| flight.tigerairtw.com/LinkTracking?id=1589659&url=https://exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== |  209.235.204.121 | | 206 B |
URL flight.tigerairtw.com/LinkTracking?id=1589659&url=https://exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== IP209.235.204.121:0
File typeHTML document, ASCII text, with CRLF line terminators Hashe068d252b0f14e5dcaa459ca8473c32b d457eb37e9b2d73612862409ee7dbe02ee203431 4f1af0be3c76077f9812a8ce63f081cf4820309c3c617d46eef70a5e78d33a32
GET /LinkTracking?id=1589659&url=https://exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== HTTP/1.1
Host: flight.tigerairtw.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' 'unsafe-inline'; img-src 'self' http://images.tigerairtw.com
strict-transport-security: max-age=31536000
date: Tue, 16 Apr 2024 14:25:58 GMT
location: https://exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ==
x-xss-protection: 1; mode=block
x-random: ZFFbUg5$5mDL1AGoTP-R@-s-fQrcH1FH7OUAfDZ4Mo5chDGEs8G80G2ZdG$D6c4Ef$UnxFJP5
x-frame-options: ALLOW-FROM https://prd.travel.travel
x-powered-by:
content-length: 206
X-Firefox-Spdy: h2
|
|
| exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== | 192.185.112.133 | 302 Found | 1.6 kB |
URL User Request POST HTTP/2exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== IP192.185.112.133:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.exclusiveholidayresorts.com.au FingerprintF0:20:4B:6B:B2:51:D1:6D:6B:BA:DC:39:09:6A:B4:1F:9A:DE:6B:E7 ValidityFri, 22 Mar 2024 20:19:11 GMT - Thu, 20 Jun 2024 20:19:10 GMT
File typeHTML document, ASCII text, with very long lines (3255), with no line terminators Hashb7892c9f7f39e8f13c02b4d699971605 613abf574330f01304a593e7c57e601e41a47420 c738ac14dfc44d9791550ac529b13c4f10b1e9bc0f3d91da3cc786bbb4a78737
GET /.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== HTTP/1.1
Host: exclusiveholidayresorts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=55509e2253c2ef6edc347850d6b27a8e; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 1554
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 14:25:59 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback |  104.17.3.184 | | 0 B |
URL challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback IP104.17.3.184:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 16 Apr 2024 14:25:59 GMT
content-length: 0
cache-control: max-age=300, public
location: /turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
vary: Accept-Encoding
server: cloudflare
cf-ray: 8754d90c3c8156bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| exclusiveholidayresorts.com/favicon.ico | 192.185.112.133 | | 4.7 kB |
URL exclusiveholidayresorts.com/favicon.ico IP192.185.112.133:0 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.exclusiveholidayresorts.com.au FingerprintF0:20:4B:6B:B2:51:D1:6D:6B:BA:DC:39:09:6A:B4:1F:9A:DE:6B:E7 ValidityFri, 22 Mar 2024 20:19:11 GMT - Thu, 20 Jun 2024 20:19:10 GMT
File typeHTML document, ASCII text, with very long lines (358) Hasha8063bd37d3c8fb3176a6bf140558a4d e32cf4b407db3d3773ded13ff64b70fdbad7735f bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482
GET /favicon.ico HTTP/1.1
Host: exclusiveholidayresorts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ==
Cookie: PHPSESSID=55509e2253c2ef6edc347850d6b27a8e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
last-modified: Sat, 01 Oct 2022 14:55:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4677
content-type: text/html
date: Tue, 16 Apr 2024 14:25:59 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/3ub7s/0x4AAAAAAAXS7ej_C0NMJvaq/auto/normal | 104.17.3.184 | | 22 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/3ub7s/0x4AAAAAAAXS7ej_C0NMJvaq/auto/normal IP104.17.3.184:0
File typeHTML document, ASCII text, with very long lines (41919) Hashf7962d8ee636fa7c2850e4577711703b 2b2f082aace3821c8f8f71d35f1978705f18539a 2c23ab9214c449e9e0e899c3b945520f9254414f9d9389a5a4903703c9277bc3
GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/3ub7s/0x4AAAAAAAXS7ej_C0NMJvaq/auto/normal HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 14:25:59 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: cross-origin
document-policy: js-profiling
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
server: cloudflare
