{"report_id":"e9420a5b-6512-42dc-947d-266a55ad3eba","version":0,"status":"done","tags":[],"date":"2026-09-03T00:47:15Z","url":{"schema":"http","addr":"boklsngstaysdetails.com/1119565469?lang=en","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"104.21.15.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"boklsngstaysdetails.com/1119565469?lang=en","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"title":"Booking.com - Verification","dom":{"size":296323,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52774)","md5":"89122e87ab4ebb2f7458fc1d1c40edc6","sha1":"29dae5cc335a6c06e7c12f9f5bca869930a5c911","sha256":"32c2c243f012e644ac61e76f0832c6fad9a7ea7ae006c7cd29e4d9e21716375e","sha512":"b8bc5606ea80e36770c0ed5b0641106b35bf0e5917630c39cfc64139ccba176f74d09ffdab33fa51d59cb4b30e348a42de6bda04033064dcb5982c93a245e16a","ssdeep":"6144:wI4xXw0okHcHAa0evnNyolRjiuLXA6fRZzxxqTm8:w3JozAa0QyolRVLXA6fRZzxxOr","tlshash":"5e547d5262f5273e045b02c9a9563e2e6eedc23be752c1c4b54c97b43fe2c68d633468","dom_hash":"domhashc0a89e6cf6b144a889a7c21f6e7f1d84","first_seen":"2026-09-03T00:47:21.393415Z","last_seen":"2026-09-03T00:47:21.393415Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"boklsngstaysdetails.com/1119565469?lang=en","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"104.21.15.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T00:47:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-08-28T03:25:35.394594Z","alert_count":0,"request_count":8,"received_data":31518,"sent_data":4866,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":1249,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-08-28T16:39:15.103723Z","alert_count":0,"request_count":1,"received_data":1346,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cf.bstatic.com","ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":109157,"first_seen":"2020-10-08T14:09:51Z","last_seen":"2026-09-01T11:42:54.892805Z","alert_count":0,"request_count":1,"received_data":106303,"sent_data":655,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":129166,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"boklsngstaysdetails.com","ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-03T00:47:16.381052Z","last_seen":"2026-09-03T00:47:16.381052Z","alert_count":56,"request_count":56,"received_data":648849,"sent_data":39712,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t-cf.bstatic.com","ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":123886,"first_seen":"2022-12-04T19:01:11Z","last_seen":"2026-08-26T09:22:39.301224Z","alert_count":0,"request_count":41,"received_data":49671,"sent_data":24190,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-08-28T09:17:21.501906Z","alert_count":0,"request_count":2,"received_data":2402,"sent_data":1086,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"boklsngstaysdetails.com/js/payment-modal.js?v=1776386200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20289d5b97d22028d2b44527dde880f","sha1":"58b61606b03115b39ca3958cabf871bc8992d28e","sha256":"e8b8f2430514af09c5383ef84ae5566fcc1e2c532caf4bb23e0a4c5701bb67a9","sha512":"9411aada710794022c3cea9f0f6ba7315ea3bc3cd1de5864f0ebf5704acdcb21dd3b887c12cbe41b461ffdd707997ba975e66556d5d6994e21a834d0c02d16bd","ssdeep":"768:0OUlCoVjDorie3lLRJW/5r7UOZ9nQqWGIDNJ6+hNDz:0LlCEjDorLDM5rdZaqiNJD","tlshash":"3e838158a6f321764a7771bb47ff4205763b00534809ce907c5cba882fc0aa597f6be9","size":88110,"data":"","first_seen":"2026-09-03T00:47:21.3953Z","last_seen":"2026-09-03T12:21:37.080518Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/js/support.js?v=1787859200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee09837d2c1e6d48b4bd0ca7b95c5ade","sha1":"334cc11ba8ab339788251fe95e8b65e65bc23b57","sha256":"f6b749b13eb9f88a8094cc021589d07c838ca13699198185127f4f22b4ce6738","sha512":"d9ea1ed69bb61585b322cfae6abc1aab13a92e0da3db725c62b4ab61ced0715844d6595fbf71815ad41c02fee7fb047c30b0c8c7b890ca1619e885652967a797","ssdeep":"1536:My9VApRhRrIE6kKrGcB44MvfSGgqT1442k:9VApRhDkB5YfSY14Y","tlshash":"204309692af7102918776179bbcfa70533219007a107de243b9c564cbfd0be592fabd8","size":58484,"data":"","first_seen":"2026-09-03T00:47:21.421095Z","last_seen":"2026-09-03T12:21:37.043355Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/book/js/script.js?v=1771629200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a45316929ab38c470f84213cf4d1407a","sha1":"0675f47e9ff02c185f47d83ce2de1161c5782449","sha256":"2f218382621c06f00a84958dd8ee0a7cacdd46573175007a29c42b31c7bbc130","sha512":"a6908415354865fd35964793193eb5435102ff3aaaa806eaaba6e3f7effc32227855388ee5cfcaffb5640b80e37b8d2c18691c91fad2de858f3bc50a36298c7a","ssdeep":"192:Na+N9SCxAP+N9SCfWXXWybUBYPosmy0pQ3BdTpi6cMjTpQlnyJZzLADCn6YJ:srTD1xj1l","tlshash":"8642251416f5183642b364ff7bcb91c5b62201ef984198793cac960e1fa0e945bf1be6","size":12315,"data":"","first_seen":"2026-05-02T20:55:48.333704Z","last_seen":"2026-09-03T12:21:37.071306Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"boklsngstaysdetails.com/js/payment-modal.js?v=1776386200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.682Z","timestamp":1788396404682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /js/payment-modal.js?v=1776386200 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Q3S3tgL7RIEVTAZk12EObReoqv%2BIGyYItSilrOMTWmI0h5swnoJ6l97EsU9q3o9Vr4c4N2cQi%2F651pIU%2BlinGKRXSTRy06JVWZNRJkl7umKZiPJu1k%2Bbe7XtStIZz5MZv%2F%2BxsfkQGAIgQ%3D%3D\"}]}\r\nlast-modified: Wed, 02 Sep 2026 12:41:21 GMT\r\netag: W/\"15830-1a0622363bf\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3949f81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88112,"size_decoded":22093,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1129)","md5":"d20289d5b97d22028d2b44527dde880f","sha1":"58b61606b03115b39ca3958cabf871bc8992d28e","sha256":"e8b8f2430514af09c5383ef84ae5566fcc1e2c532caf4bb23e0a4c5701bb67a9","sha512":"9411aada710794022c3cea9f0f6ba7315ea3bc3cd1de5864f0ebf5704acdcb21dd3b887c12cbe41b461ffdd707997ba975e66556d5d6994e21a834d0c02d16bd","ssdeep":"768:0OUlCoVjDorie3lLRJW/5r7UOZ9nQqWGIDNJ6+hNDz:0LlCEjDorLDM5rdZaqiNJD","tlshash":"3e838158a6f321764a7771bb47ff4205763b00534809ce907c5cba882fc0aa597f6be9","first_seen":"2026-09-03T00:47:21.3953Z","last_seen":"2026-09-03T12:21:37.080518Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Gb@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.928Z","timestamp":1788396404928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Gb@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 743\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: acDzrqBZDz05IFOFN0ynlTV7DrrKn0Gd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 09:34:06 GMT\r\netag: \"d1dbefecf4dcac68e1c75bb71fcef0b6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: ps0NqY9dq2QdY_-xeA7xDJkuJgvuZz73rln-vVuQ5wR6C3BFi38nIQ==\r\nage: 54759\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":743,"size_decoded":1520,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c3d06580eeaef36441e5be59b5e63173","sha1":"1597d22ffeb0057b1ba9f58e2f518c7cbbd87f5c","sha256":"984c40b090d8ea734b17e1b63edd06d77ce2a424d3d2392a4fa1e0c577b27426","sha512":"9aa9307188c6790ba974d53387d76d26cfe0b66e6dda4939b94abd390cd90b5006450853223348416a9f70e6d28f252af52bca0c133a73ae79c881f8010dc475","ssdeep":"","tlshash":"fd01b598b0247c2c9a72ea23c40e817200c3af5b7b04a100ea26d0202a4e64af138bf2","first_seen":"2023-08-14T11:16:25Z","last_seen":"2026-09-03T12:21:37.095782Z","times_seen":2689,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Bg@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.937Z","timestamp":1788396404937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Bg@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:08 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: GOFQJH4n7UMBCx4Y1Oy0TZBzYkAxRb8q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"5164d7c5831a6b2ca99424447bf11793\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: oo2q7ISsPCGckAHz6uwXpAhZkuKTUF4Wsr4nDieeQoLhQI6admYXgA==\r\nage: 52051\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"05660139a0bed8e76a330bd75c838928","sha1":"e16cc8ef88ee416b94d87480bd874385056a673e","sha256":"ee767c53d4a9ca68011a6e7d5492e93936573331cae748e55ef70a527091adfe","sha512":"0eeeca9f0c813e4156f1f3b6f4304763df3f56df45741bbd0d4df5b7ce6ba4cc4af86405c4f735b345da910c690a34a298a6013c5813ecc8b99c9af55aa10ce7","ssdeep":"","tlshash":"03c080ded1011d3fc51d5c6b404f91c06493695d11517c0151b49408202564549c4af4","first_seen":"2025-03-18T07:37:38.833889Z","last_seen":"2026-09-03T12:21:37.063901Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:56.923Z","timestamp":1788396416923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O87ZeRe%2BRhpcTMOKD%2FDYpne%2BD1myouPESA7Q2JiDPypVoTYi3t3lZ8HIcI2KJP2b8x2IwfW4bp1Zz%2Bg0Ok95Y4jtDN9%2BfZ0A3hSlgiUoA5Bd4%2FHPuXXizaVT5zZf%2BT8Mmv14nGYVtUzteQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd85cd3e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":747,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:10.041Z","timestamp":1788396430041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlGK9MDIUvH6GNQupncgMDNzzwHx7OPyVc4etv8q%2FhnnbbJSTAVyrz31Mc4xYp3168198aDmfwQECI1hUdI5VgmhdB3fx%2Fj49NIsdqDwCfSxyviM947kW6O%2F7ikVzbMvatrTDmkRF3VU%2FA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdd7c9e51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1018,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:52.427Z","timestamp":1788396412427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxLCGaMB8Z%2F24jc4KEXC5BX0TtATYh8jlsptgTtIMIwqrPUHPE4iOzwou%2Bs1umDgTPAvk8UVhrPGVsvEuPkA4wRi6PCo4sWJLzEPAn5HyiyERTOJnQ5bAgcZqoYCuTSNMJUrtEV63mYb0w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd69ac291525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":737,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/book/images/flags.png","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.725Z","timestamp":1788396404725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /book/images/flags.png HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 09 Nov 2025 12:21:57 GMT\r\netag: W/\"77d8-19a6890e288\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fjcpe1WsI8QextI1723XdByjMvewXhUaiW9QysCHkmdrts8j62CNeqbtdysnic85lkGgs1Er7SXa3%2B0DdODvcTOMfUJPpCmhFWK5SByMevScgzQ9%2Bh5sxYbH%2Brli6BkafAKsxci1%2BCwK%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a350bd3989fb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30680,"size_decoded":31425,"mime_type":"image/png","magic":"PNG image data, 18 x 6243, 8-bit colormap, non-interlaced","md5":"7e2c6009cfe0db90435c9e506e718913","sha1":"aa5b9747f1fd934f465a2eb1a6119df78cd8147e","sha256":"fc78e1550450ab81964ef660b05cb14fb17e0b895b261925ad7e6e073502dfc4","sha512":"ed75a82d511d2d28b6077ed626d054944c9c9005b0282cfd3c63365da415186dbf1913651b1b3cab153b35254449aaff15eed7aed1e00101d22bc39a4f76324c","ssdeep":"768:+u/kdoLtfqovOH/rceeugVi292Hvzd6lnri5HVoI3zk6suob+HHO:+uRtqHDc/ukuIlCzNsuo2O","tlshash":"6fd2f152bf5c2e767e9fa4edd363009ba100c3ee6fa6dd4926441bf888c1a92f091547","first_seen":"2023-08-22T12:49:30Z","last_seen":"2026-09-03T12:21:37.073473Z","times_seen":2556,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Fr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.965Z","timestamp":1788396404965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Fr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: do4D5L42Sr3WaY6QmeEzTWtZJvTFdGWw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 07:43:37 GMT\r\netag: \"39c66995380b656e32b292d51c1efa0f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: j-3yVrVVDP8mIjSrBI8cbOl8FMSOHeV9ykaOPzn6WptyVtoFrOcDlA==\r\nage: 61388\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"1f0f56642654a00dd321a4e9ad1c473d","sha1":"02b3f4c3d6b72e002075b702a4f11b7c4a015dd6","sha256":"3a3649bd73b5d797fec6464b0faf5147f23e6255661b82fb48124fef386981b7","sha512":"253686e0619f8ce625f2ccdbfeeb7f0d2bdda215fa0c7ac07210355d1c846c080aaf96a8f432c26603fc25ce48dc873d97c986ad574acff03a98b79c10113285","ssdeep":"","tlshash":"93c0c0c6e134ecbf83a34df3808f0c404063782c4f0220c31040e0b1b416060cdd1de2","first_seen":"2025-03-18T07:37:38.809793Z","last_seen":"2026-09-03T12:21:37.096464Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/In@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.969Z","timestamp":1788396404969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/In@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 331\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: eqBuykUKg5MAStpFzippifq17J0O63Kw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"cd131635eaaa23c462720b8e8ee777d1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: AYsSfbRM9Ox-0PT0NrCR-BzVBBSkv-N1-Qt2OmF7MWsHWKcHkmUZNQ==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":1108,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"213daea409debbe15cee520d43cb9776","sha1":"34f8985f04bc4add0be26254943abd4dda7f626d","sha256":"87c24918d8be1eb2ee1588cdca289145f513ad81d61ca7a3518b3ff30b89b459","sha512":"2187632855251779ee93d701d4b025ccc9d09ce30793867a6f7ceab5f20a2eb2c79366edbf2e4c48b5c63da7b66be2189ff978e2e7051dd57d30f6398afeb9aa","ssdeep":"","tlshash":"69e07dc9c0127e75d1e59c92553703304acfb549dfb089a211e3c45be2135c84d3d9f0","first_seen":"2025-03-18T07:37:38.831438Z","last_seen":"2026-09-03T12:21:37.033977Z","times_seen":2664,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Hu@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.972Z","timestamp":1788396404972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Hu@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: frpVVUUkPYBKMZEf387zGE4hcv0uDH_D\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"e416c9141a864363338c010da3cb94dd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: P5rVTzz6E0n112PrrL5PMBxUHbu0okQErUpKR2Q0ltoM3DaHq-Jxfg==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"cd056e7be27a3176f3b8573c231fba2e","sha1":"3a9993ecdf7802b191e2042eaff2f157b041c56d","sha256":"f99df338ae6f50590c2054464ba7f7fa2aaac147bbcbcd203f7470d7534df1fa","sha512":"4a6209374e35501348ca571127bf8856b0cef878ea0d31a35864dc3bb15d1e547fceb769bee048b2dbf81594eb985fad25807f9a00c7bbaef519f0e3f0a7955d","ssdeep":"","tlshash":"19c08cdec2b32c3fc46a481b600a92896463aa1e029abc0250f6d81d24267458b86af4","first_seen":"2025-03-18T07:37:38.80501Z","last_seen":"2026-09-03T12:21:37.088369Z","times_seen":2650,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Th@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.003Z","timestamp":1788396405003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Th@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 183\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: HUyGG89NdlW46Osg6FO0.8n1RwbrEiLV\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"ddcd2550c5d5d7ff8589d7799df8723b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: sL3suSD2bkcI7c9zjvpZNOwjuLUkcmP0bHLrt0goMx80o330dl0nEg==\r\nage: 35374\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":183,"size_decoded":960,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"51199138b31635f838f723c889d6e992","sha1":"d4089bee1730192b96fa9a54611c80312441db72","sha256":"d1d51cbdc2a7d461bf529de2e30438e420e2f9d6183867edaddd12e23daa3664","sha512":"c70f2dd1fa6ad6a5f0901ae5e9ae3100ef9f83f50a309bd7d433086b2e33753e0631eefcced69c69830e135245e4b6b394d9d5cc1ea16fa62072ca0e0d1779b5","ssdeep":"","tlshash":"b1c022caaa702c76c9690dabc0140c4080fb19b804269483044148080823255bae81a1","first_seen":"2025-03-18T07:37:38.832349Z","last_seen":"2026-09-03T12:21:37.060052Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:10.423Z","timestamp":1788396430423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zosU%2B5y4Ec%2BAgske2jWRWhG9dVhhoCl8mjU9N%2Fqj6Uj0D%2BUor%2FwCuhnYT%2FmUFKzeJqafn%2FkUHiiVgOqkdV3GA%2FtiUuHwLyu%2FeAauETlgZ%2F86CbPbh34qscXRx31CFhQ5hKLKP7Ti16eMA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdda2a111525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":753,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.693Z","timestamp":1788396404693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"71db7e3e6cb790c798ee53e59438f4909759bba7f1b675f343c51259aba181ff\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 8968:321FA6:1D346B:2F9683:6A9684D2\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.803307,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: d1c01cf5c26fbc969018498517a10ffa3ce1bfd2\r\nexpires: Thu, 03 Sep 2026 00:51:44 GMT\r\nsource-age: 106\r\ncontent-length: 401\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":813,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05c5498a6ca3ca61f6452d7d88843e35","sha1":"6a90b8f4820427c8d1fd773e7d3ba22abd061445","sha256":"1c8f56fb410ec06e8467423cec0fb9fe54d6b18eba703591548d3159e744496b","sha512":"865d660fce4df17306d34901ca420e7e8430561a0a85840b2e2df7bd0a00a0cd14c210ad5189ee91008041d25051cbdaea0469b39900d104759823f52e56b96f","ssdeep":"","tlshash":"3b0189e5a7988451c9e503af6f3638804e1bd0a40189923ddf262f17658195f6d99ec1","first_seen":"2025-06-23T21:13:45.862706Z","last_seen":"2026-09-03T12:21:37.053529Z","times_seen":243,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":59,"dns":0,"connect":11,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:46.924Z","timestamp":1788396406924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUD2gcbewoSKjy1a1amzLvrBbysRqDYCqCj21FM3vUKn6tFOqFAPou0U6XxJYyw2KQsSWkH2bz255nMM%2FXp%2FpAHSxRpopFxefM%2B7fDk0bTEeKM2Gd%2FmqUIOCeEf%2B2cXXZwmLwiZMlqzERw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd474a841525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":468,"size_decoded":1020,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:01.040Z","timestamp":1788396421040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Bfr5DZBICMLLm0sM1VeTKYXEFDKzmUss1BTcU7m551s1X7PXIESO3RYKnYhw1Nd8bH34ywpi%2F6Yregucd9vx%2Bwl2uA9ylcKYD77jqC3t%2BaefccamM8bG2Ou15xiSRKE3tp9dVBtT3S88A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd9f8e461525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1016,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/unionpay.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.702Z","timestamp":1788396404702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/unionpay.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"d1ec8225cefce54bd80c1cab81d84b5a7d96897558dafc04a8e5b0caa4cc18dd\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: C442:359816:A7222:10F138:6A981087\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.033651,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 137f4f199cab50cbd19441dcfd7b813b19faece0\r\nexpires: Thu, 03 Sep 2026 00:51:45 GMT\r\nsource-age: 106\r\ncontent-length: 4007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9602,"size_decoded":4947,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8eb2a0a563c80433cbbff5b0bbe069ed","sha1":"8abcdf6b9c9e5418e6862814ea39902c2d12d2e6","sha256":"9352f48b6796a44cf70abf5c06dfe5636c492804ff61e40decb547e5ad36c164","sha512":"f630a577c2b9b55f9beddc4abfdeef12ec602bbb205c20b4acbb083b956821b4fa65caef028c448cbe898b540ea2bc061847f087be2fb9c091b75e0614467959","ssdeep":"96:Z1RAt6xwxYt2cR7hFTNyQ9g5YZMTvH4H+mPUTVBb9uq6ZFYAzLNACmg1nJswSvOv:zRvwxY/RD5yQJGTvH4hGB8q6y/06vgTd","tlshash":"011285ed9bb4a0f039cb6b79df674ca9351bb0fe67714684623cbd589683c898608d40","first_seen":"2025-11-30T04:12:51.91023Z","last_seen":"2026-09-03T12:21:37.074164Z","times_seen":11,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":54,"dns":0,"connect":12,"send":0,"wait":10,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/No@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.990Z","timestamp":1788396404990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/No@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 210\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: x5hMioC93fqo94ywowGQ2mcv9TmRvRs1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"ab07e6a99882d77d96c02aa003fda888\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: JpSrI5IBslJQBkHxtQUFSiOsHOhx4DBzNpMgO18KSjywHUoKbiV6dg==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":987,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7006b4a6c4aef50a01790960fce2a4d9","sha1":"a4e8bbcc5b64273e423c0f81cc1fc677edfca576","sha256":"53d4a46ae56fb944ac07a2e2f63c83fde841f39d8c951ccee9d6d4eabb0cabfa","sha512":"137c1e98ca786e5b4219738ad5a4f492f649e2608e3e75cba7eea6370f2fd8da7ddb08d535d3f63aa1ba29f04b805fd84a625005c9d2233e759a6cfbcf7c1ab1","ssdeep":"","tlshash":"21d023dadd37ec35925d0fb3910e105c8853505d1f5151af4550d435154fd94da4ab71","first_seen":"2025-03-18T07:37:38.829529Z","last_seen":"2026-09-03T12:21:37.079379Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:50.924Z","timestamp":1788396410924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9N5644VUTMIWNDvpwbj4yKbBfyPvIW8xT2GHu79Q20BEBC38s8LQnP%2FyikJo5yvF1AZ3AuqnXT8pXk46LTcqGVWXXWsZFvD81w9myaHS%2F65udl2SWa%2B7oWJ1OLQKV0ERXV%2BpHhdomF4xw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd604b9f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:04.422Z","timestamp":1788396424422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEQ8KsLBgI053ezYXZOI2FqIivsd1YMwYeuc8C0YVk9LwhafDUUuLijYKNSZs3iAMK8SURTMTFSEv%2Fvr3psEwhSIqNezhDw29IlkkVJtJlhhC8mp0WDL%2FBCnXz0MpFcCb%2Fug7i35aaASqg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdb4a81b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.680Z","timestamp":1788396404680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 00:46:44 GMT\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1025,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-09-03T17:22:24.803078Z","times_seen":69738,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:53.926Z","timestamp":1788396413926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMal3GQW7HNc%2FhI7ZMoEdK1upDpBCj9LnMLAzijqRvbVvnJ9NC0CceBoAPAkTKEMmZvZgPo63%2FLCEcgVJ7ZEAxoriMQW2s4iNEw%2B9l3sqgPYCnHN4XzK%2BDbAjZdezE1nE%2FZJd5gsbyyKDQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd730c7e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1022,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Kr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.983Z","timestamp":1788396404983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Kr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 923\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: CtPZihriI8Fo1dbtCugKQahWbAsyR8R1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"cc87317ffaf663301d288dcc4ac9c650\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 6tSc780PJb7mX2KLLpayO_Yvk7E_0kEBWwKchG-pKros4P46h3f8Lw==\r\nage: 52050\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":923,"size_decoded":1700,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fb34366337e6f2df0ee908fcc1500ca8","sha1":"0fb8613c3501758e9c7e15a09fc5a203722bfb83","sha256":"62d38d05c602b29f31cb923a213c4d6788b4023ba395040b9832866021ea2407","sha512":"674ce6b07ff79e355ef1013cc45047e00b7f360d9bd6f24979583d8a1cdbf82d29bbe8556d57e52e040254110323659ee7e9bc5e1787d8dea2dff7dac8a4d548","ssdeep":"","tlshash":"ea11f79bac881d3216fade31e50c4635e006350c8bf888b6629f74f44c67cbd8b07215","first_seen":"2025-03-18T07:37:38.844367Z","last_seen":"2026-09-03T12:21:37.07999Z","times_seen":2652,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Is@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.978Z","timestamp":1788396404978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Is@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 203\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: IUjtjWOU2GDXzhSHCOxjjZ.k06uLAhmX\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"57d60b5ca317dbf982310e8d79048791\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 1VfbILOFclKIH5ewMBIJ5Qq6ozkGht-wXcmBmnh1pBqjbSHO84DsXA==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":980,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"69ec21e6295d1570ed3817745f59cacc","sha1":"bcad7a543dfb9ccefa72b7000e6a1dfb9727c927","sha256":"9dd177d4e977f84feb5276fe49e2edee721015271fef3e7e26aef259002dad18","sha512":"72987779458f71b5b668c6bbee556800e1554eb6818ab8b08efe6a13ba98d66db45d4dfa526e56fd4429f49226dafa9c7d276d3d2be93d1aaf5e87eee1a4df40","ssdeep":"","tlshash":"b4d0a9ca970aa9a581a90ea2810c0042aa670d3908021e7fc5b1c416261e219ea8a5bb","first_seen":"2025-03-18T07:37:38.802083Z","last_seen":"2026-09-03T12:21:37.091565Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:57.039Z","timestamp":1788396417039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5hDsQFyA9je526BBHgEwWY44iagbXy0Xbrzok7SnqvU4hCGEkS0GxtgDOiJrZowaRk9yHcPiJiEakV1EwPQ%2FtVs7AdH6CWLUbUWSIxEFZsgifum9l6W77eduMJszuet2S%2FMI%2FkWg2M1sQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd867d4e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1016,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:59.039Z","timestamp":1788396419039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCpGHUfwtRyUerrTj878%2F7GCbP9ztbh5RfTq02U7TRXRZGNnA7rRuwofU2qvsRdjBIo6bklO3%2BANT%2FEVwf6pjaSmzQQRsdi1xKxyVJWiL9QSbqKQhkUN7Txag818MO54IBcR4p%2BbQzcRAg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd930dcd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1018,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0\u0026ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.895Z","timestamp":1788396404895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0\u0026ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gQ98Fji3ZQ%2BnGjZyV%2FGAJmjvlmp%2BIT%2FnXyRflDg7QpgbW%2BCPXRfua0xUb%2Fqmt0tuF%2FixbXmwuDfNxZ68Wpx5dhni4YRoGTVReNK6g3p6VKeXoVvH8Rchk1LDS62fceXjwxupnty7rnLyw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3a9a041525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":747,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:01.423Z","timestamp":1788396421423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTBW%2FoJMBuwldgOwpQPZEe7lHsGJmozyVeuoNFTKU0ejTqctQuGcRasMP10O8ju8Mf2WAvkwCF%2BuQ%2FvDIbyhSkQOFt%2B0FZztsWRpISanBx2%2BzwVjkWhByL8VfwwtKTuSqDPJkG86Xz1aMg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bda1ee591525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:05.924Z","timestamp":1788396425924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCaeaZBRYmeIYb%2B0Z9Glcv1%2BeZbG09%2Fi9iDds5ArozbAYIsxtQedEOa%2BsAxDwZSt7NCiBqw05uzJ5C6y5omalNA9%2F7dAGq%2Bv%2Bs1MEzptt7yMZwRJ69eC9MbN28ya7PRzaoT33JLU7brBXg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdbe08891525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":747,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/js/support.js?v=1787859200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.686Z","timestamp":1788396404686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /js/support.js?v=1787859200 