3ed7ef12535c8fac83846034bf4a5","sha256":"2d09d5a02335bea6714b8a21156de9506fdd34d43d597aea05792ff050a588a6","sha512":"a49ad933cd238b818c604b044fa200f2d6a40d24040be41584f0c535f948b2f7642b0d91cbb77b07f41f071d46e6738a0d9c3a2d9ea125f463329280fbfbd970","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/U:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"86a210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:50.873195Z","last_seen":"2026-06-12T08:08:53.854633Z","times_seen":4596,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":0,"dns":33,"connect":49,"send":0,"wait":69,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:50.614Z","timestamp":1781231750614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://marriott-hiring.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Jun 2026 10:28:31 GMT\r\nexpires: Sat, 05 Jun 2027 10:28:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 576439\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39128,"size_decoded":39961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-06-12T08:48:58.860396Z","times_seen":32329,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":35,"connect":48,"send":0,"wait":96,"receive":96,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marriott-hiring.com/static/media/marriott.dc4afb2eb3dda2840b1e.png","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:50.621Z","timestamp":1781231750621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marriott-hiring.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 17:47:38 GMT","end":"Fri, 21 Aug 2026 17:47:37 GMT"},"fingerprint":{"sha1":"1E:40:3D:6C:C9:7C:F9:13:1C:E1:AB:20:31:15:D4:36:FE:29:0A:1D","sha256":"EE:9B:DA:CF:67:7C:B5:88:B5:F0:91:74:C0:61:3C:D6:D8:41:A2:9D:96:3A:AB:75:E7:81:EA:8F:2F:DB:38:E9"}}},"request":{"raw":"GET /static/media/marriott.dc4afb2eb3dda2840b1e.png HTTP/1.1\r\nHost: marriott-hiring.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nCookie: _ga_123NZLZV56=GS2.1.s1781231750$o1$g0$t1781231750$j60$l0$h0; _ga=GA1.1.2043127161.1781231750\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 02:35:50 GMT\r\netag: \"2199708103f5a906de5c0b58e2344096-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KTWTZ3G3CRM36YPPJ6CQTXXF\r\ncontent-length: 53928\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":53928,"size_decoded":54320,"mime_type":"image/png","magic":"PNG image data, 1280 x 1006, 8-bit/color RGBA, non-interlaced","md5":"2208f02c55d96ff81b37438f19335cb0","sha1":"adcc586b530bc9c02a8c18b67cbb5a86c4976d73","sha256":"7398d8ec85b8adea7831de418eda2abaff28b6f5fcbd9479cbcf3af0921b8524","sha512":"4f87982ddd08d4bd7781baa1f83ea014b2f67ee33232e1a46f5d639c83949371a92232d9450048e169d76a29815fcc8aba9119195f19310055fd2294b4a6a87e","ssdeep":"768:qhvPqtkdGxrR5PdYlZcoyQdlw3qjQ8IQ8xOy7dK5tqvK6GbwGCW/osvCbPNaBD:MXE31biljDdC3VQ8MypKaGEdSFabmD","tlshash":"3633e1f0aa19ec421274375ca9f7c4c8a860e477d463aeeb612940dfb6e3d690723cd4","first_seen":"2026-05-20T18:30:51.434211Z","last_seen":"2026-06-12T02:36:23.913474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"careers.marriott.com/favicon-32x32.png","fqdn":"careers.marriott.com","domain":"marriott.com","tld":"com"},"ip":{"addr":"95.101.10.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:51.168Z","timestamp":1781231751168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"common.marriott.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 30 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:32:1A:5B:67:3F:1F:71:5B:CA:B6:61:06:FC:49:8A:EF:4D:E0:D9","sha256":"E3:A0:F8:98:A2:F7:2E:21:71:9A:CA:84:9F:E7:3B:96:7D:74:83:FE:1B:49:91:45:3B:2C:28:C4:A6:97:04:5B"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: careers.marriott.