200 OK 35 kB IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Resource Info
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2125)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 35 kB (35310 bytes)
MD5 bfea1594a5ae520d9b593873164d4a89
SHA1 6916724904b96df417fec9139b59d518fddcbbe1
SHA256 0a18a2cc99532fd665e810a5f7c46a337d6d9dbff7a0dce5ba2cc651d00016ce
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET / HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
esky-correlation-id: A55ED2C2-F5E5-F577-091A-F0DB51A74B73
x-generated-by: dbr30-b1713
content-language: it
esky-resource-type: landing-page-main
uber-trace-id:
x-request-id: 4e045991ca155cf0f11d943e8aeeb80a69af401c
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
x-akamai-transformed: 9 36376 0 pmb=mTOE,2
content-encoding: gzip
expires: Tue, 17 Oct 2023 08:30:26 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:26 GMT
content-length: 35310
content-security-policy-report-only: frame-ancestors 'self' https://skybox.eskypartners.com; report-uri https://secure.esky.com/csp-report
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7200; HttpOnly
bm_mi=C28D8202806D1DE2FB4B0680AE697C5E~YAAQnphUaHTcBzmLAQAAdffBPBVBaTCdIk1r+kPAG2igV35rP+zV3WMliml29rYq0r/sW1ifmoDpwr8o15x1ujFOEtIIYUUAEkN4orWqsxwHdEyF6JbngCYKwrg5iK/Z6R6uMnKyXFwi0Kwk6qxO4U366uNojJVS/SdOKOAf6Ur20jznLnH4XpeCKA5TsmUh6fPhg/aquYZfkX0qrzafXAB6oVvcmZgnGmRqY3SV2FAQ87/gUSqfSnwwkW58Q9s/BIlpaH9kVZD2m7z9bN+isjNrUemwmxmPohy6tEW7/E3mDtJzdMvWp7O2XH/c+jwKgA==~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 08:30:26 GMT; Max-Age=0; Secure
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/css/default/templates/default.css
200 OK 29 kB URL
www.eskytravel.it/res/b1713/eui/css/default/templates/default.css
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 29 kB (28678 bytes)
MD5 23dfb7573da058a332073c59fa4b5a71
SHA1 a7bbe1685e25e1130f9c846cccd656489dc878a5
SHA256 d6f24e9d6e2f4233bbf662f8c4c35ff622af2bb26331ad0e5133c455b3eb0087
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/css/default/templates/default.css HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 28678
last-modified: Thu, 12 Oct 2023 07:51:07 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785510
expires: Thu, 26 Oct 2023 10:42:17 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/css/default/pages/mainpage/normal.css
200 OK 14 kB URL
www.eskytravel.it/res/b1713/eui/css/default/pages/mainpage/normal.css
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 14 kB (14355 bytes)
MD5 ac151a44bd1d75dd7223e98e65cdd6fb
SHA1 466d9aef769380608a3e45144d749b25f7fa11ba
SHA256 fc0aa4a1fcbb081476bb375d2139fe071ba57b28aec4b184b3165465024144c3
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/css/default/pages/mainpage/normal.css HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 14355
last-modified: Thu, 12 Oct 2023 07:51:07 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785552
expires: Thu, 26 Oct 2023 10:42:59 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/1.js
200 OK 3.7 kB URL
www.eskytravel.it/res/b1713/eui/js/1.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (9468), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 3.7 kB (3715 bytes)
MD5 10818033e9333734f08debaa2387837f
SHA1 c8e8d667e8c415ae8a0b73649281b8c218ea9337
SHA256 c2587dc4b9107269b74abb513edf93248f70d05ad65e1127cf16c3a3ee00145a
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/1.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3715
last-modified: Thu, 12 Oct 2023 08:04:39 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785602
expires: Thu, 26 Oct 2023 10:43:49 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/3.js
200 OK 9.9 kB URL
www.eskytravel.it/res/b1713/eui/js/3.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (35911), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 9.9 kB (9885 bytes)
MD5 74cc88d55e7ea88a951b9d9ccd9ce170
SHA1 0b3698c2c85f4e348d4f24f078911c04386ef9d7
SHA256 ad0cc3183c5219b5f3135886d503e7e9f5c25d24241417576f9a6062744a2024
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/3.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 9885
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=787679
expires: Thu, 26 Oct 2023 11:18:26 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET cdn.speedcurve.com/js/lux.js?id=4134562730
200 OK 8.0 kB URL
cdn.speedcurve.com/js/lux.js?id=4134562730
IP / ASN
151.101.2.217
#54113 FASTLY
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (20621)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 8.0 kB (8048 bytes)
MD5 dfc8b5434fc9480fa24ca71bf9c32d5b
SHA1 6e5959c52a5a02e0a0dabf531d808b43ac32a3fc
SHA256 d3caf8d2447ad27bb6055ab83fe9c0656f64d5041f7484efa2904bbda237c5fd
Certificate Info
Issuer GlobalSign nv-sa
Subject *.speedcurve.com
Fingerprint B7:44:08:A3:75:F9:72:EB:F9:50:5C:99:94:F7:27:A6:AD:E3:FF:65
Validity Wed, 19 Apr 2023 23:47:52 GMT - Mon, 20 May 2024 23:47:51 GMT
GET /js/lux.js?id=4134562730 HTTP/1.1
Host: cdn.speedcurve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1697528828&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=WSuShm6Ok5XAP%2F96gZr5nweEuc2bGiwnAimipcTp0SQ%3D"}]}
reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1697528828&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=WSuShm6Ok5XAP%2F96gZr5nweEuc2bGiwnAimipcTp0SQ%3D
nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
server: Apache
cache-control: max-age=604800
expires: Tue, 24 Oct 2023 07:47:08 GMT
access-control-allow-origin: *
timing-allow-origin: *
last-modified: Tue, 17 Oct 2023 07:47:08 GMT
content-type: application/javascript; charset=utf-8
via: 1.1 vegur, 1.1 varnish
content-encoding: gzip
accept-ranges: bytes
date: Tue, 17 Oct 2023 08:30:27 GMT
age: 2599
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1697531427.140305,VS0,VE0
vary: Accept-Encoding
content-length: 8048
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/4.js
200 OK 9.8 kB URL
www.eskytravel.it/res/b1713/eui/js/4.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type Unicode text, UTF-8 text, with very long lines (35901), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 9.8 kB (9779 bytes)
MD5 1f63e0b7a8cce4909b26bf05c5e8f801
SHA1 b3d21c29b8e7cb0aa7d406ce4145cb0e4156a20f
SHA256 c371b42ffd71fabc92febbbffb777498819881e7ff5624fc9a9ac7ede47b45d9
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/4.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 9779
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785433
expires: Thu, 26 Oct 2023 10:41:00 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/5.js
200 OK 21 kB URL
www.eskytravel.it/res/b1713/eui/js/5.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (21085)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 21 kB (21255 bytes)
MD5 56d9ab10473b9ecbfd0a3f2473e6f960
SHA1 20a8f62dabf3655757bb846f59f7f7f2771cc75a
SHA256 c1581e3d7ab2471711553a466bb9042d4da4df85a0c3ab0a8e14cb5580b9da48
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/5.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 21255
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=787737
expires: Thu, 26 Oct 2023 11:19:24 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/6.js
200 OK 4.1 kB URL
www.eskytravel.it/res/b1713/eui/js/6.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (6820)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 4.1 kB (4068 bytes)
MD5 6eb8621a4ccd4b70e6695a203053db59
SHA1 76034da17b4ffb8d81f21d88de7fce74c8dde327
SHA256 cb996fa4f12c2db7218c0712b001eedf0aa7e73b11fc2fea56024c40ca82b811
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/6.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 4068
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785344
expires: Thu, 26 Oct 2023 10:39:31 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/common.js
200 OK 40 kB URL
www.eskytravel.it/res/b1713/eui/js/common.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 40 kB (40462 bytes)
MD5 36e1ad9197e5143c1b182006d5042896
SHA1 9a55b5df74f633c310897bd50e9de013fa355fa4
SHA256 f775f6ddab2bac87ee23bd8ccd252b4ea699ca8c03ab3813b5a1d080b238279b
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/common.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 40462
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785358
expires: Thu, 26 Oct 2023 10:39:45 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/8.js
200 OK 15 kB URL
www.eskytravel.it/res/b1713/eui/js/8.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (60242), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 15 kB (15419 bytes)
MD5 f62eba4060ae2e30f06372e031618f9d
SHA1 901dfea67867f0c75a65145276ec6f3202ffce15