cf-ray: 8754d90d5c010b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8754d90d5c010b4d | 104.17.3.184 | | 126 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8754d90d5c010b4d IP104.17.3.184:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size126 kB (126221 bytes) Hash1eb8a1e6b6a8c73648590b7af502ba2d 046e58d130c9ed2c3c33ea12decbe875c2625ce9 f1680bb03058c0d8df558535628c023eb33c076aa7965b6909ad6c37f15cabc5
GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8754d90d5c010b4d HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/3ub7s/0x4AAAAAAAXS7ej_C0NMJvaq/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 14:25:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
server: cloudflare
cf-ray: 8754d90ddc790b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8754d90d5c010b4d/1713277560239/4d1b42cee9e443d145a330a97e1063055e504b47be1777771727051b6a8286cf/xNfl3gvbK_S8lK4 | 104.17.3.184 | | 11 kB |
URL challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8754d90d5c010b4d/1713277560239/4d1b42cee9e443d145a330a97e1063055e504b47be1777771727051b6a8286cf/xNfl3gvbK_S8lK4 IP104.17.3.184:0
Hash352d8448359580bd5d4057b6b13cafdd d3aceaf809f763685db71a1786f9dee25eb97c31 9c07f40df9cb653ae3c1ea4ad2fa57a9674ffcff19b9fc0209291f2cb8188630
GET /cdn-cgi/challenge-platform/h/b/pat/8754d90d5c010b4d/1713277560239/4d1b42cee9e443d145a330a97e1063055e504b47be1777771727051b6a8286cf/xNfl3gvbK_S8lK4 HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/3ub7s/0x4AAAAAAAXS7ej_C0NMJvaq/auto/normal
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 401 Unauthorized
date: Tue, 16 Apr 2024 14:26:00 GMT
content-type: text/plain; charset=UTF-8
www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gTRtCzunkQ9FFozCpfhBjBV5QS0e-F3d3FycFG2qChs8AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1QvuFhVj8-HIEpd2829MedEvnrcAHahftJq4lCTdordKDtEpBDr1tC6_z1kq102Fe8SVbT4nRFRPCH_vL6Pwcc16C8jLMMvXraoC-BiyzAX3Yyr6lZj9UCQ7aK3JEr-tlD2wmLRtqyXfZQu9FdZsCMm0LU5LDAKE1uUBeAV-vLkP_1imLjHgbFE2lJH52yahbxiIjoqT_3PjB45ow3W9ciKiR89cUoS7X-sc6I2Lo7P_Y_FH4aGxC4fBDbjKZDO7UYOs3i1xJCHhgRA2dPWk0tZTjV7-jJE-oyRiReJNq7shr4jYws0e9BzlY1UCMa-U_JWdRb9So4JnoGPmfvSU_QIDAQAB", max-age=20, PrivateToken challenge="AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIE0bQs7p5EPRRaMwqX4QYwVeUEtHvhd3dxcnBRtqgobPABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA1FEYykHcK8H9rb_u0aFz3CmWgYloQw4YhedoEOAjJ0vy2Axa4f9UG9Dzs4uXS34_h8l6MDo2nRCvLI9lvebilMnTjCn-6D77bewqYxJKUFZW1z2jBIdu03TrETczfEg7kxgKtJE9NXGDjYJcF_iMgzgNA0PEAVM89tUYXXlFy4cUAGlqU2mPpIEOxm5ARsXC-zlLK60fkJ4cOsZRkZa6EExdhmgdwQ0fEJuSOHrBO_-zJn4hUP8q9g4yqkxW2UrfJgD07F4HaHGBEiei06sGDvH2NEPvswEl5dTGxutNrxlU7W24iYhNa2nhjlc53nNb0mKtszv-czVE9UhXyJ7-RQIDAQAB", max-age=20
server: cloudflare
cf-ray: 8754d911a8340b4d-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback | 104.17.3.184 | | 24 kB |
URL challenges.cloudflare.com/turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback IP104.17.3.184:0
File typeJavaScript source, ASCII text, with very long lines (40613) Hashd1048a66fc11ea28c3cb1488fac82c62 f055707cf91f637ec19bf5e65bf378857e798469 8f1ad19042c2f9ee60c2de21f37f788af7b1ecccda8eec1d877f9b9c0e994370
GET /turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exclusiveholidayresorts.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:25:59 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 8754d90c6cb556bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== | 192.185.112.133 | 302 Found | 1.6 kB |
URL User Request POST HTTP/2exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== IP192.185.112.133:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.exclusiveholidayresorts.com.au FingerprintF0:20:4B:6B:B2:51:D1:6D:6B:BA:DC:39:09:6A:B4:1F:9A:DE:6B:E7 ValidityFri, 22 Mar 2024 20:19:11 GMT - Thu, 20 Jun 2024 20:19:10 GMT
File typeHTML document, ASCII text, with very long lines (3255), with no line terminators Hashb7892c9f7f39e8f13c02b4d699971605 613abf574330f01304a593e7c57e601e41a47420 c738ac14dfc44d9791550ac529b13c4f10b1e9bc0f3d91da3cc786bbb4a78737
POST /.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== HTTP/1.1
Host: exclusiveholidayresorts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 560
Origin: https://exclusiveholidayresorts.com
DNT: 1
Connection: keep-alive
Referer: https://exclusiveholidayresorts.com/.ctdi/iydygxmhyg/Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ==
Cookie: PHPSESSID=55509e2253c2ef6edc347850d6b27a8e
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
location: https://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ==