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1925\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 29 May 2025 04:01:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 0CJN926p4f8hmmmBOHpJklF00_NdqqQn\r\naccept-ranges: bytes\r\netag: \"185e9dc1824c064b11dc7659d25707a1\"\r\nx-amz-cf-pop: IAD89-P4\r\nx-amz-cf-id: krnsXCDwoMvVbCOpV3yi4B632BRzKJpMoimyzrJECQZo6hgGUvnP_A==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: max-age=324492\r\ndate: Fri, 12 Jun 2026 02:35:51 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1781231751356_1600457332_477855836_48_15935_33_0_21\";dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":2784,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"185e9dc1824c064b11dc7659d25707a1","sha1":"4c17abeebec4350951e938a7c88303f91a542737","sha256":"17155b030a0ed1e672a3e14e283127df37e81680a6e17a529c18b050c05a366d","sha512":"fc78780887f0e8a4d58ba20cce86af620c9a69cbf9e0ddc28c674dbfa5be531160d15fc38eb793754ad7a0ba52c474cd3d38daedfe98f9f2d166b9ca35ec24af","ssdeep":"","tlshash":"5641e8d0c129542e705a778aecf005775aac13dd485dd18a3eea394302799ebd0cd2b3","first_seen":"2026-05-11T21:39:14.00286Z","last_seen":"2026-06-12T02:36:23.914236Z","times_seen":8,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":43,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marriott-hiring.com/","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T02:35:48.534Z","timestamp":1781231748534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marriott-hiring.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 17:47:38 GMT","end":"Fri, 21 Aug 2026 17:47:37 GMT"},"fingerprint":{"sha1":"1E:40:3D:6C:C9:7C:F9:13:1C:E1:AB:20:31:15:D4:36:FE:29:0A:1D","sha256":"EE:9B:DA:CF:67:7C:B5:88:B5:F0:91:74:C0:61:3C:D6:D8:41:A2:9D:96:3A:AB:75:E7:81:EA:8F:2F:DB:38:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marriott-hiring.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 24580\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 12 Jun 2026 02:35:48 GMT\r\netag: \"e0253047b7215de739418cd290ccd36f-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KTWTZ1RC84PT4SXWHMGADMWG\r\ncontent-length: 1006\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1006,"size_decoded":1411,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1006), with no line terminators","md5":"35a3ae2f621b1001eba1f5c66d512b83","sha1":"01f96c966927bd8155fbeb76e0db12d22cefca2b","sha256":"7e52e900e4a1615c0e1786abe4b85c7b8fa5241ca5b8a27c75ab52fd0019af04","sha512":"a54fc7f777650e915ff5471cc8dbc1afa80e28f6d9da9bcd5c4559fb08d5e60abc035e8c8d28bc09bf4718220f128879cd096a8aee0f87045f1b0fc7342c77d3","ssdeep":"","tlshash":"5d11c2e38c01c889527093b6ef76f01c84466509cdd1fd5068d324e99994ff39d229a5","first_seen":"2026-05-29T16:28:20.582752Z","last_seen":"2026-06-12T02:36:23.914933Z","times_seen":2,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":65,"connect":56,"send":0,"wait":57,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marriott-hiring.com/static/css/main.4aafd4b9.css","fqdn":"marriott-hiring.com","domain":"marriott-hiring.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:49.311Z","timestamp":1781231749311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marriott-hiring.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 17:47:38 GMT","end":"Fri, 21 Aug 2026 17:47:37 GMT"},"fingerprint":{"sha1":"1E:40:3D:6C:C9:7C:F9:13:1C:E1:AB:20:31:15:D4:36:FE:29:0A:1D","sha256":"EE:9B:DA:CF:67:7C:B5:88:B5:F0:91:74:C0:61:3C:D6:D8:41:A2:9D:96:3A:AB:75:E7:81:EA:8F:2F:DB:38:E9"}}},"request":{"raw":"GET /static/css/main.4aafd4b9.css HTTP/1.1\r\nHost: marriott-hiring.