SHA256 dd26c4443d76e4a54e8a24ec77e03af096b105756978a0e8672d872469a88a8e
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/8.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 15419
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785497
expires: Thu, 26 Oct 2023 10:42:04 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/7.js
200 OK 3.1 kB URL
www.eskytravel.it/res/b1713/eui/js/7.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (19454), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 3.1 kB (3061 bytes)
MD5 8925db3c282550e5fd79887862f5787c
SHA1 870b10c8e804e439a0f6e6bf31e689a5a7ea09bd
SHA256 64e39125703c93ee26068f0aedf16203b04f14319ea6b271f2523882ca6e3b43
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/7.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3061
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785342
expires: Thu, 26 Oct 2023 10:39:29 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/router.js
200 OK 3.4 kB URL
www.eskytravel.it/res/b1713/eui/js/router.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (8531), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 3.4 kB (3390 bytes)
MD5 73943a04937f234792941673c4d4756a
SHA1 c31c6fdf1e86b9322c003a4f10652f1b446be5e1
SHA256 3e83048336e0e47c30bc7a19cb607b05c82ccf3cef051a7633ea729133deaac4
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/router.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3390
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785339
expires: Thu, 26 Oct 2023 10:39:26 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/partners-locale/it_it.js
200 OK 3.4 kB URL
www.eskytravel.it/res/b1713/eui/js/partners-locale/it_it.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type Unicode text, UTF-8 text, with very long lines (10564), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 3.4 kB (3385 bytes)
MD5 05e2c9f586dc7a3f0e66e4835de27215
SHA1 1cbdd867282fecb05fb0599f3e123d888b58628d
SHA256 21397f87e1e2eb9ebcd80b466975f7635a702662d0ab19252cb0e9dfbd3576e2
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/partners-locale/it_it.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 3385
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785464
expires: Thu, 26 Oct 2023 10:41:31 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/akam/13/3d0324de
200 OK 8.8 kB URL
www.eskytravel.it/akam/13/3d0324de
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/xstorage.html
Resource Info
File type ASCII text, with very long lines (14360)
First Seen 2023-03-08
Last Seen 2023-10-17
Times Seen 6
Size 8.8 kB (8755 bytes)
MD5 e1647fea5ef495c0d76a00c1abe1752e
SHA1 758ace17776c485aae3662366baf9d55c31a40d8
SHA256 af58756f6b684ed00fbb2bb8da71d582f5e23b66a36a1e7467526086e0874cbe
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /akam/13/3d0324de HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Feb 2022 15:12:48 GMT
etag: "96c41dab296eb86db791650f725d2f9bf792c7ca3b20be09b97e4a1c356226a3"
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 8755
expires: Tue, 17 Oct 2023 08:30:27 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaIzcBzmLAQAATfnBPBXejyf1pQirhw6Ko++lRqRMWYb9XeL1ippkdcz1CkjWFPURuzDpiv3MGXECJZxtNgL8rScDmodTOPLabW5qwnRYFmzVo7jwolkOU/jxIhc6kO3nzSZNce7O6vcWpcAAjDhs8tJhpwwcCR6LOWKlYlkt7FZkBxowWK8gFWsDQRlmzSzJnS15D3owdnfoyaT5ESFlZyB68eF3KYdTZJdx/xEB6AIZCViZp7PUsEl/PytXTuzlEQPZrt+hrrHcovx9yzf73f4OOSdaY/FZLlVUD96VXxUevaVxbhwnGoP9FuZjDYRao08mTnyA0gQlIpHdvYgkuu6pLwKLIzgM5Uj1CMpyJAJNrY0sa+4zZ0AwomXrpIzkU0lO4k/TATffI3SbDc9aCc/IUwfDcG8RM6p1Ni6Z0/ND3mknRHHXq2WOPcVi41XcdfZjcSp0846gUEggzHqZgOk5aiPIrQ==; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/11.js
200 OK 29 kB URL
www.eskytravel.it/res/b1713/eui/js/11.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (63429)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 29 kB (29293 bytes)
MD5 34d95d519936073578b2cba69b0d501c
SHA1 51c177c6416fbe6dd71d5ff934df65b2541ecaef
SHA256 a43c88610d1327bac868114385cb0c0a942dda3f47442d34f4b7b6c2aa5af7bf
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/11.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 29293
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785263
expires: Thu, 26 Oct 2023 10:38:10 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/0.js
200 OK 61 kB URL
www.eskytravel.it/res/b1713/eui/js/0.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (60781)
First Seen 2023-05-09
Last Seen 2023-10-17
Times Seen 1
Size 61 kB (61071 bytes)
MD5 6fecaa8482af64b5e01edf39bdea9b0d
SHA1 7641abbc6245b76d20d2dd1912381bfde1566cb2
SHA256 2c9acbd74a48039642026812e6ad5f3e353e5d602a36474a5dfa9c2d4ace53d8
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/0.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 61071
last-modified: Thu, 12 Oct 2023 08:04:39 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785322
expires: Thu, 26 Oct 2023 10:39:09 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/9.js
200 OK 12 kB URL
www.eskytravel.it/res/b1713/eui/js/9.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (38623)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 12 kB (11618 bytes)
MD5 a00a639ea3fb04e567f27116b1d3374d
SHA1 f46119362de71189041f2ca7eaad9fdc4de24ca1
SHA256 530e6c8bff17b49fdc045ba0e05b2d52f4c807b47947cce223d0c14db275fbd4
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/9.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 11618
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785433
expires: Thu, 26 Oct 2023 10:41:00 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/14.js
200 OK 4.8 kB URL
www.eskytravel.it/res/b1713/eui/js/14.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (14938), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 4.8 kB (4786 bytes)
MD5 51a4ebac0d3a93d794c7f43f2256bf97
SHA1 f5281500c4c48b71c0f5621ce54f023d7cf1a7dd
SHA256 48385f285e88819d5c58d6137904987c0fc1a994dc9451bdfe4e7f50a399a515
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/14.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 4786
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785413
expires: Thu, 26 Oct 2023 10:40:40 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/10.js
200 OK 2.4 kB URL
www.eskytravel.it/res/b1713/eui/js/10.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (26229), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 2.4 kB (2444 bytes)
MD5 94d75364f25ca7995132240b3058d79c
SHA1 dc3a1ab718121ccb7c517e2062dc73f2b8483962
SHA256 c8f44bf5950a878f0e40fe8ce4fa5aa2cf0b771282199ecb01e9973981b47c0a
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/10.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 2444
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785522
expires: Thu, 26 Oct 2023 10:42:29 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/mainpage/normal.js
200 OK 6.1 kB URL
www.eskytravel.it/res/b1713/eui/js/mainpage/normal.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type Unicode text, UTF-8 text, with very long lines (18186), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 6.1 kB (6057 bytes)
MD5 ffe49df04d84b779b7e3b7d0737fdb09
SHA1 5f4ddfe8fc74e872b1cbe4f28a6f7545e69a3e68
SHA256 4939951a22fe9787dd50bcb60b0527a7bb826e8090e0684cebfd7da6fe8c4cda
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/mainpage/normal.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 6057
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785419
expires: Thu, 26 Oct 2023 10:40:46 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/2.js
200 OK 14 kB URL
www.eskytravel.it/res/b1713/eui/js/2.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (50214), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 14 kB (14125 bytes)
MD5 a6d795341e0d08b86cc90e86f8e319d1
SHA1 3e2feb5dcd82a7f407416d470b043956aca30a81
SHA256 fd316cac8152ce5135d3ea98cc56d71e9500fc9a8657f6b6dd32fbd5e5019851
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/2.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 14125
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785534
expires: Thu, 26 Oct 2023 10:42:41 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2266
Size 472 B (472 bytes)
MD5 f057e7c2876f8d7a66dd7ae5665cfae6
SHA1 e15404d3eb7ffb069c08309d7985ce648aa0aa6f
SHA256 9019fedb4e1d2375d256463b8a04655899aff7c91aa147e5cee808df795e5d82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.eskytravel.it/_fe/img/icon_mail.svg?s=20x20
200 OK 253 B URL
www.eskytravel.it/_fe/img/icon_mail.svg?s=20x20
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (423), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 253 B (253 bytes)
MD5 78ff88486e708217f1d6f69774f4c501
SHA1 f631d469afab25b6fe98af797b6fbed2215e0d99