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhBeUbbvchWwTJq73Eg6VJOo9hAvoJrRwobBn8SSWgd0nY855pcCHHuwTt4lgDyVrSzfezY0vNL6SLm3o7rzcy4785jYk9uJu0CrhqBedpkIPIVmwABs1opkmzAXvEpNOxTjNX2WPi3ZyQ%3D%3D\"}]}\r\nlast-modified: Thu, 27 Aug 2026 21:34:38 GMT\r\netag: W/\"e474-1a045257780\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3949f91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58484,"size_decoded":17881,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1750)","md5":"ee09837d2c1e6d48b4bd0ca7b95c5ade","sha1":"334cc11ba8ab339788251fe95e8b65e65bc23b57","sha256":"f6b749b13eb9f88a8094cc021589d07c838ca13699198185127f4f22b4ce6738","sha512":"d9ea1ed69bb61585b322cfae6abc1aab13a92e0da3db725c62b4ab61ced0715844d6595fbf71815ad41c02fee7fb047c30b0c8c7b890ca1619e885652967a797","ssdeep":"1536:My9VApRhRrIE6kKrGcB44MvfSGgqT1442k:9VApRhDkB5YfSY14Y","tlshash":"204309692af7102918776179bbcfa70533219007a107de243b9c564cbfd0be592fabd8","first_seen":"2026-09-03T00:47:21.421095Z","last_seen":"2026-09-03T12:21:37.043355Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Al@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.000Z","timestamp":1788396405000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Al@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 841\r\nlast-modified: Mon, 19 Jan 2026 12:32:08 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: d8UNd2ISs5k.i7BAh8IeEecgezrr_XVz\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"485009653717d2398e358a82ec07b75d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 2b3zoSZ11iVu2UkrVPMB1vdNOiBb3fnC4SvJ0q5moEIQcmsMmHJ_cg==\r\nage: 52051\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":841,"size_decoded":1618,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7945f25f415fc4f8a3637901691881ba","sha1":"109ba619c1daf2e8d0e73d25e59b036f88309828","sha256":"80d29f02ee298ce7682a62a1e6758bfab2f73def7a6372d016f23bbc3e3cbd41","sha512":"f7984d2f2e1bd7bd03266c1d1a01851456568242feb33d83a7874902bb5aa8faafdbe995da676dccaed5b3cd1f1eddf8a3dec0d40291c0ca698fe94903981bc3","ssdeep":"","tlshash":"27018ace922f18a8d1994e2369d55341adc9f408d210ac58c397425650972288e152b2","first_seen":"2026-05-02T20:55:48.331122Z","last_seen":"2026-09-03T12:21:37.046819Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Se@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.002Z","timestamp":1788396405002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Se@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 190\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Lagti1ji9D1IZ295YBVIqxZDk4f0aPSn\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 16:44:52 GMT\r\netag: \"eb15b299ae31a61cf4ceff5c7a797102\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 4kfCdKYjMbHgaY-e4EuYRNSFHAKuJ1ns4mAFJr88eeay-KZBaUys4A==\r\nage: 52051\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":190,"size_decoded":967,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"bf63d7d1b38016c93634b6ce25646f52","sha1":"45c8df100aeb8892417c4b6a761d3e5f6283966c","sha256":"4dccff3c1b2f72ffef0a2a6a416effa36431efd5b1ff65e29b5b69f69770fead","sha512":"cfcd93939064c284de0fd14322833e83a80c56fed36903bf46cc3810a18553db2b0609aabea5393ea16a0f27f6de2ca71b11fa09c3aa06893574f07afaa6bfe5","ssdeep":"","tlshash":"52c022cb82029db790e6c926452400c093eb106a0e1811468430c12809d2110c2e69f9","first_seen":"2025-03-18T07:37:38.79936Z","last_seen":"2026-09-03T12:21:37.042158Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Tr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.004Z","timestamp":1788396405004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Tr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 565\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: h7ghocMscvGvykiZSrghgAFYf8wxj0J9\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"596ccdfeb22c63a3fe5982f5a25cbad2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 9QEC8RqAFmaKUdZCQhn25OPHKlilkp2MIEs84MOpY7bvnQFJhZkW0Q==\r\nage: 52049\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":565,"size_decoded":1342,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"af8339e88b4077bf0701497dc34e8a40","sha1":"726b5133e255ba75a15a082243c236d73f10b858","sha256":"7a4450d4dcf596ad7ea1ad646dd667879e54d0714f241f8ab4c1d62120abf70e","sha512":"8ca04ec266cc3ddd851ed39485bd9757fd6b173b995942f13c642380a0808127db53940553cf2253e4f6cae130e203de14a28a88c20e6cc3ed1327a073a6d19f","ssdeep":"","tlshash":"19f020fa21dbcd0a825e860367a9aad2b14f0c8846512412c0f09c6ae07b4281df677f","first_seen":"2025-03-18T07:37:38.794053Z","last_seen":"2026-09-03T12:21:37.062745Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ua@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.005Z","timestamp":1788396405005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ua@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: ceUS0JhkmHRzt.Ip4sNnL0ulv2ht5I9q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:59:48 GMT\r\netag: \"082d687777aec3c98924cc3d7fbae7e7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 0qFZLLyJ6AAqZEl-ptADmkKAQSsdx7S_8aOMbQH16XFNiuem9RrXCQ==\r\nage: 24692\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":925,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"93732b6c8c2b8039830b0ada2b781a0f","sha1":"477e55b42a9634fc1abcbcca6c31719b5c81d506","sha256":"f8db51d49594ed54a9d2781baac44ed6c6949599a51dc2f1c9e7c53bc5fde211","sha512":"09a0108a44ef1187c51f358456557ed8c99ab4d391834793d7fd0fe167af5fd014bbbbac74cbfa894166f6c9a51a7c8ad4f7705ff7bdefa6e50c2c53d444b971","ssdeep":"","tlshash":"2bc02beaf373dd7fc0dead37421e006980932c2c0d53790700d9d41823114e1a9c25b8","first_seen":"2025-10-08T08:50:15.434274Z","last_seen":"2026-09-03T12:21:37.084059Z","times_seen":278,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:46.396Z","timestamp":1788396406396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jq51Cogy7x7%2FoxpR7H2NoL%2B7SuOiFOgYionJissNgqdNqgZcVl4TAlXb5cRNVargijD55rIIHFUVoGnpgX8hFEHUV5BauvFojk1uZpjHGtpozY56KYdX7IO28oVhE4OsZNdmtky5%2BCemDA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd43fa601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ro@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.993Z","timestamp":1788396404993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ro@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 9.Efoj4gTMXsBqYfJgc8j42z9EWEUmRw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"f0315a3e969130a46e5e014b633e7fea\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: gySooEdv4Jk6Yp0JIngNZGGwSQKLyCFT13lvv86_--8i2ASBrwnAQw==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"295f0ce06cafbe2370693e85aedae78f","sha1":"d3baf4b39c89f9042a2c6f231c1da632cb36f5d9","sha256":"768f0b40d2b9a01863f8ddf5967dd75fd1a0bb2161aaf281aceb32140943aa09","sha512":"dff161bbfbae575904dfa20127d262a8f6e1590cff49a8a8d839d4b763965c00350992637348cb9013bc081db6061e686c36378d16fcffffa437de16e62431ab","ssdeep":"","tlshash":"44c0c0cae1342cfec32b88f380ce01d08067ac3c0e1320c30490f071b8020344dd6d62","first_seen":"2025-03-18T07:37:38.810667Z","last_seen":"2026-09-03T12:21:37.04752Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/css/support_parent.css","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.679Z","timestamp":1788396404679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /css/support_parent.css HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BExOc1UvYQGgaTomnOyDe8vET3vedqnfJFP9FxPrkW42%2FW%2F%2B8BTUgZ0UFdb%2BVHUFf2qwplP6ApX%2Ffo7VBYuNYmM0cr5tKTkI36lJ8cItT%2FqX4B8r%2FAwGmkIGAr%2Fq4E9GrEV%2FelXIc2kW4w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a350bd3949f71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T17:23:48.268081Z","times_seen":18259592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:07.041Z","timestamp":1788396427041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04EtdWz4coRqtxt4ZTmo1WeBtguo4ANi1C9ChsHijS%2BIEE3PNBXbS9HdNUd91JqaSHyZfx3s9YlgcgS6A9%2FSpqlLpwcBXTXUlWdN0eMlG1dkqTizOOuMyFwkIimsj11BiF7tqOqvswLmsw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdc508c01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":468,"size_decoded":1014,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:09.040Z","timestamp":1788396429040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rNaBLvCJr7UuKpJuR0huVPTTZUl%2FUfVHMFZ7jm3WKd3AzOmo%2FkugDcVWG4swv6g1gL14smk%2Fjp4zGVPOihCZZ2VCXieUBS1jo%2FFeAfEZGsW0BIqSvpOz%2BIMTsJ3N1RXkLp7KZb2qtI1bw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdd1897c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1020,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/jcb.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.699Z","timestamp":1788396404699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/jcb.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"2726b2424d363025096b1a5ec48e0c86efb818a4787de8105f29c8ce44f69869\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 6D16:377B00:7845B:C29F4:6A97FE98\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.033143,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 64b8c62681e8aa36d3e9bc4c8183c9ffb69e0ca0\r\nexpires: Thu, 03 Sep 2026 00:51:45 GMT\r\nsource-age: 106\r\ncontent-length: 1536\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3202,"size_decoded":2475,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb2d74d95894464f28bf7cb84060d5a","sha1":"951e92034847cddab02bd6a2777bcdf86a6dcf64","sha256":"5feacae1824b67253308bf7e85e5d128bacf834d6c422370eb4ecafd206444dc","sha512":"0ff79dec8263bdb7d182318aa67a2edba5e42cc96b80a81b9a1b6b099caf19a045630f4f988f2c1dfc488c25267743d1a5bf13246f103bc82221d22db38f9e14","ssdeep":"","tlshash":"0e6184eedb79e0b5f04593acdf105d9c260f15ee6820c368c63daf4a45b3e894a48680","first_seen":"2026-04-05T23:18:09.645402Z","last_seen":"2026-09-03T12:21:37.040955Z","times_seen":11,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":54,"dns":0,"connect":11,"send":0,"wait":10,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.703Z","timestamp":1788396404703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b9851849fc716685f0543bed6e51e61de8c314460c47403a1c1afe563b259132\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 5CAE:3B4F6E:76B611:CDF89D:6A95439A\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.803613,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 89d70d6e478e84c872bf7f3bb578db8471329217\r\nexpires: Thu, 03 Sep 2026 00:51:44 GMT\r\nsource-age: 105\r\ncontent-length: 730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1418,"size_decoded":1670,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a44ff01b20aa7692ee7e4579dcd478f","sha1":"398894130418b3c7b30e32f8ef5f19971e3e2493","sha256":"eea18aabfd772d504260fdced1e4ed10e36483265239094c9e8abccaf0feafb1","sha512":"b7a4fa7daa06821c375201057c9baefe60b3f9522a8bf0c49621b26c1114eb2bed75682f4776eb8c739175057d1e367284b87d8d947d1dbf2b5004ba4de3a297","ssdeep":"","tlshash":"742122ec276488c04844cbe2bf3a1acd0ddfc5d32cd5cc59e51c5b0a658463a9cd1ae7","first_seen":"2026-02-01T07:53:46.692926Z","last_seen":"2026-09-03T12:21:37.078376Z","times_seen":208,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/BLGn8Io.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.109Z","timestamp":1788396405109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /BLGn8Io.