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Fri, 12 Jun 2026 02:35:49 GMT\r\netag: \"438a5ebffbbd4618367c4c5e246ae861-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KTWTZ274Q0B0F6M4KFJW95S8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":37462,"size_decoded":7686,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (37417)","md5":"cf10f3e1896da191588826ebeff52707","sha1":"b1ae036e95c1030138161bfca9dd77f8cf3bf89a","sha256":"2540f0a6a0ccb780716a1024777510208b002e675ce3717bc3a62cb81bb0f280","sha512":"7a13e30399565b10d6f8f3e4d57a27f8de63ff7e381ef352f24da70899ba2e08dcf95d086d44d2c29802761f913823528847329d6e8b447988dd7267e5e42362","ssdeep":"384:zN/QMyUsvZPVW7yc1XH+NmD1I35xTB/xSq:LsxEuc1XZI/dR","tlshash":"a9f29633e154212eb42bc8b961d0e98f7015ca43e56757beed66b638c5c71932b32b8c","first_seen":"2026-05-20T18:30:51.410873Z","last_seen":"2026-06-12T02:36:23.915901Z","times_seen":4,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"marriott-hiring.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:49.919Z","timestamp":1781231749919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Nunito:ital,wght@0,200..1000;1,200..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Jun 2026 02:35:50 GMT\r\ndate: Fri, 12 Jun 2026 02:35:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3707,"size_decoded":1296,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f694f62bd417d30718eb8cb17a4c35ff","sha1":"798240e40c85b73afea129b1634d10ab81ff4da2","sha256":"da38e9809c4d7f004a9a8a11bb06f39d56c9ae7e06d8f7b68a6c7cdb3018eb47","sha512":"e084ed28ab8fb45cff0cab59ba50060a21c87398364a618e8f6e06a4b17896ee90f9de3a20acd13468935ce4a982024e463e86569fd1500811bbdbd5d522eaf8","ssdeep":"","tlshash":"5571acd1045bd100aa472dc267cf7e36ed4e61517424c97aebfd98a8ecabc236224b0d","first_seen":"2025-09-17T15:53:14.372232Z","last_seen":"2026-06-12T03:55:12.35032Z","times_seen":2779,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":35,"connect":48,"send":0,"wait":67,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/thumb/a/ad/RecaptchaLogo.svg/250px-RecaptchaLogo.svg.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:50.623Z","timestamp":1781231750623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 05:51:37 GMT","end":"Sun, 12 Jul 2026 05:51:36 GMT"},"fingerprint":{"sha1":"62:23:EE:89:97:A6:C1:A5:65:7A:8F:23:C2:68:CA:70:93:B3:AA:FF","sha256":"5A:21:64:0C:22:9B:01:A0:D2:BC:CA:02:4F:E8:51:ED:BA:CC:51:27:0E:87:6A:6E:E6:0D:88:64:AB:D1:3F:30"}}},"request":{"raw":"GET /wikipedia/commons/thumb/a/ad/RecaptchaLogo.svg/250px-RecaptchaLogo.svg.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-disposition: inline;filename*=UTF-8''RecaptchaLogo.svg.png\r\nlast-modified: Mon, 25 May 2026 10:54:18 GMT\r\ncontent-length: 8899\r\ndate: Thu, 11 Jun 2026 13:08:02 GMT\r\nserver: envoy\r\netag: f488aecd5e29de0e3166c1395b18316e\r\nage: 48467\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/27\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\ncontent-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nx-content-security-policy-report-only: default-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\u0026\r\nset-cookie: WMF-Uniq=BzjIrc5fGbVf6PJGgV_imQN9AAAAAFvdF1vEN4EumGBrTPoSKrpYzTbxnmdUhHJJ;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 12 Jun 2027 00:00:00 GMT\r\nx-request-id: 41b515e7-84e1-4597-b071-9bb00acac6f9\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8899,"size_decoded":10909,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"f488aecd5e29de0e3166c1395b18316e","sha1":"ba8d59bd615b7b41ad7cb1031cec3cc711aaabaa","sha256":"e5a5365ffb28100609309e5dc6ad891e3fc82c2123c6d64a6efa80dd82391399","sha512":"c13fe0f400016ef13383bf05c5c6e8f2976edae1dc6369fbb122917155fcd7415a94b74562a12a42730f428cc73409c779d53c9d02fdb696267bcac8a6fc1d8f","ssdeep":"192:4d4b0TFteH0gh7qhTnOW/hjR5tCLVgxyMqUA0ywfu:inE+TrRKLihqUJy7","tlshash":"f3029d9480fd84058ca09cffb94a28ae337f0923b02b4a2c1752f51885ecdbe138468f","first_seen":"2026-05-29T16:28:20.585441Z","last_seen":"2026-06-12T02:36:23.9192Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":72,"connect":51,"send":0,"wait":60,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"careers.marriott.com/favicon-32x32.png","fqdn":"careers.marriott.com","domain":"marriott.com","tld":"com"},"ip":{"addr":"95.101.10.