SHA256 0a27c09838d395f9df51cd3634bd698c5d9f3693700583fb3583dbead38f3472
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_mail.svg?s=20x20 HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 06:15:17 GMT
access-control-allow-origin: *
etag: W/"1a7-9jHUaa+rJbb+mK95e2++0iFeDZk"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 253
cache-control: private, max-age=3503
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_umbrella_big.svg?c=ffffff
200 OK 589 B URL
www.eskytravel.it/_fe/img/icon_umbrella_big.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1079), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 2
Size 589 B (589 bytes)
MD5 952703fac2371ee7ac425be5b2fb66f3
SHA1 95126d4a8d0598d57fbbf86ef29b7e640cea77e8
SHA256 aa8a162ac43fc7f9cb177d1710c7925a92a6de9157c8ac5ca87c230a661de786
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_umbrella_big.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 17:48:01 GMT
access-control-allow-origin: *
etag: W/"437-lRJtSo0FmNV/u/hu8pt+ZAzqd+g"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 589
cache-control: private, max-age=943
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_google_multicolor.svg?s=20x20
200 OK 474 B URL
www.eskytravel.it/_fe/img/icon_google_multicolor.svg?s=20x20
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (849), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 474 B (474 bytes)
MD5 005e393ab6f37032c802ac337b353fd4
SHA1 131c634eb293be34c20260ab840b322d9cad4b2d
SHA256 db777f4d266482f637e45f305afe0725a7722c088d4f022fcc538fb71efb2518
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_google_multicolor.svg?s=20x20 HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 06:47:10 GMT
access-control-allow-origin: *
etag: W/"351-ExxjTrKTvjTCAmCrhAsyLZytSy0"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 474
cache-control: private, max-age=317
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/js/affiliates/cj.js
200 OK 886 B URL
www.eskytravel.it/res/b1713/eui/js/affiliates/cj.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (1751), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 886 B (886 bytes)
MD5 290c7e803eed1d6938779a203c3ed762
SHA1 557ad77259cc2f1f9e2c9dddfdd0d1f91624daf7
SHA256 52b46ae0e9d68b5c0e6361c7d393115513732e96dc735c3587ce676f316629ad
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/js/affiliates/cj.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 886
last-modified: Thu, 12 Oct 2023 08:04:40 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785497
expires: Thu, 26 Oct 2023 10:42:04 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_plane_right.svg?c=ffffff
200 OK 752 B URL
www.eskytravel.it/_fe/img/icon_plane_right.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1446), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 752 B (752 bytes)
MD5 0ac897148a33bd1789d8af019c11f9ab
SHA1 789d1cbb9fe514a1a68f4668206cb74c98f60394
SHA256 a3d00e8b97b4f996ef4504bbeeab5d6b75e54efd4519e6c010d5a44f090795cf
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_plane_right.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 18:39:56 GMT
access-control-allow-origin: *
etag: W/"5a6-eJ0cu5/lFKGmj0ZoIGy3TJj2A5Q"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 752
cache-control: private, max-age=1001
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_packages_wide.svg?c=ffffff
200 OK 1.1 kB URL
www.eskytravel.it/_fe/img/icon_packages_wide.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2264), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 1.1 kB (1127 bytes)
MD5 b714c39f4ba7b0af9944447135f1e215
SHA1 8b203bb3eb39ba77fa6e262b3c6e1551204ff758
SHA256 cc96059901c8c54de05e53e74906d03a3e8cc2b4c0d5cce49177ee390ff0d3ab
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_packages_wide.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 05:03:01 GMT
access-control-allow-origin: *
etag: W/"8d8-iyA7s+s5unf6biYrPG4VUSBP91g"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 1127
cache-control: private, max-age=1157
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/illustration-default-user_zone.svg?s=80x80
200 OK 2.9 kB URL
www.eskytravel.it/_fe/img/illustration-default-user_zone.svg?s=80x80
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6554), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 2.9 kB (2905 bytes)
MD5 e9810a67d2fb429d1fd5729ff9750d37
SHA1 847b4346222087b4a8d0a8f3efc3561a8c616e42
SHA256 15b02a4b66fe8b05c70ff5a3dea393f00a697ee14b9c22ee659ea5038cce9966
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/illustration-default-user_zone.svg?s=80x80 HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 06:47:10 GMT
access-control-allow-origin: *
etag: W/"199a-hHtDRiIgh7So0Kjz78NWGoxhbkI"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 2905
cache-control: private, max-age=3496
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_eiffel_tower.svg?c=ffffff
200 OK 980 B URL
www.eskytravel.it/_fe/img/icon_eiffel_tower.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2312), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 980 B (980 bytes)
MD5 bc609ec21a3f3753af2f2e1b15cfe3a6
SHA1 7f5bfcdefb03e9ba731e5d81f3149e1d9c4bf898
SHA256 e11c9c6eb0f86c230c248ca07fa7e09c4b61b0a2c571c5055b174dd2db3085b7
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_eiffel_tower.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 07:08:19 GMT
access-control-allow-origin: *
etag: W/"908-f1v83vsD6bpzHl2B8xSeHZxL+Jg"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 980
cache-control: private, max-age=1438
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_beach.svg?c=ffffff
200 OK 768 B URL
www.eskytravel.it/_fe/img/icon_beach.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1455), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 768 B (768 bytes)
MD5 3332e9de981db54afa5238e39fb6bc3d
SHA1 d4d1b7d87abf8ca0310d4e656119f4c383bd2c9a
SHA256 f6818ac92f98e797e984cb5aaba2e72564382e64e0ba1f89cf5f003433ba1dd5
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_beach.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 06:29:24 GMT
access-control-allow-origin: *
etag: W/"5af-1NG32Hq/jKAxDU5lYRn0w4O9LJo"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 768
cache-control: private, max-age=3532
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_facebook_multicolor.svg?s=20x20
200 OK 335 B URL
www.eskytravel.it/_fe/img/icon_facebook_multicolor.svg?s=20x20
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (507), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 335 B (335 bytes)
MD5 e09d1990dad2457a98b7e3e0829862ab
SHA1 0151e9a8e5f1c5e0ccc78acfa14d0a37e25eea0f
SHA256 c2f3539c72bc461ea1701331abb3d7904661f077f0da539ad0fc3131f4db1c93
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_facebook_multicolor.svg?s=20x20 HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 06:47:10 GMT
access-control-allow-origin: *
etag: W/"1fb-AVHpqOXxxeDMx4rPoU0KN+Je6g8"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 335
cache-control: private, max-age=268
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/icon_hotel.svg?c=ffffff
200 OK 376 B URL
www.eskytravel.it/_fe/img/icon_hotel.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (606), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 376 B (376 bytes)
MD5 b8602f34ed74ec17330e8734bfb34446
SHA1 f4be222cb9a4757f7f45200fe3d21d4611b8a772
SHA256 71e37965ff56468624f082c7e7b776cbb11992fd8a26f5695309d6d7e5c7debc
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_hotel.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 19:41:27 GMT
access-control-allow-origin: *
etag: W/"25e-9L4iLLmkdX9/RSAP49IdRhG4p3I"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 376
cache-control: private, max-age=1044
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/esky_icon.png
200 OK 10 kB URL
www.eskytravel.it/_fe/img/esky_icon.png
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type PNG image data, 1024 x 1024, 4-bit colormap, non-interlaced\012- data
First Seen 2023-05-09
Last Seen 2024-08-21
Times Seen 4
Size 10 kB (10337 bytes)
MD5 23abbd01239f926ed1f8f1a3b9913c57
SHA1 d3674a8920b881c7daed87684e5012e455eb96cd
SHA256 92a5079754d6ebe2ffb0d0d5348486f1cb8bd1bcecc50a95586af93c39b4b561
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/esky_icon.png HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10337
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 15:58:32 GMT
etag: W/"2861-02dKiSC4gcfa7YdoTlAS5FXrls0"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=2231
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
1.6 kB URL
dvcasha2.ocsp-certum.com/
IP / ASN
23.36.79.17
#20940 Akamai International B.V.