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 14 May 2025 15:49:45 GMT\r\netag: \"9838cf4d26237aa2c5d16985632511f4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Ia6ddl0ItvtNEfMjGheqQpzmXYo8bp2JWDrClUrmRHtauWnRprYWAw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1864852\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\nx-served-by: cache-iad-kjyo7100048-IAD, cache-bma-essb1270027-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 24, 0\r\nx-timer: S1788396405.146805,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":590,"size_decoded":1346,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9838cf4d26237aa2c5d16985632511f4","sha1":"88a056c8beebeff2d9374c2267aa5165ced800ae","sha256":"b248e2f34aee3aea1e320a58a402200f25524876a735671f3309f0f1bef401ff","sha512":"996534b4957367c419e0928970ed2d2984c26f7d574fe6c080f4c9d85443b99ec815bcdd2baa8cf0ebba83f2d3b25d5d1da5b7e1789a4ad268a097a21b3667ff","ssdeep":"","tlshash":"eef0419527bfc8034826a1d0e56d8009f721213f2f603a5a4402d79897d7824ac84b26","first_seen":"2025-08-11T07:36:01.691759Z","last_seen":"2026-09-03T12:21:37.029286Z","times_seen":11,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/book/css/styles.css?v=1771629300","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.670Z","timestamp":1788396404670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /book/css/styles.css?v=1771629300 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xi06mCufPjLT7aQJZ%2BIKIpIbSs9nmUzxhpCmZ1xa6jYQWVq20Pc1WgJp%2FjBC3fOzvLVpAYFiEUlt6ZZG9sa4KbNinn6Nmbt7F84dlONlCwsNTkclbOIMKXQj8APpkLuVHNEKci0iSUus2g%3D%3D\"}]}\r\nlast-modified: Fri, 20 Mar 2026 12:41:44 GMT\r\netag: W/\"9bdd-19d0b441340\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3939f51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39901,"size_decoded":10106,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (388)","md5":"327907828684af6e145e66536a4b2051","sha1":"8ee986c3fc5557fd896d342543013850fe02934d","sha256":"f480303ed1feb42b748803554e87f3d2504ac31836d88dc5247986b21ab76ba1","sha512":"3bc61963142bf02bac5b8d0da6ee0a374532525f6d0b514d5cfbd5cb8baf96731ff4d211fd9ae3acf3376d556242ae2872f969ca46f0de2074f0b6e1ef495c29","ssdeep":"768:cq82ykhxOn51et/3gJQivtnlOtQAczFHWM:cq82ykhxc5W3guivtnEhchWM","tlshash":"170384da2bb54950b4278a787aa5974573198003810eed7cbfe1206ccfc93a5dbb27cd","first_seen":"2026-05-02T20:55:48.357566Z","last_seen":"2026-09-03T12:21:37.048559Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Rs@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.001Z","timestamp":1788396405001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Rs@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1577\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: nvDFfs65m9KVPjQlXNBKnPhIVtT6YO3i\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"8fd825e8de5f5674621c414036334ab8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: l5JMRnUeirY34SoeQaSKJnDNLF4WESwKsBCoCflf0zJPzqMDymdOzg==\r\nage: 35374\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1577,"size_decoded":2355,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fa37d9f79b90267dc35c9938ee6b7bce","sha1":"9c4becb12865445e4090a52af9b2f591eaf4f1a7","sha256":"c150310eb75845526e7468cabbc0bcafe6514f4d67204c39beed7f1d86a03768","sha512":"c35dbceedcaecda6fada2eb4d9d8fdedbfe2bf2c4012fb86b9c9e26209577c869dd57d1d03b1eb0c901f2d509697ffafb2fddb9bc082723e7ed9bee59b47ad08","ssdeep":"","tlshash":"a0310c8b5509ce39c8ffd4a1d29891505d9f26f446e1e1589539c0f558f40d3a16c74d","first_seen":"2026-05-02T20:55:48.379038Z","last_seen":"2026-09-03T12:21:37.08458Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:52.925Z","timestamp":1788396412925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHBTBCnizpZuupkxdzgp4SHKE%2BvRMFthlpqqMW%2BKu2jT10DLHwmwnHkmpX0e%2BBmb%2Fc4de0eDJPrbyUIDAi5efnI1On%2BnhKj6qH6HeWk2wgkvhSFckGc4LWhxcsS7gv1hNgxbqjeJiBLKTw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd6ccc4c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1020,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Sk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.996Z","timestamp":1788396404996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Sk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 667\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 5Vn7g5U11mMwz.ncAlZGC3Jk770UJD4h\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"f21432238d9b500d9fff60597257ceba\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: l_kGxCoMoPRvMxjODvbXW7JlEGrfxHlU9bGW2JA3yCi3pdoR0lQIMw==\r\nage: 46407\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":1444,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"5f53868765d88dfddc6d63c616024e20","sha1":"0db7c4069d30c5b127c8fef2e59f5c0bc1f68046","sha256":"ec9053585d03aae9b9b864aaa7677b6be2d6db8357363c7146de3069704a35f9","sha512":"7dd5139366a6085839ec12c6d95adf5ebca668cd5712ec82850524469cc05d56a28843f2dcbfdca24e8ec73a200e6506175d5a55cb6159d66be24f08ad8718c4","ssdeep":"","tlshash":"57014e99b3dfbf3a618a52274085839866e98248b9408a7385aec49b29020d04b49a73","first_seen":"2025-03-18T07:37:38.796579Z","last_seen":"2026-09-03T12:21:37.024123Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:47.896Z","timestamp":1788396407896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYunAI3w9vN8ibSFoKNkjZCh2uFUjjos51V4mlbUcewRw3B847Eso3JrUGuzPUJUFE74lT4hKA7zlrUMOk01xaB0WGPAnJ4JXXF%2BtRGhbkzPcfOoZt7i%2BFzkRVW%2BD581uVco9B6NCRqI2Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd4d5aee1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:03.040Z","timestamp":1788396423040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYT1WmsGxGgwh9hYqUWjavFJTEk7%2BYM0eVcwt1mZGwPWeA07fKVe3qBbbgwUln1lQ%2FPRF0LeOcNxRTxdHPHvQw5hMTKCwX6NbdpBi0JzCBN1u9IAzsFt6q2K75rOXUmxg9EjkOcExwBnvQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdac0f031525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1014,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.695Z","timestamp":1788396404695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"228ca07b117b8fecc04578f9b7b5280b98d49d04c686c4c2afdb953a22b6445b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 83AC:3ECA99:69A1FA:B914AB:6A94F73A\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.803459,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 672f6a77c06e8c348764a213e41d9668f501454b\r\nexpires: Thu, 03 Sep 2026 00:51:44 GMT\r\nsource-age: 106\r\ncontent-length: 610\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1204,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1170e846efc35f50a41fc10cf37d5c4f","sha1":"ee6657741ec8fed7d9ebd361b5de2593397c59ae","sha256":"8d837bb887be5ac1a959c8bfc8874dc35d1571d5953efa560b1f317ed6f56bb4","sha512":"88a7a6ac917560efbe30ba89038b95199be369f60781f32613cbb1612b03d6abd6f5423f0051219c05806365b5492ebd266f45c9ef5e27d6d1740d4ecca9b036","ssdeep":"","tlshash":"872167ed3f9428c9c4c24fd5b615150d3229d0f3ac455942ca003f0431c986161bebf2","first_seen":"2025-06-23T21:13:45.828877Z","last_seen":"2026-09-03T12:21:37.012014Z","times_seen":243,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Gr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.952Z","timestamp":1788396404952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Gr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 257\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: QpPXZGAwsz_p6wNDHMjMV9CamEKSiLDP\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"f9a5f70a8f8702c501beb7daa292883b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: mp1jRMMhpUAO5dD13zDyzp6j8yHd5vCV7g_LhiMbJOqZzz-d9O8ehQ==\r\nage: 52051\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":1034,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"550d5f7bd750b6185f6586b371b39698","sha1":"08d8f835e39732003eabd9029e1bdd50cfc0e4fb","sha256":"bdc85911c3912c973e3170f85506cc6e29d83586bad949d4188803f95b9e7c39","sha512":"371a1814fef91d90c4cce566fd0ae6ac4a27c074110dfa85b603bbcca6ea59c9c50abb35d571bd94fbe578ff22360d2ff893891e0f13836ef705128409bd171f","ssdeep":"","tlshash":"7dd02bdda22e5939c5df4fb30055448080531d695602a305b970c8592b0f02892c82f1","first_seen":"2025-03-18T07:37:38.806728Z","last_seen":"2026-09-03T12:21:37.075687Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ge@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.981Z","timestamp":1788396404981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ge@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 366\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Lg5yOCDuhDlfShUcVrHfs.Huq7LOUFDv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"c53bd4524300c027e11048ece117a603\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: T-isqQEKa6Yb6WxPT3-MGUQrOp2XIhSbyTsmkXeE_odJhLkoVt7ZKg==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":1143,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"bbca025d77b9e6d52fa7107046656ec1","sha1":"a9834dfe00a25a54e12fe3f83851ed5ef78befa8","sha256":"584aad0731bad63a3705ae0f7e819ad38267266a60a7029f2f863a568c369970","sha512":"99459001518df3b427218e9908413dc22b46a9045104989b64e2b4bcd9557112a2f008143b740b568f1acd21ca3c08af4f0dfe8465249a5731f6c4a1707b2098","ssdeep":"","tlshash":"4be068cee7d86ce5e51a695780532a68a76b042a0a01ba51a0688839857a2d5ca93e60","first_seen":"2026-05-02T20:55:48.309225Z","last_seen":"2026-09-03T12:21:37.022489Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:49.924Z","timestamp":1788396409924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j00J3p6jT%2BTSCxKxsjZ867%2FYSdbB9gC1hiivrpAThNnVnCNJA15t0AiEFweCgOcBSHMuRuuoQvdl58RHNXbd4MHHUvUZSBaka%2BXLuYZ257bGnu73J9c%2BZeNgx7%2Btu3Nb1Q5Ogp8GIoY2vw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd5a0b721525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":468,"size_decoded":1020,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:50.928Z","timestamp":1788396410928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XM94tiaCuQMv%2F2aYNRAPU7T3qhR0OLTQsNAMyh4x4lq%2BWw5CRT%2FfGthXYvkhM3uFrvjrYEvVW2jKiD5E2zoLK7bfcggRoepOz1%2FTRnz1bFvGsIUyJysSN8uZUQ6mMHI5kXX9Hq3gMvGM8g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd604ba01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1018,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:55.039Z","timestamp":1788396415039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Nv6IgJG4j3b1umeklyVrEVqfJV0hEenqKFNfLHjPrn9EoWQ7JbhtQvVESC968OajpIOHS3rW6HM87uEAwBYqV61YNu7xN9aGE6T2J4VMoSQ%2FmdXs9AC%2BAoNb%2F%2F7CIhAmHT7m%2FzIVU2nVg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd7a0cb11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":468,"size_decoded":1020,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:02.922Z","timestamp":1788396422922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8HlVF%2BG3fbAeOl%2F9G0CElLxzOwDHNG%2BwVouRls%2BQmNhp30OEiq6Rf84gdYeZ7PRjfeb0EtZ8JoL1G0oAs4q4x8RGSi7Qholarkuf7hmnpvymGUln%2FSgu3o78lKKfYHVWGFEzCnsWrbtaBA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdab4eff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/css/support_parent.css","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.748Z","timestamp":1788396404748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /css/support_parent.css HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2Bii3JehoSg3FWzJf9ue1o%2FLHAl4Rc63n7dbPckecxyjPPDTIol3qeXj6orc8mN9xwecmWSLnvGwdJJH6xqstoFJ%2BjwWScaabImYe3p0AYb3%2BEEA%2F%2BMqbxz83V0xMPlLHUafnO%2Foqj9QiA%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a350bd39a9fc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T17:23:48.268081Z","times_seen":18259592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ru@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.994Z","timestamp":1788396404994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ru@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: pFEONeuLUhcoXabl3vLGRgdMd8xjU8g5\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"762549c201af2e8bac9c64f26223477c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: wxIERb5zBOxNbsR90cxipAP7KdtVrgE-GjzS2qdxrcMj62HSV1y43A==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":941,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"29986cc4f96a1fe5ff8ee2b81b8b2e77","sha1":"8bfb65e111012579e90d6797a1f2ca58693754a2","sha256":"5a8dadd250f0429fe5b5aa7010ce22e2f8145607f1137d79d4734911f7fc8217","sha512":"3308128d317896d5cb81e9ce20fa1a4dec3bfdb0877a11abe826af21631f1e64bf7af70adf32d2ce50fe14673fc0c731defa2892770d65f58f3e7d70b06826a9","ssdeep":"","tlshash":"29c080dad3d11c7edc354437d00517705593454d0553940b52f0d514950608596f57b1","first_seen":"2025-03-18T07:37:38.841719Z","last_seen":"2026-09-03T12:21:37.092166Z","times_seen":2395,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:07.423Z","timestamp":1788396427423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDjl5zaRxtys6oUo0j7WCjDy0VOZYGoIPYzdZVIJZK0B9kqEBMCiiX9q1gEs3mzUUum7VZ0sMUHo9U6SHwsmu%2BK4ZPu7QhGoLEn%2BXmtXoaPa0K1NW0JchMFopKZey3TbIbQbgeMnLtYBjg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdc768ea1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":737,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Cz@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.946Z","timestamp":1788396404946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Cz@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 