vary: Accept-Encoding
content-encoding: gzip
content-length: 1554
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 14:26:20 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| cloudflare-ipfs.com/favicon.ico | 104.17.96.13 | 404 Not Found | 14 B |
URL GET HTTP/3cloudflare-ipfs.com/favicon.ico IP104.17.96.13:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeASCII text, with no line terminators Hashd0fbda9855d118740f1105334305c126 bc3023b36063a7681db24681472b54fa11f0d4ec a469ab4ca4e55bf547566e9ebfa1b809c933207e9d558156bc0c4252b17533fe
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe
Cookie: __cf_bm=60zJxIFTWtCc8WvJrMSse9FN9.SwAqhOQv0AfWYJJGI-1713277581-1.0.1.1-lzmMEIycRCP8GOtrBeDtZRKK_aUxdEzwYa_658vOYytuRVbzhiVUiujOCSzLHyZIXNDaKLixO5rVBMVtMUPOiQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 16 Apr 2024 14:26:21 GMT
content-type: text/plain;charset=UTF-8
content-length: 14
vary: Accept-Encoding
server: cloudflare
cf-ray: 8754d9933fcb7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe | 104.17.96.13 | 200 OK | 2.9 kB |
URL User Request GET HTTP/2cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe IP104.17.96.13:443
CertificateIssuerLet's Encrypt Subjectcloudflare-ipfs.com Fingerprint18:E5:C9:71:96:8A:A9:48:E2:79:2A:29:91:D2:4E:46:90:B7:5D:9F ValiditySun, 25 Feb 2024 02:55:05 GMT - Sat, 25 May 2024 02:55:04 GMT
File typeHTML document, ASCII text, with very long lines (2950), with no line terminators Hash6aeaed8bb5114408e21bbb95f8158128 07e22e3de516c035b11ec4506e686e274ceddbcb ab0ada7867a28845ffb46ade0767258c10ac9b2ca67c20a13be2fd655a42eb09
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe HTTP/1.1
Host: cloudflare-ipfs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://exclusiveholidayresorts.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Sec-Fetch-User: ?1
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 14:26:21 GMT
content-type: text/html
cf-ray: 8754d98e2feb5693-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 13823
cache-control: public, max-age=29030400, immutable
etag: W/"bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe"
vary: Accept-Encoding
access-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With
access-control-allow-methods: GET
access-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output
x-cf-ipfs-cache-status: hit
x-ipfs-path: /ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe
x-ipfs-roots: bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe
set-cookie: __cf_bm=60zJxIFTWtCc8WvJrMSse9FN9.SwAqhOQv0AfWYJJGI-1713277581-1.0.1.1-lzmMEIycRCP8GOtrBeDtZRKK_aUxdEzwYa_658vOYytuRVbzhiVUiujOCSzLHyZIXNDaKLixO5rVBMVtMUPOiQ; path=/; expires=Tue, 16-Apr-24 14:56:21 GMT; domain=.cloudflare-ipfs.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sevenmanjungle.com/jsnom.js | 0.0.0.0 | | 0 B |
URL GET sevenmanjungle.com/jsnom.js IP0.0.0.0:0
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ==
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jsnom.js HTTP/1.1
Host: sevenmanjungle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.socket.io/4.6.0/socket.io.min.js | 143.204.55.77 | 200 OK | 46 kB |
URL GET HTTP/2cdn.socket.io/4.6.0/socket.io.min.js IP143.204.55.77:443
Requested byhttps://cloudflare-ipfs.com/ipfs/bafkreihikmj7cdvbuzfnjxdbspzrec4nr7ecpn5bx7tzmrxsp6kyxamlhe#Y29udGFjdF91c0BvdXRzZWxsaW5jLmNvbQ== CertificateIssuerAmazon Subjectcdn.socket.io FingerprintBB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED ValiditySun, 22 Oct 2023 00:00:00 GMT - Sun, 17 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (45667) Hash80f5b8c6a9eeac15de93e5a112036a06 f7174635137d37581b11937fc90e9cb325077bce 0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542
GET /4.6.0/socket.io.min.js HTTP/1.1
Host: cdn.socket.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cloudflare-ipfs.com
DNT: 1
Connection: keep-alive
Referer: https://cloudflare-ipfs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-disposition: inline; filename="socket.io.min.js"
content-encoding: gzip
date: Mon, 15 Jan 2024 16:33:26 GMT
etag: W/"80f5b8c6a9eeac15de93e5a112036a06"
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-cache: HIT
x-vercel-id: fra1::gsg9m-1705336406533-adf1f7d78a76
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nnUmcmHX236ha6frsm3lvADPTQui8RpcL84sEVVfmO3pq5MjZY5TVA==
age: 7941175
X-Firefox-Spdy: h2
|
|
0.0.0.0