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 1.6 kB (1599 bytes)
MD5 b1788099481dc27b9c8be1aec8490104
SHA1 e8df99e6f6ce351012fe302b52ab688d513a3093
SHA256 40bdeb9a482997de423cb625102bb855d07aa8c81113301f162f9a5b8e564901
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=549
Date: Tue, 17 Oct 2023 08:30:27 GMT
Connection: keep-alive
X-N: S
GET www.eskytravel.it/_fe/img/icon_car.svg?c=ffffff
200 OK 733 B URL
www.eskytravel.it/_fe/img/icon_car.svg?c=ffffff
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1334), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 733 B (733 bytes)
MD5 19f2aeaf319fafb170a8b4d0556f8efb
SHA1 3366fee1df699c189e1394d7a99d5bd06bf55b62
SHA256 16e70d9030352abdfacc46eadde5acbab2f6e0399fd21954659df5171c17ec54
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/icon_car.svg?c=ffffff HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 01:19:14 GMT
access-control-allow-origin: *
etag: W/"536-M2b+4d9pnBieE5TXqZ1b0Gv1W2I"
accept-ranges: bytes
server: esky-edge
content-encoding: gzip
content-length: 733
cache-control: private, max-age=1576
date: Tue, 17 Oct 2023 08:30:27 GMT
vary: Accept-Encoding
content-security-policy: script-src 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET static1.eskypartners.com/logos/eskypldbr30-white.svg
200 OK 2.2 kB URL
static1.eskypartners.com/logos/eskypldbr30-white.svg
IP / ASN
54.230.111.63
#16509 AMAZON-02
Requested by https://www.eskytravel.it/
Resource Info
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (966)
First Seen 2023-05-09
Last Seen 2023-10-17
Times Seen 1
Size 2.2 kB (2153 bytes)
MD5 51d4ffe80c19f09f2dbc4a5b15a8bd9b
SHA1 264bbff8358cc71190adc12ffbe151aa2aa58560
SHA256 764112f434ac0a5643c6c57ea015ff52269c359f3b1e0882dc44fbf34f28747d
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
GET /logos/eskypldbr30-white.svg HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2153
last-modified: Fri, 12 May 2017 06:07:08 GMT
accept-ranges: bytes
server: esky-edge
timing-allow-origin: *
date: Sat, 14 Oct 2023 08:21:36 GMT
expires: Sat, 21 Oct 2023 08:21:34 GMT
cache-control: max-age=604800
etag: "5915510c-869"
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N5l1iGY0g-iKoL8Ktq0JsirPEZ0IJvdKmNuurQpow_4FD4NGp9i0WA==
age: 259733
X-Firefox-Spdy: h2
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2266
Size 472 B (472 bytes)
MD5 f057e7c2876f8d7a66dd7ae5665cfae6
SHA1 e15404d3eb7ffb069c08309d7985ce648aa0aa6f
SHA256 9019fedb4e1d2375d256463b8a04655899aff7c91aa147e5cee808df795e5d82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.eskytravel.it/res/b1713/eui/img/stars_desktop.png
200 OK 15 kB URL
www.eskytravel.it/res/b1713/eui/img/stars_desktop.png
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type PNG image data, 969 x 213, 8-bit/color RGBA, non-interlaced\012- data
First Seen 2023-05-09
Last Seen 2024-08-21
Times Seen 4
Size 15 kB (15037 bytes)
MD5 64121ec131abfa9301fcc8cef5bf93fe
SHA1 5af8b8ff8ec338e0c43633d390a5f019b4b18095
SHA256 095c021af173fc972093ffe60ac7cdf1a6d492efb0086f73c757755deb6016df
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/img/stars_desktop.png HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/res/b1713/eui/css/default/templates/default.css
DNT: 1
Connection: keep-alive
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaIzcBzmLAQAATfnBPBXejyf1pQirhw6Ko++lRqRMWYb9XeL1ippkdcz1CkjWFPURuzDpiv3MGXECJZxtNgL8rScDmodTOPLabW5qwnRYFmzVo7jwolkOU/jxIhc6kO3nzSZNce7O6vcWpcAAjDhs8tJhpwwcCR6LOWKlYlkt7FZkBxowWK8gFWsDQRlmzSzJnS15D3owdnfoyaT5ESFlZyB68eF3KYdTZJdx/xEB6AIZCViZp7PUsEl/PytXTuzlEQPZrt+hrrHcovx9yzf73f4OOSdaY/FZLlVUD96VXxUevaVxbhwnGoP9FuZjDYRao08mTnyA0gQlIpHdvYgkuu6pLwKLIzgM5Uj1CMpyJAJNrY0sa+4zZ0AwomXrpIzkU0lO4k/TATffI3SbDc9aCc/IUwfDcG8RM6p1Ni6Z0/ND3mknRHHXq2WOPcVi41XcdfZjcSp0846gUEggzHqZgOk5aiPIrQ==; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Accept-Encoding
last-modified: Thu, 12 Oct 2023 07:54:14 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
server: esky-edge
content-encoding: gzip
content-length: 15037
cache-control: public, max-age=1380297
expires: Thu, 02 Nov 2023 07:55:24 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaNLcBzmLAQAAFfzBPBXB5LzXeU5yjBSA7ShlQPIouZTwVFsrAsmcSrAqhXZofF2UCcmsC5K8QzOhQk4hvh81FrDRlIt2YWIPpIWIOIABSNEL9jZL6E1oLe2p2PWvQAcWh2oH1S0zHHyZRfKOWc8dKaZPdQ+upVcQKWCov4YUr6Ps8whsrZqFM8nLQzrU2onMSDdVK34C3kpui0dXREDREI9WuEfWbuXClIAaXvz3O0Hndcy93GkllOBcATb0XSr6Bn7pn0roD8283JyZoY94CZakEFi6R56TRp2CroOTU5zV7quMz8R8EhtW30uMVGVc+Xl3FpzWB98ZDjlgNXnt7Yvh8uGUfFWK+wzBJot59lIL8sYSU0pyfa02PfvB1wqq2VKBQwgtL2Lokj+TmKAIisHYDiuIu95fIdOrwXES/xydFwEhX7VJ5X4WuyOHVRPJBJlssMSYEu1e03n3F8ZU5/vijBKkiYUQiR76omjj; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2430
Size 471 B (471 bytes)
MD5 4e3d632834f367982e02547ed01f3c2e
SHA1 e6de16d3f26695de5e45b6aed6bce1f0c8504fef
SHA256 5af172e50ca188e53368a2b368ef9b1c69fe0ca984d46d0993ec663ae1251d83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2430
Size 471 B (471 bytes)
MD5 4e3d632834f367982e02547ed01f3c2e
SHA1 e6de16d3f26695de5e45b6aed6bce1f0c8504fef
SHA256 5af172e50ca188e53368a2b368ef9b1c69fe0ca984d46d0993ec663ae1251d83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2430
Size 471 B (471 bytes)
MD5 4e3d632834f367982e02547ed01f3c2e
SHA1 e6de16d3f26695de5e45b6aed6bce1f0c8504fef
SHA256 5af172e50ca188e53368a2b368ef9b1c69fe0ca984d46d0993ec663ae1251d83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.eskytravel.it/getjsconfig?source=dbr_mainpage_index&partnerCode=ESKYTRAVELIT
200 OK 416 B URL
www.eskytravel.it/getjsconfig?source=dbr_mainpage_index&partnerCode=ESKYTRAVELIT
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 416 B (416 bytes)
MD5 10984ddfad3a8921c81923f819a2c8c4
SHA1 6d237d7fcd4c21dbc5a944c954d633ed4a651442
SHA256 df893d4cc1dbba66fc4a57f617e1d358eef9866708b1f7e5a8bb162916649190
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /getjsconfig?source=dbr_mainpage_index&partnerCode=ESKYTRAVELIT HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHPcBzmLAQAAdffBPBWvGB/kt1WyXiGhfLCU/qYhkva93Ln9SVWI3ggeKNhFKIf4FnhIthJGemQEamL2xC46NHJe4uLFIkOBmbk6EWGEdQz68EHbcCVaYDklog3e4hFGode6e5TBLvZXZk6ZoU6rCb/QpGvhBtDnDpytfbblAPm2Y+VsbqXOi4ATM4tS+fRrgM1nyPvxL/8wFc1SbqySDVSJqanTt3oEoICh9guSzAxOpOZLxZ/OrlVG1k0+Pj1YyzFyMorvVHQyz/kaRq2vI1EIGLEx2QGx1NwWCyiyRcdNavQ/RY53QOu0zFqV9qAx2VRc26nBguVKzkMaaUqtIxGTIhwLk8loaiaKbKbsm7FYO9wP4xCcFxxpHW03qzEW3ito; firstTimeVisit=202310170830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
content-length: 416
cache-control: max-age=3600, private
esky-correlation-id: 772DC21E-0731-3926-7F22-CDE7007676B3
x-generated-by: dbr30-b1713
content-language: it
esky-resource-type: dynamic
uber-trace-id:
x-request-id: 1fb6cb24988a91b525eff0e559e31d02a4766f2b
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
date: Tue, 17 Oct 2023 08:30:27 GMT