367\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: IioBtK9h9vc1lb000W2L_aHhDOccZ8B4\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"0c197961028cbc8d3ae9248a605ec163\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: BRewZfy63RKcUPRbLitorhtX61qX8tNu_TvI1Digd3XVukj5TgDltQ==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":1144,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"cd40cc9fe974a499034d712cc58034db","sha1":"7cbc29592a15f448272a43ee8736d4cca4bb3844","sha256":"d1461e9784ab72390616a8edb0d0b315d05d973e514fae94e7d025eb9517ce89","sha512":"c7b9c24057b4c4e340d9e2df4197159c6dce64ddf3be654a1820bb3e2d800a3b42f443112f377db7cea2c769fdb7759f591dc5cd2d9ea1a30e0b32c74a804c5a","ssdeep":"","tlshash":"8ee060cf2bada4beca0fca23c804018ac81f25ec26b1f1021a0cc7200e2e08604d63f0","first_seen":"2025-03-18T07:37:38.822119Z","last_seen":"2026-09-03T12:21:37.051373Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Id@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.975Z","timestamp":1788396404975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Id@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 99MJC35LUayQykojlfd6DwpvIHchOEVJ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 06:43:31 GMT\r\netag: \"5a3a7c522dea1916b4d7d320af467e18\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: _peWO0DqDZlROHKIy2U33D4bZCOe_eSOrWsY-3LPRt4Yud00yo5TmA==\r\nage: 64994\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":148,"size_decoded":925,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"5c4252c8ec7d3965ce5f737eaf6ab577","sha1":"e64cf033f26752bd72278e737366f9fa1071affd","sha256":"7ef607bd9d49e3ea22a65e980b55fae5633edcd3cff0be3e7e00f238ddd905af","sha512":"4ad6b096a6067bb523956d02e61ff3ed5c44b7254bb359def2e993bf1d95ea14cfb66f354163b0d52c528bdda020345722642269384d22b5cd77d26bb8f4978c","ssdeep":"","tlshash":"7cc02bedf267dcbec45fad77425e006d80532c2c0d92b40b40d1d41e13254d1e9829f8","first_seen":"2025-03-18T07:37:38.834755Z","last_seen":"2026-09-03T12:21:37.054073Z","times_seen":2953,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.924Z","timestamp":1788396405924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApKkY%2By%2B4hrwfiSAhouiPJh8GUHV%2BtsJDHq7H0mu5THBUIny2eOJci%2FqvY966IBNDMXp7dz11XUntXt87YNtMKzWTkKriw9rkeRSs2vpudIKRid%2FOUSbonCR4DmlGl1pkjvoOsmc%2FN51Kw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd410a4b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1022,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:08.041Z","timestamp":1788396428041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYUWOIjbddmSgv7SRdh0%2Bk%2FlvMwvEF1S6%2Fb%2Fa4lB3y%2BanibbfuYrcReHHoEDJseDRHTGzYyp7%2FztGsggj2c9v7noZWZNuqXeIonKzNpiV4GJ1jb3lTP3P08%2FnNzkJTVnNpJgEzF7fsvkAQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdcb49201525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1024,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/hotel/max1280x900/884270639.jpg?k=70db95b41a1156faa17a89285d23c3202ca10b8cb31f995d980f33e0d34abe73\u0026o=\u0026hp=1","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.690Z","timestamp":1788396404690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/hotel/max1280x900/884270639.jpg?k=70db95b41a1156faa17a89285d23c3202ca10b8cb31f995d980f33e0d34abe73\u0026o=\u0026hp=1 HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 105736\r\nserver: nginx\r\ndate: Thu, 27 Aug 2026 07:07:09 GMT\r\netag: \"ae2d8e5f82d3e5a777e9d2fa53c1c222c34a6882\"\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 2Tk9strMDtSHH3EB4EzrvqGblRd02TXKcxVvf-yUq6slte9RTqsZtg==\r\nage: 581975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105736,"size_decoded":106303,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"3e78ef2d55dee4364e8beb9bc22f2b37","sha1":"6980332e2763368b32f0a9ec022db5f452331ec9","sha256":"7cd863e27b88b55fbdbf53f18470d1ddf98ad628d4d7eb88f310c7dbd9b13d9c","sha512":"9b37e4844a8b53a4b65ff5c3101f5185eaccee7729ea5ea2ede60f74500145e02512f0a6212871e030a1eb192c0b4aeba106caf970cb8f9565361e9d8fd75162","ssdeep":"3072:brMlS2w4p9jHGSbo7BK8KEm6hpbm6mgAsXm7:bgC4bjJ4yEm6hlmmDXY","tlshash":"29a31203cdbbb16c51aaaec860d21e6ecda14936135ac2403bc71abec01eed4d25d7f5","first_seen":"2026-09-03T00:47:21.44392Z","last_seen":"2026-09-03T00:47:21.44392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":60,"dns":12,"connect":9,"send":0,"wait":31,"receive":17,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.698Z","timestamp":1788396404698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a898221ac2c9b26d70e44e28b377e6c8e225ec809b34f4fc7aba1f6201e446d7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: B216:1091D1:72A587:C7C954:6A952ECE\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.033029,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: e27e860610ec045f35734f4a6f66dc3f28b4a7e0\r\nexpires: Thu, 03 Sep 2026 00:51:45 GMT\r\nsource-age: 106\r\ncontent-length: 1105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2078,"size_decoded":2046,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71dfc3b50c775ba7c65e51141f4bbb48","sha1":"82e6ca5d19b86e4bb2bc659395f9bf61f0f08ce4","sha256":"8ef8d5002bc7364c2468f24156a6cb5bd9321a4461f4fda5de5aa21cfc9a13ca","sha512":"c7e20a645942511d895a273993ab5a6fd168cfd8e46f9b547f5fb57c70d962301c4d6fcdea228c51c00c98c20946b3e08f2ce439cde56760b0a8b82f87f1bab3","ssdeep":"","tlshash":"8a4173e4efb174fdc8c96398db709c5831b734b87425ca0801ae9bd89981a0c8fadcd0","first_seen":"2025-11-30T04:12:51.981515Z","last_seen":"2026-09-03T12:21:37.014238Z","times_seen":206,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":56,"dns":0,"connect":11,"send":0,"wait":10,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.809Z","timestamp":1788396404809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 69\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":false,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZjR0LB07vYQO05nXRcy3ick%2FHM2W4IxZXYeIayF2seSmxKyjpPG0TVe7VwnIg%2FtLnc1tzSPyjfKANAzWMh2E4qGmvwVWQ0MiDE2vR9KaufXU1txw4GpyFRJlVrPPO0zqMpSlXG7nQYBrA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d5-L23zGLh9zjw2VNRWsqMxmooZGiY\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3a19ff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":469,"size_decoded":1014,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dd460f4bddbcdfd7854abc9030eb713b","sha1":"2f6df318b87dce3c3654d456b2a3319a8a191a26","sha256":"03d4f1012159120acf7f62641b400237a3fea2a33cff456c5fdc12d2dd90eb57","sha512":"d60f558f99a7fb9a49b46881786d83d617410761259a9141b643aae7d3208988587885b633b24d36ee56a6a1fac65564f06826ea768bfa771f1b436ce384e896","ssdeep":"","tlshash":"f2f09e6ee7aa3b3522470403f40b2992ae68a5bc271114579f2a929c1319a18c633192","first_seen":"2026-09-03T00:47:21.446226Z","last_seen":"2026-09-03T00:47:21.446226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Hr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.971Z","timestamp":1788396404971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Hr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 996\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 7_IUfMd.5GEWQU_9bR8YwVptLuPUdyyC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 02:45:46 GMT\r\netag: \"52d8768a8236e6aded4448bbba3c3532\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: QBWuOjOyPkuUskKUPouw9Urzcu_m43YHESIV-vwnFLAUH6HYg3E0DQ==\r\nage: 79259\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":1773,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"a396bedbcf5a559c02996ced38aec94e","sha1":"cf6d47767a2a62e4992671b2ea6a63c0e0e079ab","sha256":"d416e0168f6eb8355b546fe6344b35eb0d76ff4bff0b6aeeb5e4e35602e6a2e7","sha512":"9ea42df5dab7b3b8174d6ce0033e4c4d77dd03803047a74c2a00e31deb856c4e7b93b72f40b5d25871486e0dbb6f257547e8fc806fb17519a6436f64f8eae563","ssdeep":"","tlshash":"6111a8c9c575d4e5442a1d2b4d5e054c6b27d22c14e17c3b9175d571b04cc485241a13","first_seen":"2026-05-02T20:55:48.339976Z","last_seen":"2026-09-03T12:21:37.049509Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.692Z","timestamp":1788396404692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-28f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 385690\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qorfeadDRO5O%2F2R3G2sj2g04hJs1KgIHouTVFL2NnSTIo4T3bJOArhTbBVKjXJs%2FheOPwQJdIMTV%2FlOlx9GphyUb1yexCy7lFOg68Xc%2BOxhlIKEFtf8KwhTPBY4McQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a350bd39dddc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 655\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":1486,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"cc87302deb32e2a6f3244fde58417b10","sha1":"30b4eb000d69e3d1a71856ea217093e8921e1e0f","sha256":"a2446e97066549f2901eabc81fdcb33e058647e0f0dd471ddaa85f50c5e18a27","sha512":"dc25c9c8592b6e6f08b59c516ab4e533b1c192cabce61aa047422b6feb13a54cca09a59df2db61c396f5f5a843540b38ba7266e7b244bd5fcacaeb1e2a26268c","ssdeep":"","tlshash":"d8f023cf1a591b649265c5d5aa067a3df93244901250b692925c10b069abd4ceb8c129","first_seen":"2025-07-04T08:06:49.893587Z","last_seen":"2026-09-03T12:21:37.045384Z","times_seen":70,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":59,"dns":0,"connect":10,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.910Z","timestamp":1788396404910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 10:07:33 GMT\r\nexpires: Mon, 30 Aug 2027 10:07:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 311951\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":129166,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-09-03T17:22:24.769231Z","times_seen":83327,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":3,"connect":33,"send":0,"wait":18,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Pt@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.992Z","timestamp":1788396404992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Pt@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1282\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: SOC_sWAWjPGE3B5iuNiqpRRIDbu1RLft\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"05b68caf1b05789ef5a212aef2793003\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: eCO2SglmvR-yJXBwgMFfLunNx5PrQwXnjA-Y9f_f44c1RiK4lIVobQ==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":2060,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"45e1fc0cf94e897c8d06125fcf91feb6","sha1":"a5d1d201e12f2ccca8d45e82b3db49f87454aa58","sha256":"f3993841083e059ed6ce394951b69615d986c0ded4c4af5a84a4eff142a82179","sha512":"4cfdd34e45511ceef03cfd86f78641945e685c4da480de674cb9255c6e47e2cc3cf5012dfc45a70ae4edda7bf13c649780c0058b25c741b3acc414bafd523e38","ssdeep":"","tlshash":"f621cbc7d34398515996f36ecb1611c442bb7c6a37b80c0944c77d4680ad8162d0632b","first_seen":"2026-05-02T20:55:48.301796Z","last_seen":"2026-09-03T12:21:37.061568Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:11.938Z","timestamp":1788396431938,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T17:23:48.268081Z","times_seen":18259592,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Pl@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.991Z","timestamp":1788396404991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Pl@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 147\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: e0GlGjHb0uzIkniC1VHew5dBluwtBvwo\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"7b6441a7f7fc517508a0d3b1d711faec\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Pqnu_f4-nBrAMA_K_fzeZVp5MZIZ7niB-48uQ31z3bt69Z_omh-gKw==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":147,"size_decoded":924,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"9e2f32430dd2ac7923e2a524d57aa540","sha1":"1cec78e583af9d52c8281682c4468f18b11347a7","sha256":"823af82562202649d27c95bd1c4038a362b8e1c4c1791afae79af780c22c1801","sha512":"398aeb7a59beacc5b8da18449303fd16aeb6ed9c1267641d2b052dfe570f7ea8cbc98f7af81db911f0c8376964a62959e5d25a659bd93ac0c5671124bce901ca","ssdeep":"","tlshash":"87c02bddd1809c7ac8de0c73c22d0024805b191c0300500f44e1c4a81a210d07ec53f8","first_seen":"2025-03-18T07:37:38.805843Z","last_seen":"2026-09-03T12:21:37.094526Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Vn@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.007Z","timestamp":1788396405007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Vn@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 374\r\nlast-modified: Mon, 19 Jan 2026 12:32:16 