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:51.170Z","timestamp":1781231751170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"common.marriott.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 30 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:32:1A:5B:67:3F:1F:71:5B:CA:B6:61:06:FC:49:8A:EF:4D:E0:D9","sha256":"E3:A0:F8:98:A2:F7:2E:21:71:9A:CA:84:9F:E7:3B:96:7D:74:83:FE:1B:49:91:45:3B:2C:28:C4:A6:97:04:5B"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: careers.marriott.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1925\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 29 May 2025 04:01:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 0CJN926p4f8hmmmBOHpJklF00_NdqqQn\r\naccept-ranges: bytes\r\netag: \"185e9dc1824c064b11dc7659d25707a1\"\r\nx-amz-cf-pop: IAD89-P4\r\nx-amz-cf-id: krnsXCDwoMvVbCOpV3yi4B632BRzKJpMoimyzrJECQZo6hgGUvnP_A==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: max-age=324492\r\ndate: Fri, 12 Jun 2026 02:35:51 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1781231751268_1600457332_477855835_53_16096_33_88_21\";dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1925,"size_decoded":2785,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"185e9dc1824c064b11dc7659d25707a1","sha1":"4c17abeebec4350951e938a7c88303f91a542737","sha256":"17155b030a0ed1e672a3e14e283127df37e81680a6e17a529c18b050c05a366d","sha512":"fc78780887f0e8a4d58ba20cce86af620c9a69cbf9e0ddc28c674dbfa5be531160d15fc38eb793754ad7a0ba52c474cd3d38daedfe98f9f2d166b9ca35ec24af","ssdeep":"","tlshash":"5641e8d0c129542e705a778aecf005775aac13dd485dd18a3eea394302799ebd0cd2b3","first_seen":"2026-05-11T21:39:14.00286Z","last_seen":"2026-06-12T02:36:23.914236Z","times_seen":8,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":41,"connect":34,"send":0,"wait":79,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-123NZLZV56","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marriott-hiring.com/","date":"2026-06-12T02:35:49.307Z","timestamp":1781231749307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-123NZLZV56 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marriott-hiring.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 02:35:49 GMT\r\nexpires: Fri, 12 Jun 2026 02:35:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163734\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483253,"size_decoded":164338,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"c2cf1439359aa93615002408e02f2a63","sha1":"bc87691129053668f915561e8c9f7a3a03327f5d","sha256":"069346f1caf7ea835ab84e73d44cd5e7a9af59c14d3b64f942af7f8118aff74e","sha512":"49c14290699db30958c43e78f673fcf8550128d93d584f2611a59cbb1ae9157baa2f3b0e94e8ec1d5e0b5b182fe8dda10f0557104f58f444ea7c1836a42870b4","ssdeep":"6144:sM/bRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:9mnTsEZXysu","tlshash":"a0a4e9ceb3d674225296f478903f018ba57b29e2b44cc899f189cce42e7469a4177f7c","first_seen":"2026-06-12T02:36:23.919851Z","last_seen":"2026-06-12T02:36:23.919851Z","times_seen":1,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":35,"connect":47,"send":0,"wait":78,"receive":481,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}