set-cookie: uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; expires=Mon, 17-Oct-2033 08:30:27 GMT; Max-Age=315619200; path=/
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
200 OK 14 kB URL
fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr5TRA.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 14256, version 1.0\012- data
First Seen 2023-04-28
Last Seen 2025-07-28
Times Seen 2340
Size 14 kB (14256 bytes)
MD5 0f7d9a10be7f1a2f1a2add4dded5dae5
SHA1 03184a1d29b1199670b159f72db9f134def99cb7
SHA256 5fc4c95920416b0ef0b5aee93a90984989183a6d29f712e725a3383309806a54
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/notosans/v32/o-0IIpQlx3QUlC5A4PNr5TRA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14256
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Oct 2023 21:08:36 GMT
expires: Fri, 11 Oct 2024 21:08:36 GMT
cache-control: public, max-age=31536000
age: 386511
last-modified: Thu, 05 Oct 2023 20:55:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 1508
Size 471 B (471 bytes)
MD5 779882817f8804aebd79fcce0967e23b
SHA1 436652deaf877d1391da5cd61e53d1966ef9e2b0
SHA256 236468f865699350e2f2ab76b1a226c1b24b8099527dcf661eccbdca3375ef82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.eskytravel.it/_fe/img/BOX_CITYBREAK_IT.jpg
200 OK 38 kB URL
www.eskytravel.it/_fe/img/BOX_CITYBREAK_IT.jpg
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 38 kB (37584 bytes)
MD5 457413fb4867e32b1940c43716adb2d1
SHA1 f9b204b785dbf519822dbca7a9f82885f18ecb90
SHA256 3f50999a8acb2e21feca47a1100bb1ac0c396efe5a9b43788a60b8153221bafc
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/BOX_CITYBREAK_IT.jpg HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaIzcBzmLAQAATfnBPBXejyf1pQirhw6Ko++lRqRMWYb9XeL1ippkdcz1CkjWFPURuzDpiv3MGXECJZxtNgL8rScDmodTOPLabW5qwnRYFmzVo7jwolkOU/jxIhc6kO3nzSZNce7O6vcWpcAAjDhs8tJhpwwcCR6LOWKlYlkt7FZkBxowWK8gFWsDQRlmzSzJnS15D3owdnfoyaT5ESFlZyB68eF3KYdTZJdx/xEB6AIZCViZp7PUsEl/PytXTuzlEQPZrt+hrrHcovx9yzf73f4OOSdaY/FZLlVUD96VXxUevaVxbhwnGoP9FuZjDYRao08mTnyA0gQlIpHdvYgkuu6pLwKLIzgM5Uj1CMpyJAJNrY0sa+4zZ0AwomXrpIzkU0lO4k/TATffI3SbDc9aCc/IUwfDcG8RM6p1Ni6Z0/ND3mknRHHXq2WOPcVi41XcdfZjcSp0846gUEggzHqZgOk5aiPIrQ==; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 37584
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 12:17:19 GMT
etag: W/"92d0-+bIEt4Xb9RmCLbynqfgohfGOy5A"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=673
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaNbcBzmLAQAAKPzBPBUZtlfwM8T80PR0OUwIflcFmi2LzQvK7K/mVqQ4x+eXHP2jwmmJ16BoTqobOsi+mMBoLNLt2FP3GmMv2mdbfHn1fEMSvAYZ0D7L6NHwNhnKYS+ddjV3aiQYoDq1q65BAuJKFH+amjv6AzDHvkjU0Sc5Kj2E13wZlE/bf261431kEE1soYYilfxreypOAapIidG3i7SCm4JKAI4SaNvaha/WUwlqdUFsbs3VrFYnqrtX5Kn6bPXNuJtyxxp8B8gMEXJ5tB7g4BFeNly9xMHzT1P8Mv+1schBdhKoH40OSHe6kKNfjoPDv1nAogl8/ZfezjTefm1Er7HjHzKyhZUoMoxPU/M0XeqCOBDHuBo0x00KMsPO8+V2+/Z0IUY0TOEC3WrYV+3Kfk57KQ5LhnNzTuNKUKcGquKxmoJn64H4/bnBe4OfYbVeySn5eiF9RneOVuwlhFwwM8fqbzzp47KURmn/; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/fonts/eSKY.woff2?39w0nz
200 OK 79 kB URL
www.eskytravel.it/res/b1713/eui/fonts/eSKY.woff2?39w0nz
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 79348, version 1.0\012- data
First Seen 2023-05-09
Last Seen 2023-10-17
Times Seen 1
Size 79 kB (79348 bytes)
MD5 e62012bebc8af3247636c9ce9a4fbae1
SHA1 31c97f107fc3a51c31e8cd8d46f0ad44f4de877b
SHA256 a506151eb9f3f9aec470106fbb81b256d848ffe0d1da07ac30e51bdacd7a1eeb
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/fonts/eSKY.woff2?39w0nz HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.eskytravel.it/res/b1713/eui/css/default/pages/mainpage/normal.css
DNT: 1
Connection: keep-alive
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaIzcBzmLAQAATfnBPBXejyf1pQirhw6Ko++lRqRMWYb9XeL1ippkdcz1CkjWFPURuzDpiv3MGXECJZxtNgL8rScDmodTOPLabW5qwnRYFmzVo7jwolkOU/jxIhc6kO3nzSZNce7O6vcWpcAAjDhs8tJhpwwcCR6LOWKlYlkt7FZkBxowWK8gFWsDQRlmzSzJnS15D3owdnfoyaT5ESFlZyB68eF3KYdTZJdx/xEB6AIZCViZp7PUsEl/PytXTuzlEQPZrt+hrrHcovx9yzf73f4OOSdaY/FZLlVUD96VXxUevaVxbhwnGoP9FuZjDYRao08mTnyA0gQlIpHdvYgkuu6pLwKLIzgM5Uj1CMpyJAJNrY0sa+4zZ0AwomXrpIzkU0lO4k/TATffI3SbDc9aCc/IUwfDcG8RM6p1Ni6Z0/ND3mknRHHXq2WOPcVi41XcdfZjcSp0846gUEggzHqZgOk5aiPIrQ==; firstTimeVisit=202310170830
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 79348
last-modified: Thu, 12 Oct 2023 07:54:12 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
accept-ranges: bytes
server: esky-edge
cache-control: max-age=785461
expires: Thu, 26 Oct 2023 10:41:28 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaNrcBzmLAQAALvzBPBVhsonUeIZLuJ/sjoKnCZ8pY6oJemZscQa+Ks5ZcD1zyN0qrHmWQRVkXmbm9pCCqJvNASBzAYkZQTouuEXqoT8R+Ju6AhNWzdsgyi8pMwUwClet2YZI6u6IxfeR7pGKpyKmE66LMHDVJdszqbDzmbc+aA2+8dG0Cw/vwg2jEqhAt37C/cyxIoSOL9Bcl5ft0vlpqZMJsQyTf9LqpLzr5FRqpgWEg4ZeTD4MMLOUoktNnpOPcJlSHEgGK8rlJgZrPEpQUrs4cuIOX9ryiKC6JhXJHPjDJqogjp0YUuIOc+pAEZkUk2st0EGGri5b3rpVSTmpCeSAvjqvi+w4PY/Zq3UKdtnaw/rCuU8IWbixf4FsK9C1Io95OMSR9ttV6WgVRG3TWme9XNTSwT9WbmpWkeGeGxBSfQ7PzxAOXh5wdDUYHZm6Ui9KncJT4MLNf0xjbV/E84oQTTMLuwg1lIfKx4Yb; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr4TRAW_0.woff2
200 OK 6.7 kB URL
fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr4TRAW_0.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 6744, version 1.0\012- data
First Seen 2023-05-06
Last Seen 2025-01-20
Times Seen 294
Size 6.7 kB (6744 bytes)
MD5 d512f3397f8a864777721c460b7279b8
SHA1 d2accc35f7bdca77941f86b3ce6b24c397ca510b
SHA256 fddfa9f33d8ab7c4132c72e417278b549b051c79d68512bed859762698a74990
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/notosans/v32/o-0IIpQlx3QUlC5A4PNr4TRAW_0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Oct 2023 21:40:28 GMT
expires: Fri, 11 Oct 2024 21:40:28 GMT
cache-control: public, max-age=31536000
age: 384599
last-modified: Thu, 05 Oct 2023 20:55:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.eskytravel.it/res/b1713/eui/img/sprite_footer.png
200 OK 45 kB URL
www.eskytravel.it/res/b1713/eui/img/sprite_footer.png
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type PNG image data, 294 x 255, 16-bit/color RGBA, non-interlaced\012- data
First Seen 2023-05-09
Last Seen 2023-10-17
Times Seen 1
Size 45 kB (45367 bytes)
MD5 aaedcdcdd98bdcf4216630e0217ddfa6
SHA1 d6e1cdfa2eb8022877bdb04e1cd023160c4fb440
SHA256 07897191cd959b6e14ba893751d87caeea11ec4798d0a59fed4599f00678ca0f
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/eui/img/sprite_footer.png HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/res/b1713/eui/css/default/templates/default.css
DNT: 1
Connection: keep-alive