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Ah.X_Bv4v_w6UK3k5Q7g3uWNH002PL1a\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"1a2006e352bf40e285ed2aa34ef898cb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: BPcu_CUOWgeYuzlrjgHtLacfXeBhG-Zz8ZTApBfUdH__hcmQ507dpQ==\r\nage: 52048\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":1151,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"04a937757bbb4f5b7b1ea093f1f8c5b2","sha1":"a7f6aca2e09d59d1337be828dfcf66cff00a4ca3","sha256":"b63503e42434a768a24d11ee013804aa5f5b480a7ef9bdfb941cb124bfa89804","sha512":"61d37f7514fb3c4945d3bffc434b734c53bca860a33c5d3d59e261d1eea67466e13e4c8363d37bcc7426564f76364af6532f70013edd69a94117ddd1f1666049","ssdeep":"","tlshash":"78e06ac7a327bd17e5f54a37d04c50439417387b24305409149038430f85abd23e06d1","first_seen":"2025-03-18T07:37:38.845188Z","last_seen":"2026-09-03T12:21:37.098019Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:08.923Z","timestamp":1788396428923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBdwOKr%2B8kGpnfggKrT29mVMM%2BDxbA5zzi%2BwmCaLyCGNF7lmjQk03%2FJldIE0ves5tV3Nms%2B1VI%2FYCuEvkH3ZAIZZ28LM2VxuoU72vaGbQxSPsJS1vboVYAhA7xZT%2FPwqHswRcM5%2B6%2BZr2Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdd0c96e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":751,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Dk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.948Z","timestamp":1788396404948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Dk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 195\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: LxRwV8JCAbwncFjfIjKSTuiZ3r6.Bz.h\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"299ad6e5496c4b5abeedbf8ef32bf279\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 5IasNc3J5jOP2wvDydevvLt1RIwV0DH1-5Dalo5q1fzxPJ64uCze_w==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":195,"size_decoded":972,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"22507a7b89f677e6784452f14cd0d0cd","sha1":"21b2a426a3676aa83768b979624d1efdf444fe76","sha256":"2f6509a1371ee69b53110521b8ac1e21c51285b03acc95d14e9ede15e522d4c6","sha512":"e482581b0bef87023567fc50a4075597e7ca072032fd3722879687651696b2d0e0c4b4bae5de317bbb090a56da3ae5342037a2984cc29e48d8f986f560f65b36","ssdeep":"","tlshash":"6ad022caaa18ec6d90eee823d6040492806341280d121081427088081a1583ac709af9","first_seen":"2025-03-18T07:37:38.821351Z","last_seen":"2026-09-03T12:21:37.017152Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Jp@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.980Z","timestamp":1788396404980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Jp@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: aQmLSR6XA4BDEy9LspmrcyxKOIFNPer0\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"091e3fea9788d22f32f0d4f15908f734\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Ldp8VS6d2b-dObXOUU38XB4GUuYHzVTVy-VlrqMuRjJcaQH13Jh03w==\r\nage: 43093\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":385,"size_decoded":1162,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"d075ec16020cde76748ca66165150fd5","sha1":"cb4f00c037870f2af12ffd5837a5c5b8d36aa435","sha256":"c6f0b5419e93764cb2ac6ca105354951648b1a696c4a8e5684ccb7cf2fa2f77c","sha512":"d0be1b6f9b03a8d6ee939d808052c73bc6e8a0ecd02a67af92ab10f61fd93997fe5513c36f3e8150807864a6f23ab7ccd9153d7c0d9fee296f38dfa82232a05d","ssdeep":"","tlshash":"78e0f1df01863837c4e582fb22300da1b91746408911c02c761a884c30156c0bf9f2f5","first_seen":"2025-03-18T07:37:38.816113Z","last_seen":"2026-09-03T12:21:37.082947Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/at.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.030Z","timestamp":1788396405030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/at.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-5d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 168748\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnI8MkNLRdwKFuy%2BO6gTWjcNttrVKnrEYDNKrLd6zoiMT9ZNEuTEVbY7V7lNLy4IVJJxkcy8WWy3blOFu5YXWVHvUOrKjQcTQaCQxX2Wzw7UFbC2BXzdWRgD87Qg4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a350bd3b7de94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 1-bit colormap, non-interlaced","md5":"2654a14747397cc511d2935e2a2b72e4","sha1":"0018663f061886f76a545478114657aea8968988","sha256":"6c8a4368e7023227b21871ecebfea676b8f39c2db8c0f1d9ba32949256c51426","sha512":"020f047eb6cf9bb2d929e42d75e9cbab7d5587f42992bdc73e13bfe8632b1329958356e8fb9a68550f503e77adb4267eb0562394fc1755bf6979feb7b0099c8c","ssdeep":"","tlshash":"9ab012d326a49c31f24a513aaa080414c530c2260010020b4215c8216531648c07934b","first_seen":"2025-06-22T21:45:02.73337Z","last_seen":"2026-09-03T00:47:21.45426Z","times_seen":101,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:00.039Z","timestamp":1788396420039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enWE7fyZ90L1VpLhgRMgFqWKey%2FMXpXJA405Qjje6wPdpnD56nQu949S2%2BDE%2BID7OOD77wSJMDoSMYqPjn02BdmoPoU%2FNYnVNtoZ4RQgcgXP9uVt8QBxYj6lD24FuU0mM7t3nScY8kZ6tw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd994e021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1018,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/1119565469?lang=en","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T00:46:43.626Z","timestamp":1788396403626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /1119565469?lang=en HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJoKU63%2BfFul8QVB9m8Z1AV8UsPGZxZrKfdf2tGatMYg5AXb5qO0kpL%2FomTiQMOWhzvYh0EmqadGhIo33tNo3dJO8NjlpElu0hjfXGjtkzBGMtcQYuAR78WyP4BFlzYptQJmwN9n61pFUA%3D%3D\"}]}\r\npriority: u=0,i\r\nx-powered-by: Express\r\nset-cookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; Max-Age=31536000; Domain=.boklsngstaysdetails.com; Path=/; Expires=Fri, 03 Sep 2027 00:46:44 GMT; HttpOnly; SameSite=Lax\nconnect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg; Path=/; HttpOnly\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a350bd32c9c41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"mammoth_id","value":"706def3a-605e-41d3-8a2c-023729d4893b","quoted":false,"path":"/","domain":".boklsngstaysdetails.com","expires":"2027-09-03T00:46:44Z","raw_expires":"Fri, 03 Sep 2027 00:46:44 GMT","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; Max-Age=31536000; Domain=.boklsngstaysdetails.com; Path=/; Expires=Fri, 03 Sep 2027 00:46:44 GMT; HttpOnly; SameSite=Lax"},{"name":"connect.sid","value":"s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg; Path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282815,"size_decoded":96748,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52713)","md5":"91e37be0224f1c5e7e03c34317a61370","sha1":"3b4f1a253ee964d19293b8a53a9b585caa795fae","sha256":"accbe64ff793d3a1474554b4389f2fded251f9668840a0220c3af135bb27bfb3","sha512":"2496090d9811b1f8b1db0728c8c69f9d99197631d0013bfe6d152f5798ca8981976366661846fecb04505c48bdde5074567d605da34957932bec0ad2fc8a07cb","ssdeep":"6144:fI4xXw0okHcHAa0evnNyolRjiuiM56fRZzxx4Umu:f3JozAa0QyolRViM56fRZzxx3F","tlshash":"57546d5266f9277e049b02c9a9563d2a5fedc23be652c5c4b44c87b43fe2c2cc637468","first_seen":"2026-09-03T00:47:21.455555Z","last_seen":"2026-09-03T00:47:21.455555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":0,"dns":4,"connect":13,"send":0,"wait":628,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/audio/new_message.mp3","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.111Z","timestamp":1788396405111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /audio/new_message.mp3 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\ncontent-type: audio/mpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"afae-19b41a8b898\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Dec 2025 16:05:35 GMT\r\ncontent-range: bytes 0-44973/44974\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEXQSUAtwDuUZ5O2bzsmvs%2Fk5b2Ps6u7%2B0GyHccS5448T77GZ1IVU4%2Bb849uF1vm5BTjXhDbm03KWBYma0IIriYf5C1kXRmcFmAvhZiUNxWS6SvLVF6JsvgTwP9XVMR9X1ZOUHXI%2B%2B%2FSiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a350bd3bfa261525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44974\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":44974,"size_decoded":45740,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Stereo","md5":"38bb30e100bb6b09a05b18a1e9aa54ef","sha1":"9a9d70f47917ac29cb424375d330e2e9c3083493","sha256":"e05bb3128e0d2f4740fc0bec894b9e696d25b85da9eb38a76aabffb5b3ac2553","sha512":"a8249fa75fb622cd142aabcf56151c14bba5118975c3d35b80d229cafac68ed49bbb93b1b400b90e3b688708be06eec8cee2af4228afd0262c87a19eee464e75","ssdeep":"768:KTvXCHyRbFOA2hnhlevGWmrR2uf1U3YxrQ6p1lY0vxXznei:KTqcMlfWmrIu0YxX1lNvYi","tlshash":"8013f12a3a79ba60fce1d57d7c0ac554e1499624e010cef8aac047fc833b2561f5fac4","first_seen":"2026-02-01T07:53:46.685196Z","last_seen":"2026-09-03T12:21:37.088919Z","times_seen":197,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/It@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.979Z","timestamp":1788396404979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/It@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: oyGMSBUX5gifNAtxSePCdPacpvgONaeB\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"36302f9872e905a23bb2045cecd891bd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: aitm8GDyJ8QUP4poCXDKq2c-wefjiDcuH4p6HJ9NdTz_hiXEMaHURw==\r\nage: 52051\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fda9103fda62835e02a3f29a8b304ebf","sha1":"3009647d72c67b373fe8594b51f8998d30fc3656","sha256":"acd6090c24cbb6e61a6d9d8df451cb6193827b5de99ceabb48ce619b6b1a9075","sha512":"fd63d6fdf15137e10d18f6bdb7715aeca347673284c422662f4377c07d245c0165775e872aa3fec5538774bf4b3fd796e12d5f47e5f20c7636b6c5b646d9a51a","ssdeep":"","tlshash":"71c0c0c6e1282cfe832758f3908e0190c127793c0d0260c30851f031a4020304ec1aa2","first_seen":"2023-11-09T09:51:20Z","last_seen":"2026-09-03T12:21:37.050115Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Lt@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.984Z","timestamp":1788396404984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Lt@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 169\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 5EDqn0j4QV8XWM7LxO_KmhYqgoRKkTla\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"cec6eadacc401e34d4d827a30cf7e046\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: UU7rOn_yILSaqQ1ani2zBj0v_dnM3tEtmAYAYE86Yxm0vBWgnBIzuA==\r\nage: 37387\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":169,"size_decoded":946,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"b5a2cc83ec33160b06fa7ce6d980e350","sha1":"1e30fabc02f9db3bf4bd844f9e38c6aaa6e70cea","sha256":"2b49382efb5d7da4e4ee4c09493f898272183c9ab12fd911ec1d45f4d3d488a4","sha512":"e807a7c45af295241593b8b81994f59c0c3e6526a5bafbfe3a83df8ef967eceacda3ef72d187e821d9fcdcc13835f52d536dc76d06081f7b70ebbc0f8ad886ad","ssdeep":"","tlshash":"46c0c0ebb3834cfd43fe4c23048c0020a04b148c01849e1040e8f821310c100020f3f1","first_seen":"2025-03-18T07:37:38.795387Z","last_seen":"2026-09-03T12:21:37.052517Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:47.924Z","timestamp":1788396407924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ2JWluo%2F9HMTo7y%2BvbL%2B5%2FhzcuyGzbZUmb8W81gEuLR1r9f4QUgNlaZbNEbQ44FfHWlDuPmeip7pRyAY2njr%2FwdcYWem6U%2BCkI4BDuvdzOJ9ZYDzqZ44HZXj5655bOJoROwT5hmx6gPag%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd4d8aef1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1022,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:58.422Z","timestamp":1788396418422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIwa7T97v%2FXUGKj1tsHz1k3Pw30waaT28%2FPyY8EyVMkjmNbYogjcPGnBhhu3QVHzV63T2ChNs608Fzz4cmppndXjDCTtq4ol6Sot%2BsJ3Ys4VtJIDCiH4UoSwnFw1oK1t28LlRTC3BTjb4Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd8f2d911525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:11.041Z","timestamp":1788396431041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNQQZuXyKV6C3lPEEdqjhX2%2FI27pwc0eq1o25CUZrwJw1pnfjiIXhEstf0CIMPPSJc7AGD9d3A3joZaEr6zE6teaIxcGPBEgLl5Bd4yNvOnAs3RcgqNGyE45HossmZqRGthN8y3GQ%2B4s%2FQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdde0a3f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1016,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/css/payment-modal.css?v=1776386200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.959Z","timestamp":1788396404959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /css/payment-modal.css?v=1776386200 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpAshbBoAsK3ybBic0NMp0oTQqqnNjUG5vQ4sGtMzQHiMHkFd32GXuMsj1y2EVv9ZSxNeWWilgO3xY1awcxdmRWIyWVNCPBxYXP8Bu5yS94kBEb%2ByowjmBWw9hsUcuju1aTLja2%2Fr9NYSA%3D%3D\"}]}\r\nlast-modified: Wed, 02 Sep 2026 12:41:22 GMT\r\netag: W/\"9a2a-1a0622366e3\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3b0a051525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39466,"size_decoded":9600,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"8c7ddc237bac28ab35de60d3ba32a36e","sha1":"325e8dcbae350db45806ad242ea63c04e345cdc1","sha256":"c4cb439ab698f969e12caec255e8514ef7884e4b94766b9de8721294e79e442e","sha512":"a7dd46ba6b4f9dcbde55a9647c4a8a1ee1ad4ae1684b10ccd792a9724f8a2cbe8cae32682c883ca0d8591a5445810f29f9945793581d00e9f41ed6704893bddc","ssdeep":"768:vmhVGFxf/4GdZHHS2HbcX9CIRWifjLRd5Dr0YQJ7a:ehVAAGdNS2otjLRd5Dr0Yi7a","tlshash":"480373d06aa70618701fe93a11cfdb96636cd042e90adc797b94312cdfcbbcd9662748","first_seen":"2026-09-03T00:47:21.459932Z","last_seen":"2026-09-03T12:21:37.077047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Lv@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.985Z","timestamp":1788396404985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Lv@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 149\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: kK73BL0heY74NTYtYq4v684JkwrpUxCx\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"534b86e209f9623b5e12df0e9bbd9a8f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 10DDiJUIUkCn-yKBKvPIgcw09sXYmDFZeWQwAhVviX8LAJyHxx_t_g==\r\nage: 54120\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":926,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"44d702b89bfde14a95451dd921b13e64","sha1":"3636c679250f4e1c981a60f60c1a3bd5452a2fc2","sha256":"243e47de15df4587a8a7449c34e44be4cd7914503eba1597e2340205103ea586","sha512":"4f948495f9ccd25b83d61a45395ecb3b0c689a1a59a1467d22849a8b4d2a411ad69b92e60fd732393a5404ff1fac613b8fd428bc1ca473169e84e19b304b5da9","ssdeep":"","tlshash":"0cc08cc7b2a42cbac079482388480b828057e1680fe246439094cc14080e018961aea5","first_seen":"2025-03-18T07:37:38.825679Z","last_seen":"2026-09-03T12:21:37.055416Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Mk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.986Z","timestamp":1788396404986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Mk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 665\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: ampH3HeN9Qm_v3g6FQZdjIhrcmEDiEUU\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"5d64a9000b01d06b9ff384f6e026c21b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 7bRtqI4DFQEWzilW9G77GBwMqlUFfNofwAtd6ETWlZRLKPWTiTmVKQ==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":665,"size_decoded":1442,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"9cfc39caca7e42f06f0cc949e3ab70f0","sha1":"3e2b38ba9a78f27bc34ba9a8c555add8e384f67a","sha256":"9a74d13db29351fff6fb4dec8de6f72afa63813d0b50e6dc869d0a2a43ef9188","sha512":"4016991cafca142352ab429e31bdee37de5fc31516d6d67451445b2a8a88c2287362f335935da20a894b5877effe0d8e526ad3a708e426fcf75ccd8a684185ea","ssdeep":"","tlshash":"0e0183ef7c0b5a9f99b3586249840e938297037f0c8fd1a1a0af502c08875ca5bb8e1d","first_seen":"2026-05-02T20:55:48.313017Z","last_seen":"2026-09-03T12:21:37.092811Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:56.038Z","timestamp":1788396416038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tna3z3Of%2BoESr5ldbI7kpWpW5lKwSuXAwXWPKF%2FgjB5iGk0KHw85xVh35v9Xv8GMZOeR1zDJr5gUtjs%2By%2FaIce%2BBjk68Q%2BVfpAUm%2Fc%2Fgs7HpHWM6dRrn9PtzmNkRGXnIWpymcUFGHybVrw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd804cea1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":468,"size_decoded":1026,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Sa@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.931Z","timestamp":1788396404931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Sa@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 957\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: M2s7mSqFAO.dZfjeoG3nXnhpJZSbsguF\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"3fbe57f1645c787c4197b3f91cb680ef\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Rqbororlf7_-xbv7heSlxFa4AXH-rsb70YKgczQ2DWCP4jD7bg5WbQ==\r\nage: 37387\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":1734,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"424aef16af9413b81116f34642656e56","sha1":"10f1ad15d8a29b43a22469649c69fde953f770cb","sha256":"73d3d8b65e89f664c7cef0bb6a78e4c4cf8eb5d063811c7c33a6b6035211a2e5","sha512":"20d3bcc18054a5a1e14ab2d18cae8c3986a90c35b87bf0874933dbb692158051868ec75ae338ead7fbacbb659f8b644b2101ba241fdda5f60fb9eacf3262b9b3","ssdeep":"","tlshash":"ba1194eb73f13d3f50264b780860f8a28c6a1a94822d9214526119283e8a0a30788366","first_seen":"2026-05-02T20:55:48.38204Z","last_seen":"2026-09-03T12:21:37.087109Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/My@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.987Z","timestamp":1788396404987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/My@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 519\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 8xLzGCe.lcPAAgUM9tSqd_7skmhzvvOW\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"6f6e4df6f22b307ebdf4261ac19fbd6d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: _QMG5YQz6xy8KQReuiQezXHzIDtR_jGDH7mm0g3O6qe0ItUMXNaWyw==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":519,"size_decoded":1296,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7d1bbbefe4637e44c40fe765dc6842b2","sha1":"b04ef5a498af7d4690b7b9c934bf79fe7ffe55be","sha256":"8845c2a7301dae096a621dbe3ba2b09b7426eb01ac3c4cda5a7c035a91787cd0","sha512":"4519dba2c8e155e6ed679be3d08dfb48924234f7879e7df8a1ca56e38c8c07afe2a31dcdbe9138c712bedb207718c7a057a15f7f19916820ca6db3b5191e1e79","ssdeep":"","tlshash":"aaf07ef0e7c04e3fe8aa2408039282638883db2ac88ab0574362c71dc03a00c830a5b2","first_seen":"2026-05-02T20:55:48.300723Z","last_seen":"2026-09-03T12:21:37.099866Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:49.396Z","timestamp":1788396409396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjjvQM2KV%2BGtLR2Kn4zOV6WJ7dSKVMAOnIfvTKuTq%2FeKzF24U1Qa%2BV4oxT3UBWQ8AOYP2hAtpi0WuOj2G3AY0RKWlLrY9vyhm00QYY5dPB%2BmtaixTOA3lMnIV8Q3K516FRPcA1bEoYFV%2Fw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd56bb5a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:51.925Z","timestamp":1788396411925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CKo%2B0JG5hxw6ahiDUieE6qig14eMfgIVcjp3QaGuLqfyioGnxhQ6IDpdrRf6W75sBXQdk%2Bu9s6L9YyEp6LRvYxKRWkexMWsN7GUBWP8qYB3EKu52nW%2FvWnT1E7rHtbT%2BzNLxeDBhytvWg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd668c091525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1018,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Nl@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.989Z","timestamp":1788396404989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Nl@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: XV7NgcPcMdbB15oh6gpizFdW41bkde5K\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"3c08bdb98f8bd27cfa60b053dd98f042\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: y3wRYIkDll9EOVCGFAS2XTQ5TIKljwJEdGLwjw9C_5szrDmy39fzTw==\r\nage: 43093\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"6981c145caa140d21c5ef6a8df1e0632","sha1":"1a4fdf6f6fa9e17abc0c0728d98cf304b51b58e3","sha256":"5024952a08666993287ec58f21c362fa58552efd4e1a23fdb67f0a49b5e6ab07","sha512":"852ac7fc2f91b7b1c44031e3287410d85b73b10077b5fea8cb7e00ecfb4dede8f692d7ff80c77f11a6dd494044112c0f7424b5b5e49b630066dc42513c08713e","ssdeep":"","tlshash":"b1c08ceed2062c3fc56a4c2b408f5290a89b591d2161bc0261b2981860755468a85af8","first_seen":"2025-03-18T07:37:38.823703Z","last_seen":"2026-09-03T12:21:37.028307Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/diners.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.701Z","timestamp":1788396404701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/diners.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"f0722cc8de94326b2bb229adb13bfd7c66eeecdae64fd90f18dbac70a714cfd7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 3372:359816:79325:C396E:6A97FE99\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.033462,VS0,VE2\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: ace5c19da1ab7c3fe22820fd72a7ba2548fd4500\r\nexpires: Thu, 03 Sep 2026 00:51:45 GMT\r\nsource-age: 106\r\ncontent-length: 466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":1404,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43cbbcfd28cac6803bd6327da3a0f2e1","sha1":"f53a6da9a8074bd31b20260eefee9db561938375","sha256":"3fff05e537bf45e3d8b2e76e861654b5cb9e519eb98fef267d76b1a2060008b8","sha512":"730a885eb6d27758da40a62003a7d71d1993f3b26a5dc5f39a92fffede89915535a4644ee2965989d143eaeda3a82db177a9386b294f66376d676607ffaf4ae6","ssdeep":"","tlshash":"d00141979bd17cb2ac09436947ed2b5d21bb00fc2105cfbce23a45c1a109de9c7a3a9c","first_seen":"2025-11-30T04:12:51.93979Z","last_seen":"2026-09-03T12:21:37.038445Z","times_seen":12,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":54,"dns":0,"connect":11,"send":0,"wait":11,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Fi@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.963Z","timestamp":1788396404963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Fi@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 186\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: .tXrADMEUyHwS0xtxjL4FpFZG0uAX5th\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"92a947b7ae2e835cf3f371191f7ea7c2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: nunACSUP2WCvQ5E3TkN6uLtbFTLi_mmdu316wQNsdU8G8YMtilXhvg==\r\nage: 54996\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":963,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"6301628b63b750f566ddc31b306d7f7f","sha1":"b6347df062b6a37df90728404258aaa8c22400e2","sha256":"863ce74405428e6a5fb9ab9aceebe987bad7af5a8e155d9c9617657895effdad","sha512":"76390ce13d9a10298fbedb1edd79c910d4c0212c6e6fdc5407176d96aeb69b660b41399713901847420970bab4c2bdfa52eb3a4de26aee9fcb2ca9914997c5d8","ssdeep":"","tlshash":"b8c022e7030e3c248b5f1ce3700502c0c3c701582992be08401090ae1c810c1c5549b2","first_seen":"2025-03-18T07:37:38.843491Z","last_seen":"2026-09-03T12:21:37.051885Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Il@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.966Z","timestamp":1788396404966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Il@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 518\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: YNqJYojr.DPgmCyoX2_HdHxevPTzVc.n\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"962a361a88e2a8618a69f640e6eba26b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: tEAdeJUdj4Q00TepXJXVkihQP7JTVVXYwTEmQsrCZShvh8o7eUGwwA==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":1295,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"ea731d61528b7bf005ce3d913066c30f","sha1":"fa91a8b3cec6d5ba6121e5a29b5025cc2f1a1dc3","sha256":"c7e996e74254942f092d4197e8ef1456e07f80f0bb0f2b6ae2dcba1bd6cd7733","sha512":"48e385c199e560258506f071f87060ee18cd548f42219d678e25cee3cf9d2ef2090b2e50e7a4a1f05d07d5655dcd65810e005620b355d835e1d02eda95dd4247","ssdeep":"","tlshash":"90f005ff7abf582811971c7aa01d16196db7cdcd0620d0c4501190bfb17e1912af3162","first_seen":"2025-03-18T07:37:38.822924Z","last_seen":"2026-09-03T12:21:37.069791Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:48.925Z","timestamp":1788396408925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evAjEV%2BZ4LAlnCMqKYGRQlD8HxbaMTn7MZatbS835gh1EpUxqKGGfa5REmU0AQ%2FRM9jE8HCxr0lQP7RWA3qfqFXAagegM7wxqX4hlEHERJtZcWX4d79hD9iKnga%2FZu9nOGiHGSo7KjUbTg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd53cb3b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1016,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:04.040Z","timestamp":1788396424040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDgy4DXtxmN18%2FS4LBZYaL83vvsLPsU5yOrb7spkxUnpFuYKrFfBSXAbKoIReLbT8daX%2F%2FL9U6hTjRwby0Y0bzYAP3iQtlH1%2FAriLX20lIzkzrSn%2FSCohOtLGfBFZi4tNrkFL%2BLme%2BRmUw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdb24fd91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1024,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Es@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.941Z","timestamp":1788396404941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Es@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1088\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Ds8Dmx2vRUtfo5h3EZYQyDJfvxREenVb\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"df0c93e13ae9a6a69402fed9d4515d27\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: eZnkLOBQdSl_rkj58t5LyiaImWTAHV5wM1dSi8jLYDXxyJ4yiHH97A==\r\nage: 