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaIzcBzmLAQAATfnBPBXejyf1pQirhw6Ko++lRqRMWYb9XeL1ippkdcz1CkjWFPURuzDpiv3MGXECJZxtNgL8rScDmodTOPLabW5qwnRYFmzVo7jwolkOU/jxIhc6kO3nzSZNce7O6vcWpcAAjDhs8tJhpwwcCR6LOWKlYlkt7FZkBxowWK8gFWsDQRlmzSzJnS15D3owdnfoyaT5ESFlZyB68eF3KYdTZJdx/xEB6AIZCViZp7PUsEl/PytXTuzlEQPZrt+hrrHcovx9yzf73f4OOSdaY/FZLlVUD96VXxUevaVxbhwnGoP9FuZjDYRao08mTnyA0gQlIpHdvYgkuu6pLwKLIzgM5Uj1CMpyJAJNrY0sa+4zZ0AwomXrpIzkU0lO4k/TATffI3SbDc9aCc/IUwfDcG8RM6p1Ni6Z0/ND3mknRHHXq2WOPcVi41XcdfZjcSp0846gUEggzHqZgOk5aiPIrQ==; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Accept-Encoding
last-modified: Thu, 12 Oct 2023 07:54:14 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
server: esky-edge
content-encoding: gzip
content-length: 45367
cache-control: public, max-age=1380325
expires: Thu, 02 Nov 2023 07:55:52 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaNjcBzmLAQAAKvzBPBUN76WyzdNIeevZJcIaXVT5JpnuoD16s+9y5tEZj9StjLVJCg+5vUFs42ENvNfnqJAA/oqGnErgN7R9VKpxEp//HTfBlLpJ/Muu6EZu+C6+AgjR1Zy3/O1EYmCzpIaevHaSsmsi1LJKKPtYW4qop0GJF7Ut+8izy1C3rxYIuQl1wY56nOpKffCl3d8scsAYp2S2MLrR1gWvvwHYOCWjoBnU20XiW5NnYLXFW5X2a4k7tbq8AhdVPr8eSEH5T6YsnwWNDcu76g/n3Z2r7kLixjKL0TMsJIUgxEw3z12s+/rzdtUthzuX3mjQVNBViIWkZNLTuS38l4o9Pf1cJKRDh3hRjuuK8V94p6kwoYHCKZ6yybQYvPUg/mgHlrFHPxStgJ0afa1qDewXNI3gEBbnRtzikCZT2CnO+N61brukMctTl0AJryS3XSX7nh0o/kaEaODordQP6CWxN+Q/FNiTOw+9; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr6zRAW_0.woff2
200 OK 40 kB URL
fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr6zRAW_0.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 39592, version 1.0\012- data
First Seen 2023-05-01
Last Seen 2025-03-03
Times Seen 73
Size 40 kB (39592 bytes)
MD5 7da1a2ac672b31ae158cde5813fa33f9
SHA1 5c51a0ddeeb133da08ab3d70c2834b600142ae4c
SHA256 b22de96203399cc534a763a56f35f19d9a6e47034a0ff45900e5ea1528f1b495
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/notosans/v32/o-0IIpQlx3QUlC5A4PNr6zRAW_0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39592
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Oct 2023 21:40:24 GMT
expires: Fri, 11 Oct 2024 21:40:24 GMT
cache-control: public, max-age=31536000
age: 384603
last-modified: Thu, 05 Oct 2023 20:55:26 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2430
Size 471 B (471 bytes)
MD5 4e3d632834f367982e02547ed01f3c2e
SHA1 e6de16d3f26695de5e45b6aed6bce1f0c8504fef
SHA256 5af172e50ca188e53368a2b368ef9b1c69fe0ca984d46d0993ec663ae1251d83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr5jRAW_0.woff2
200 OK 7.4 kB URL
fonts.gstatic.com/s/notosans/v32/o-0IIpQlx3QUlC5A4PNr5jRAW_0.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 7424, version 1.0\012- data
First Seen 2023-05-09
Last Seen 2025-07-28
Times Seen 8
Size 7.4 kB (7424 bytes)
MD5 0a1d8673f78c5d5ec2c74302675ceee1
SHA1 d1cc37e15d1a7b0771d782b64b85a6da9fdee238
SHA256 6e9afc1dc2629f375e2befdb50c1f4e41f79444aa93b39ce0979c3573ca8b446
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/notosans/v32/o-0IIpQlx3QUlC5A4PNr5jRAW_0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Oct 2023 21:53:10 GMT
expires: Sat, 12 Oct 2024 21:53:10 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 05 Oct 2023 20:55:21 GMT
content-type: font/woff2
age: 297437
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
200 OK 30 kB URL
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 29752, version 1.0\012- data
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 19367
Size 30 kB (29752 bytes)
MD5 ab1fc8621287e4ea9319a3136812cf80
SHA1 fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3
SHA256 7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 14 Oct 2023 07:57:46 GMT
expires: Sun, 13 Oct 2024 07:57:46 GMT
cache-control: public, max-age=31536000
age: 261161
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/notosans/v32/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
200 OK 14 kB URL
fonts.gstatic.com/s/notosans/v32/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 14100, version 1.0\012- data
First Seen 2023-04-30
Last Seen 2025-07-11
Times Seen 1362
Size 14 kB (14100 bytes)
MD5 c7a65b5f9af2c8afbceed5fd6dacb46c
SHA1 54f3895b08438523a402ad5cf3c0be2168f99d30
SHA256 8c2a54278c4cb87438f4a1c73242d727fc3eea82dc59abb393dd3937b17ce1d7
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/notosans/v32/o-0NIpQlx3QUlC5A4PNjXhFVZNyB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Oct 2023 21:08:36 GMT
expires: Fri, 11 Oct 2024 21:08:36 GMT
cache-control: public, max-age=31536000
age: 386511
last-modified: Thu, 05 Oct 2023 20:55:26 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.esky.com/_fe/img/inspo-family_344x463.jpg
200 OK 35 kB URL
www.esky.com/_fe/img/inspo-family_344x463.jpg
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 344x463, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 35 kB (35032 bytes)
MD5 1f30cd05eb0e44efcbaed14e53174ee0
SHA1 f7f1eb68de27151863f4393dc07aa2be359b2c5c
SHA256 c0839ea8ac692913560c3b4dd07380871b822447f18ac50aae6dc43fe251162d
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /_fe/img/inspo-family_344x463.jpg HTTP/1.1
Host: www.esky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 35032
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 04:39:35 GMT
etag: W/"88d8-9/HraN4nFRhj9Dk9wHqivjWbLFw"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=448
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.esky.com/_fe/img/inspo-foodies_344x463.jpg
200 OK 27 kB URL
www.esky.com/_fe/img/inspo-foodies_344x463.jpg
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 344x463, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 27 kB (26700 bytes)
MD5 5072cb8bff48b19157a567e6d0d85520
SHA1 a3024893d6a46d8df7c1f45eb3c7e747e3a30681
SHA256 344bc5fb5d539252accf5d15b89207066ef7d117739c07db6682f654f9fb76cc
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /_fe/img/inspo-foodies_344x463.jpg HTTP/1.1
Host: www.esky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 26700
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 04:39:35 GMT
etag: W/"684c-owJIk9akbY33wfRes8fnR+OjBoE"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=554
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.esky.com/_fe/img/inspo-couple_344x463.jpg
200 OK 29 kB URL
www.esky.com/_fe/img/inspo-couple_344x463.jpg
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 344x463, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 29 kB (28598 bytes)
MD5 5ee4298c165bb17b97fca8e7981e77c3
SHA1 fc8382237378f9e2d1d39a63c4e4a82c4afdf62b
SHA256 288607ae8abcdaad682bf7a31878bf272e06b8b09a869506097a741b28f1f1c2
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /_fe/img/inspo-couple_344x463.jpg HTTP/1.1
Host: www.esky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 28598
x-generated-by: pms-b40
last-modified: Tue, 17 Oct 2023 04:39:35 GMT
etag: W/"6fb6-/IOCI3N4+eLR05pjxOSoLEr99is"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=437
date: Tue, 17 Oct 2023 08:30:27 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-MP8S4BW
200 OK 92 kB URL
www.googletagmanager.com/gtm.js?id=GTM-MP8S4BW
IP / ASN
142.250.74.72
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (57800)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 92 kB (91551 bytes)
MD5 d284bf4deeba119c0396d1b05db421a6
SHA1 c7d2489992ba52f731b95aa5062e5c19906161d7
SHA256 135ed27ab19448fee3fddf4b13cdd1d5d11510979b8c6edce87c70b612134575
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
GET /gtm.js?id=GTM-MP8S4BW HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Oct 2023 08:30:28 GMT
expires: Tue, 17 Oct 2023 08:30:28 GMT
cache-control: private, max-age=900
last-modified: Tue, 17 Oct 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91551
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/BOX_FLIGHTS_IT.jpg
200 OK 37 kB URL
www.eskytravel.it/_fe/img/BOX_FLIGHTS_IT.jpg
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 37 kB (37406 bytes)
MD5 299f8528bf9c3e14c2f1b89aafb507b3
SHA1 54dae06a884b7374dce26276321be5acd6f3ca35
SHA256 bfee5bab60b785ca9427783c4af6b135144fb3c6452b548ad4d0dd371f6351a3
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/BOX_FLIGHTS_IT.jpg HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaIzcBzmLAQAATfnBPBXejyf1pQirhw6Ko++lRqRMWYb9XeL1ippkdcz1CkjWFPURuzDpiv3MGXECJZxtNgL8rScDmodTOPLabW5qwnRYFmzVo7jwolkOU/jxIhc6kO3nzSZNce7O6vcWpcAAjDhs8tJhpwwcCR6LOWKlYlkt7FZkBxowWK8gFWsDQRlmzSzJnS15D3owdnfoyaT5ESFlZyB68eF3KYdTZJdx/xEB6AIZCViZp7PUsEl/PytXTuzlEQPZrt+hrrHcovx9yzf73f4OOSdaY/FZLlVUD96VXxUevaVxbhwnGoP9FuZjDYRao08mTnyA0gQlIpHdvYgkuu6pLwKLIzgM5Uj1CMpyJAJNrY0sa+4zZ0AwomXrpIzkU0lO4k/TATffI3SbDc9aCc/IUwfDcG8RM6p1Ni6Z0/ND3mknRHHXq2WOPcVi41XcdfZjcSp0846gUEggzHqZgOk5aiPIrQ==; firstTimeVisit=202310170830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 37406
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 12:17:20 GMT
etag: W/"921e-VNrgaohLc3Tc4mJ2MhvlrNbzyjU"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=734
date: Tue, 17 Oct 2023 08:30:28 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7198; HttpOnly
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2
200 OK 39 kB URL
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 38752, version 1.0\012- data
First Seen 2023-04-08
Last Seen 2025-08-01
Times Seen 1895
Size 39 kB (38752 bytes)
MD5 d451decbad0d0d2feba27610481a34d8
SHA1 1479b2ad870d5e2bb04d206f33460089394f6eb5
SHA256 a5515c53111bb4a4f45aff63d06df893ae9033dc85e82cc2ef27fc099a4d7609
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 38752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Oct 2023 05:12:11 GMT
expires: Fri, 11 Oct 2024 05:12:11 GMT
cache-control: public, max-age=31536000
age: 443897
last-modified: Wed, 27 Apr 2022 17:04:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.esky.com/_fe/img/inspo-ITlondyn_344x463.jpg
200 OK 29 kB URL
www.esky.com/_fe/img/inspo-ITlondyn_344x463.jpg
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 344x463, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 29 kB (29376 bytes)
MD5 ed1ff7b6410e212ab65f5b63f368d23f
SHA1 204ca254a0fc98a786ddedfd98a2f5549c6ee4ab
SHA256 33270def18e610fdd5f9175c68630b57ecddb621c64acb634ec704077a8711f0
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /_fe/img/inspo-ITlondyn_344x463.jpg HTTP/1.1
Host: www.esky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 29376
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 12:17:19 GMT
etag: W/"72c0-IEyiVKD8mKeG3e39mKL1VJxu5Ks"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=2082
date: Tue, 17 Oct 2023 08:30:28 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.esky.com/_fe/img/inspo-Atlanta_344x463.jpg
200 OK 39 kB URL
www.esky.com/_fe/img/inspo-Atlanta_344x463.jpg
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 344x463, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 39 kB (38660 bytes)
MD5 962d5d8e216cb9391d85fb638819bca3
SHA1 e0e0058bd1efe2f89de52edbce5cd0535ddb0977
SHA256 02267594ba6b2d971d13828b23e7d7d4ad4867e2240268639465c31acb4cb14d
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /_fe/img/inspo-Atlanta_344x463.jpg HTTP/1.1
Host: www.esky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 38660
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 18:08:16 GMT
etag: W/"9704-4OAFi9Hv4vid5S7bzlzQU13bCXc"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=1895
date: Tue, 17 Oct 2023 08:30:28 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET progress.esky.pl/www/delivery/spcjs.php?id=229&page=main_page_carousel&from=&to=&fromcountry=&tocountry=
200 OK 722 B URL
progress.esky.pl/www/delivery/spcjs.php?id=229&page=main_page_carousel&from=&to=&fromcountry=&tocountry=
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 722 B (722 bytes)
MD5 33d3c2ee35f94829affdbbfd67ca742b
SHA1 802fc3d4ab143a38d6b0c149fff4294018d01ff0
SHA256 f8d3eeebacd3078d2509d14ea5cb6485a3f53f74e8b010ad00711eb2107c0b7d
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /www/delivery/spcjs.php?id=229&page=main_page_carousel&from=&to=&fromcountry=&tocountry= HTTP/1.1
Host: progress.esky.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 722
p3p: CP="CUR ADM OUR NOR STA NID"
vary: Accept-Encoding
content-encoding: gzip
server: esky-edge
expires: Wed, 18 Oct 2023 06:18:47 GMT
date: Tue, 17 Oct 2023 08:30:28 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: _abck=EA96E981E2962D7E2DDA738D6372533D~-1~YAAQLZhUaGJx2hSLAQAAm/3BPArlGN+6heZv8jTvH21r0aG4YGzK+sFiyEYStpvM15Cv36PFKvWNVuLYn8h3TRAo/NWxouOh3kyUkpcBVCJxRX5rjYe+k8uC5CSnB3sFgRZCr6HU7DeEcgGGRZHD4zW8KxVHHBq1iAyjywPxq0MKToajlBi0IrsmE8ZflQm+1/+Z7Ty2VoNpcz4xtfB5BP45/Yy+R5EvNyTnEhn24YfgrgZxPZjVlQ9qfE93TYAzE0G/QRqqQXGdjmYhiMlG2BhB/HTwBhcjUumyWKYkEkZJuV5LRC5rH1n1t1esC8ASOzaj7NMk7XGL9XgAj9ZGVF+IjoXSk4rVEeGjCtZ+7UH4yQV8KmW/dWw=~-1~-1~-1; Domain=.esky.pl; Path=/; Expires=Wed, 16 Oct 2024 08:30:28 GMT; Max-Age=31536000; Secure
bm_sz=94241BE2252647F27EB600AD7886B361~YAAQLZhUaGNx2hSLAQAAm/3BPBWfQd2mcYywRj2cLb2aD4K+dnnGJsYT7MngBM4UMeoIaWuMY1w1xkhULq2WjHOiyLWnel1HyKSOFNoY1Op1jul2QLWLbHmtCNiVRMfxpYFtm9hqlceSAkCHWwnzYNfvCcnTx/pQTzgpgcrzi39PfP7+OpQLRWoU0cMDPl1ujNvyaq2SEVAutC9aeaWzfP2UAn7y0sxi5nFTI+cRmsKsXKx2zxeYJEGNIT2TlUZ/GLEFLWKywzQ2jEwuhWcv+4nTIl1B5G0bjyQwogNA57Y=~3355203~3682873; Domain=.esky.pl; Path=/; Expires=Tue, 17 Oct 2023 12:30:27 GMT; Max-Age=14399
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 2430
Size 471 B (471 bytes)
MD5 4e3d632834f367982e02547ed01f3c2e
SHA1 e6de16d3f26695de5e45b6aed6bce1f0c8504fef
SHA256 5af172e50ca188e53368a2b368ef9b1c69fe0ca984d46d0993ec663ae1251d83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.esky.com/_fe/img/inspo-ITparyz_344x463.jpg
200 OK 13 kB URL
www.esky.com/_fe/img/inspo-ITparyz_344x463.jpg
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 344x463, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 13 kB (13432 bytes)
MD5 4c4e5bdf9383d261004add64e5127fe7