52051\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1088,"size_decoded":1866,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"777d1303b884ae2afbcae442ab3586fe","sha1":"4357348999a71eac59b76c864af1e379d74e126b","sha256":"33d482fac45a38ae69b21a174b41c96d72bae25a8d59c2e2a40406bf3608d18b","sha512":"9ee5ed695b32bb64b44c9ec873b69bd30a4821d7e20badd925a97caa2dce3bc90b72e013447b78937b614062923e8e8dfae7d1df1fd1f5e98aa00677316fd7ce","ssdeep":"","tlshash":"071196dcceba213d923989d72218d7015b0fabe05d03762ad14d42563cceb502ae82e3","first_seen":"2026-03-03T05:25:24.04666Z","last_seen":"2026-09-03T12:21:37.035897Z","times_seen":15,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Si@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.998Z","timestamp":1788396404998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Si@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 582\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: VeCvSSeVpuUJCXZnqBZ.ojaf28G4haUJ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"d4dad9312a784095410441c064c590b6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Bv_lfb_dAN4EHWjZ5oXMc5vmcCVsnDAszcXxwPKt0PrSguOGZ9k6vw==\r\nage: 35374\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":1359,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"a011bf048fdde7e06bf902c38a0e89d7","sha1":"d5043b458155c32c0af0397445dd5cbc8b4a4b1a","sha256":"a7f5a2e8d3fe21abc111e40a5bbfee3db9c5a1d5fd1ed447617dc762f7f88455","sha512":"5f9dead7eb393ec2ec64175db79c5937285acc38e27e0cd7cf72ae62b1af51c8be9ca95610a9feddf1038081c575a3411043c6203bdde9869599885b53ddd64e","ssdeep":"","tlshash":"59f0b1c123c3b42649f68822bc3308f93e2a88a8e000060a01c499b0704f4f86f8e46c","first_seen":"2025-03-18T07:37:38.836599Z","last_seen":"2026-09-03T12:21:37.091008Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Cn@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:45.008Z","timestamp":1788396405008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Cn@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 393\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: tjq85wwpldE18TNGfkVZFqbnx5qZZ1AE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"303b39947524d1b7671997847d203f6a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: qfs_4YuN2Nitrz1GDLotYa5nDOGwI5irngW_jTMu02cP51Cc7L8-Pg==\r\nage: 35374\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":393,"size_decoded":1170,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c1f57830241ee6a0687fcdf70b9ba017","sha1":"88a55c56a6e2ef110943ca58b4ef95ad5aca7fe0","sha256":"f07febebaf2e053eff4b62c8e8403908b76d7242ec6090418f87978039df1314","sha512":"9a0ccb8c11f148f373ba9d1c7fbc3a1c4fe52835015b90140b068def50b685306933112990315905a15d2c7af74ea4d19157e8b35458633949c263e0d5d1713d","ssdeep":"","tlshash":"66e0f1cdd100d4bfc85f685383140cd43ee3f60e0012f14992a446066e732ded642670","first_seen":"2025-03-18T07:37:38.815244Z","last_seen":"2026-09-03T12:21:37.048071Z","times_seen":2652,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:53.921Z","timestamp":1788396413921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAmhALyqpdixFhoLU2MREWPVIbuQtKTxfuO%2FIqzpOk4ql9vKLk%2BptMXFSEzC%2BSZEmZOZW5ZanfJlw%2FZFAhw0bd0rkqOY2ynBO1etrUmtR99M97nwJcbj07GfMYW%2FfNdZ9u9I3BriFD8KNQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd730c7d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:55.423Z","timestamp":1788396415423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9K4Dcgpe1kuq72VkQiNtf9toF8IxrXvH%2FRg42jQ8qy76XQMjA17AG4XIrHpIxxItjGR%2Fkx7ye4Bfer6XWEiH6pQUn3lUT%2BsXOC0GDRBO%2Bp5EDC%2FEjZNZFiElmMBP6NS%2BL6GWjkf07xJNSA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd7c6ccc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":745,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:06.040Z","timestamp":1788396426040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8cKN5jTjGFSwBvRKD2bq4bzbLKmRQvr4a5AfW3%2BQTdGJyd5sdWdixCSX5H4MLyiXhpZtRaScmdrZbYwaUlcPM24w8LzSM9ICa1NO%2FkTKM5y4GoGnMwDcqTffAXALxV%2FV03dqHGz3oVIEQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdbec8911525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":468,"size_decoded":1018,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/book/js/script.js?v=1771629200","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.668Z","timestamp":1788396404668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /book/js/script.js?v=1771629200 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n7tZzdzAcwjDDlcWLekb95yH395B9I2uJicMbEKhGPFFJoZESDUssd9dVKmI71XUTSBCrdRS0FFqHXhNFzh8ilmpI0g6xC%2Fq3tNbBy2HH3UDJrHV4khWnStrlfVOsk1hEOipiLitfZk4Uw%3D%3D\"}]}\r\nlast-modified: Fri, 29 May 2026 20:59:09 GMT\r\netag: W/\"301b-19e7588a148\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a350bd3939f41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12315,"size_decoded":3286,"mime_type":"application/javascript; charset=UTF-8","magic":"Algol 68 source, ASCII text","md5":"a45316929ab38c470f84213cf4d1407a","sha1":"0675f47e9ff02c185f47d83ce2de1161c5782449","sha256":"2f218382621c06f00a84958dd8ee0a7cacdd46573175007a29c42b31c7bbc130","sha512":"a6908415354865fd35964793193eb5435102ff3aaaa806eaaba6e3f7effc32227855388ee5cfcaffb5640b80e37b8d2c18691c91fad2de858f3bc50a36298c7a","ssdeep":"192:Na+N9SCxAP+N9SCfWXXWybUBYPosmy0pQ3BdTpi6cMjTpQlnyJZzLADCn6YJ:srTD1xj1l","tlshash":"8642251416f5183642b364ff7bcb91c5b62201ef984198793cac960e1fa0e945bf1be6","first_seen":"2026-05-02T20:55:48.333704Z","last_seen":"2026-09-03T12:21:37.071306Z","times_seen":10,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/De@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.949Z","timestamp":1788396404949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/De@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: GUVKoiSz_DnVdC9rnjJS8jG7GbyISPsy\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 06:46:37 GMT\r\netag: \"c6a2e9c642ab67e955c8b3b700c3813f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: ok3r_4SfpoRabU6sBu4zCeJjuXLYeBmyWKFyO_QJ8hEYzG-VGpzN2Q==\r\nage: 64808\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8ddbc2ea052aff70a7652c1b2f99d837","sha1":"7bd2b690beb3a6cccaeee66728976ba588aa1162","sha256":"f4466dc41d4edeb2071759474a0c2682b79290cdb4f2f1839de2c1c50898bc0b","sha512":"6a4b5388102403393bb4bf98f6ea3170938d4057eb0d09bceaf5bd6a17498d01d09641fba2882dda03bc19ecce6a2d84cdb0a3f6ea5b7511114a99ee4207f7f1","ssdeep":"","tlshash":"9fc08cdee3a22c7ec42d48ab800a53886463691d069ab843a0f5d81d24266858a846f0","first_seen":"2025-03-18T07:37:38.804097Z","last_seen":"2026-09-03T12:21:37.046237Z","times_seen":2653,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ee@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.957Z","timestamp":1788396404957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ee@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: es731hHGCAnqOe3WtS5DMWm1hiVuvIH4\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 02 Sep 2026 17:03:32 GMT\r\netag: \"b5dea4de93a9bca084e79140163305ba\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6d1aaf3e0e64daeaf6491bc533f27ab6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: eteHOttQP7W0EH9EQt3F4F5dTNjD6kdCbyKilTn6-G-I1QR0n1fj8A==\r\nage: 35373\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"04a3062e8b93eca84e9f310d543edc0c","sha1":"b5fa19cbfebbcab4849c5e11b47ce96ad2146998","sha256":"9ae2a2bef60632bf17428dafd02a54d176041e786532d28a5f64a6ee10e976f2","sha512":"1c1ed0b01ae45565fc702fad8e4c5baa8cf518ac356e3732c5cba8916fbbd7f6b33df171af697bf63f86bb3342e35c7753a40e4b583564b5a36bcea883d06833","ssdeep":"","tlshash":"8dc08cdfc2a26c7fc5aa5c1b811e128aa493691e0269b84290b5980c2436a858a846f0","first_seen":"2025-03-18T07:37:38.835669Z","last_seen":"2026-09-03T12:21:37.076355Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:59.925Z","timestamp":1788396419925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"GET /api/poll/1119565469?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFbluCqTf6fgNd97B%2FkxXCXgpEvskcnITd2I4I7xkQ8svtZh8ogxFxc%2BSmk2BPucJIys3SZuZWY8UgdUhNtUjVVUvwlG%2Fn2lHEbNaUTG2mabmAsxZtv%2Fk8WBIXbhhYBBZZdXpVYhx80APA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd988dfa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-03T12:21:37.024921Z","times_seen":21,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:02.040Z","timestamp":1788396422040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEMyKlVIdfofuzhqgrlknPof5ayNLCkapVMiFqKICjDe11WcvUlflP79rjDSe0%2BBzcerygFTQ0qZLuB29w2w6iTmt1%2Bwtb2KmjyrS6wYuAfDRmzrm5j68tN3ztzPVwrVNvZfLxFXGe%2BRbg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bda5ce7e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1016,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:47:05.040Z","timestamp":1788396425040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:47:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDasAy1bWkMikajlH6OsxX9qFT74pv0pqMtVUSz4xn8Z04cbUtdAVc6%2Bqohwt08wFuxlzD3mF2vz8wNuqyUQ9enrc8ilxH9fbowddTpOKXLYr7n9AVBp%2BSW7b4LWOaE93Fhqsh7rxqG9jQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bdb888431525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1014,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:44.696Z","timestamp":1788396404696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://boklsngstaysdetails.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"709daa89345a1d3bb439f89ec8127634e1a8cfb3bde80204cfa01f7719cbd35f\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 08F4:84148:714E61:C67460:6A952ECD\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 00:46:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788396405.032807,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 3cba8429fd9432ff18402102f129a4a6ee641f23\r\nexpires: Thu, 03 Sep 2026 00:51:45 GMT\r\nsource-age: 106\r\ncontent-length: 2455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4879,"size_decoded":3395,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23cd5a2193b164182c1b386e47a3a042","sha1":"1ae6cf9651216301a1e9db31bc2f6455bacf60bb","sha256":"c9e69fc83a307407c427b0dbb759aeac0f801302aa093b283bb2331227550408","sha512":"2439a50c82d40768796dcb5aca56a8d2831ef3282a4a239741c2d8201321911b47c1b02be16fc7d13b10932b918966c4e64850e962820ff5483a2490b651e37f","ssdeep":"96:budZ9O8fybL5ZB/SisbTWfzSHfb/Nk7SW89kqalSZ9WcNaL:budZ9OTLfB6isvWWHTlk7Y3Z9Wc0L","tlshash":"1aa1a5c9efb462f82c414f5eef2418de39af24b53c71de54c22cef9594e39989a19840","first_seen":"2025-09-05T22:46:55.846441Z","last_seen":"2026-09-03T12:21:37.093992Z","times_seen":211,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":56,"dns":0,"connect":11,"send":0,"wait":10,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boklsngstaysdetails.com/api/support/getMessages","fqdn":"boklsngstaysdetails.com","domain":"boklsngstaysdetails.com","tld":"com"},"ip":{"addr":"172.67.163.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://boklsngstaysdetails.com/1119565469?lang=en","date":"2026-09-03T00:46:58.039Z","timestamp":1788396418039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"boklsngstaysdetails.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 10:44:29 GMT","end":"Tue, 01 Dec 2026 11:42:59 GMT"},"fingerprint":{"sha1":"B6:8F:C2:C4:14:19:E4:B3:DA:08:C0:98:79:F4:67:CB:2D:EC:D1:0D","sha256":"74:50:2B:19:03:A6:2E:57:BB:41:BD:40:72:B1:29:0D:D0:2D:7C:67:5F:8F:AF:42:B0:23:75:04:E8:D3:C4:CD"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: boklsngstaysdetails.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://boklsngstaysdetails.com/1119565469?lang=en\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://boklsngstaysdetails.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=706def3a-605e-41d3-8a2c-023729d4893b; connect.sid=s%3As5V9p3zyFjDWlCTDXPZzi9awinOrq76B.DfRwmByfjoQ5FSf3ZmZcEnvkY8zbZ6vsgGGIYvteoYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1788396404169.9958\",\"chatVisible\":true,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 00:46:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbbqSzwZ8icjcyuv3M5MUP8WmWd%2BLxi5ZYN9%2BJZYdfV3EQsCSvxIANfEfmzYqNgnIiHi5ILWUYLdKuMYYx3jrxRj2w%2FypXpKhRs7FLDcEKV8rCpwLmPwHUyQmWutJZnqJm6Z5qUoOaoR4Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"1d4-6T6RbMtRw57MyaZinDFJD++Z3po\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a350bd8ccd851525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":468,"size_decoded":1016,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"942992bb3bb41a88b34e1e7ce7eeb147","sha1":"e93e916ccb51c39eccc9a6629c31490fef99de9a","sha256":"cafb2483779319b7e5d6f161fea10671b64a14de9b1ede2614bf4c3028445b2b","sha512":"9bed8d994b7520f5a91917ca243e20832f9291e827898fa203953a4ef770a0301c643d3b54aa34e67ae854708155d5b4d14e1c6a4c7b21ce4eac1ca79437c17e","ssdeep":"","tlshash":"8bf09e6ae7aa3b3522470403f40b3992ae6ca1bc27111453af2e929c1318a19c623193","first_seen":"2026-09-03T00:47:21.402615Z","last_seen":"2026-09-03T00:47:21.402615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"boklsngstaysdetails.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}