SHA1 846ec81581115ecffc503d29a94ef49c454fea7b
SHA256 d803f7c1a0f3a863103987f09a915f37751fbbc23afe0d75e48412ce56856221
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /_fe/img/inspo-ITparyz_344x463.jpg HTTP/1.1
Host: www.esky.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 13432
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 12:17:19 GMT
etag: W/"3478-hG7IFYERXs/8UD0pqU70nEVP6ns"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=1879
date: Tue, 17 Oct 2023 08:30:28 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 1508
Size 471 B (471 bytes)
MD5 779882817f8804aebd79fcce0967e23b
SHA1 436652deaf877d1391da5cd61e53d1966ef9e2b0
SHA256 236468f865699350e2f2ab76b1a226c1b24b8099527dcf661eccbdca3375ef82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.eskytravel.it/res/b1713/common/js-routing/prod_it_it.js
200 OK 992 B URL
www.eskytravel.it/res/b1713/common/js-routing/prod_it_it.js
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (6042), with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 4
Size 992 B (992 bytes)
MD5 23a3e225f6e53e0494a8ff113312e6a7
SHA1 e2a227c75d1af264726ccb9dbf31c29f204234a6
SHA256 e3149e478567b2a7664afb2f026bfc429e50307433b80ec673d858c610be8285
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /res/b1713/common/js-routing/prod_it_it.js HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 992
last-modified: Thu, 12 Oct 2023 10:17:19 GMT
x-generated-by: dbr30-b1713
esky-resource-type: static
content-encoding: gzip
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
cache-control: max-age=871844
expires: Fri, 27 Oct 2023 10:41:12 GMT
date: Tue, 17 Oct 2023 08:30:28 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/xstorage.html
200 OK 1.2 kB URL
www.eskytravel.it/xstorage.html
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 1.2 kB (1248 bytes)
MD5 e6f8b1a895e920c691dc5a44e4ce1c06
SHA1 df27c59f63beba34640445f5b4802b6cb86d93b9
SHA256 f0445cddf2608155e4475e2e758692ddba5d8063654039bb0c4315fc8081d164
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /xstorage.html HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
last-modified: Thu, 12 Oct 2023 07:51:07 GMT
x-generated-by: dbr30-b1713
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
x-akamai-transformed: 9 1033 0 pmb=mTOE,2
content-encoding: gzip
expires: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:29 GMT
content-length: 1248
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:27 GMT; Max-Age=7198; Secure
bm_sv=E2C278982D4537539250BFBA09E33E3E~YAAQnphUaE/dBzmLAQAAtgDCPBUEuQULBQd2knO6pLo3gdwvdnOY25f/7ChYJGyX3r8VZWxUB78v0Wra8wOibpIRJQZ2lgGCs0h/z44fnEv6lewYrGLvHjHp4rJriv1lupw1LpRXddwwDcvPgpFdNLBHwq4dtsS04nXeHtJn+kJym746vGzFRZDcGl8d3v0Vg2ZfmVIRK1PZ+6AhJBsOX9CcQ1Dl7kiuEVv0TfCF4HAWP/ZYmW0Jj1zr6erphIsFaP49~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:29 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
GET progress.esky.pl/www/delivery/spc.php?zones=EskyBillboardDouble%3D0%7CEskyBillboard%3D0%7CEskyMainCarousel%3D443%7CEskyMainCarouselPartners%3D0%7CEskyFlightsCarousel%3D0%7CEskyAirlinesWideTop%3D0%7CEskyAirlinesWideBottom%3D0%7CEskyAirportsWideTop%3D0%7CEskyAirportsWideBottom%3D0%7CEskyFlightsWideTop%3D0%7CEskyCheapFlightsWideTop%3D0%7CEskyTravelGuideWideTop%3D0%7CEskyTravelGuideWideBottom%3D0%7CEskyTravelGuideSkyscraper%3D0%7CEskyDirectionalsWideTop%3D0%7CEskyFlightsSearchTop%3D454%7C&nz=1&source=&r=5498362&page=main_page_carousel&from=&to=&fromcountry=&tocountry=&charset=UTF-8&loc=https%3A//www.eskytravel.it/
200 OK 460 B URL
progress.esky.pl/www/delivery/spc.php?zones=EskyBillboardDouble%3D0%7CEskyBillboard%3D0%7CEskyMainCarousel%3D443%7CEskyMainCarouselPartners%3D0%7CEskyFlightsCarousel%3D0%7CEskyAirlinesWideTop%3D0%7CEskyAirlinesWideBottom%3D0%7CEskyAirportsWideTop%3D0%7CEskyAirportsWideBottom%3D0%7CEskyFlightsWideTop%3D0%7CEskyCheapFlightsWideTop%3D0%7CEskyTravelGuideWideTop%3D0%7CEskyTravelGuideWideBottom%3D0%7CEskyTravelGuideSkyscraper%3D0%7CEskyDirectionalsWideTop%3D0%7CEskyFlightsSearchTop%3D454%7C&nz=1&source=&r=5498362&page=main_page_carousel&from=&to=&fromcountry=&tocountry=&charset=UTF-8&loc=https%3A//www.eskytravel.it/
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (391)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 460 B (460 bytes)
MD5 6f9dc0ac1f52b70fa570fe6a07a20476
SHA1 73d23e6799b90d3256a2f35b3131a60caf3af95f
SHA256 e583c6997df91bf2bddfedc5746f26e5c86099d1b368902409a983b9e82dfa0b
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /www/delivery/spc.php?zones=EskyBillboardDouble%3D0%7CEskyBillboard%3D0%7CEskyMainCarousel%3D443%7CEskyMainCarouselPartners%3D0%7CEskyFlightsCarousel%3D0%7CEskyAirlinesWideTop%3D0%7CEskyAirlinesWideBottom%3D0%7CEskyAirportsWideTop%3D0%7CEskyAirportsWideBottom%3D0%7CEskyFlightsWideTop%3D0%7CEskyCheapFlightsWideTop%3D0%7CEskyTravelGuideWideTop%3D0%7CEskyTravelGuideWideBottom%3D0%7CEskyTravelGuideSkyscraper%3D0%7CEskyDirectionalsWideTop%3D0%7CEskyFlightsSearchTop%3D454%7C&nz=1&source=&r=5498362&page=main_page_carousel&from=&to=&fromcountry=&tocountry=&charset=UTF-8&loc=https%3A//www.eskytravel.it/ HTTP/1.1
Host: progress.esky.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript; charset=UTF-8
content-length: 460
access-control-allow-origin: *
p3p: CP="CUR ADM OUR NOR STA NID"
vary: Accept-Encoding
content-encoding: gzip
server: esky-edge
expires: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: OAID=a2465f241405d3924debee8f610802d6; expires=Wed, 16-Oct-2024 08:30:29 GMT; Max-Age=31536000; path=/; secure; SameSite=none
_abck=9014492390D184B68F4ADD2D14210C70~-1~YAAQLZhUaHlx2hSLAQAA0ADCPAqIKL5Ue9YsOeV5oAk52Ly9YzMo+48dUhiNaOikTUvbq77faw3nba9gpweRbMa/qwvgz/RRBGs7B+LOikv7nKfmsLlZ/7IOih4b7SSl1xbrdx/st8OgD98wtzYanaBJDhy2ulFYM9Ngv42FSDJWAMiSuhnMg5GSj28/K9Qz0gwKy+pNthblPyuRKQyyloXfvupWFH7aVNCgLzShtVu5SdPH+pC004WS88aCvgbZngU8Xa6AlHnTgHgcrPAgWX02bCRtF/g6A+knBM8n1wZS2uxzNd5+tMUA5akLUe3em4E4Rz710CBkB9MsCnlnw7goLXlqkK9CV0j2SpVX+wrw5gTbb8kBtk4=~-1~-1~-1; Domain=.esky.pl; Path=/; Expires=Wed, 16 Oct 2024 08:30:29 GMT; Max-Age=31536000; Secure
bm_sz=F895163EE1DD7FA7CC7099C6A693C8BF~YAAQLZhUaHpx2hSLAQAA0QDCPBW8luoxrlyQMwHwqJXZfuBAGY/FjlOvaVWIqGnCdMEwglc295pFJKnkkKnCT7RjyIBAoxLdMHgkhYV+vt3yYbUZq49T+eJ2XJzUNFDarK3dtkfj7bIjMcEwT9WD2itA98NUg5YqF53brA9cKIOqafbVD0iwOJqDoXEnUnO4cH/PQe839NGoPJPuzrLauByHiPdi8auvUc/tyxra5JLmHnhs1FwgJEufl9H4JAjm1rKY0f+nEWA55lJ+4oEUzjR4Hav8DhShZEZnEt8Tjik=~4277555~4339256; Domain=.esky.pl; Path=/; Expires=Tue, 17 Oct 2023 12:30:28 GMT; Max-Age=14399
X-Firefox-Spdy: h2
GET progress.esky.pl/www/delivery/fl.js
200 OK 1.9 kB URL
progress.esky.pl/www/delivery/fl.js
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (5590), with no line terminators
First Seen 2023-03-07
Last Seen 2025-07-17
Times Seen 77
Size 1.9 kB (1858 bytes)
MD5 97f5314e58ecd41f147bc1b72529a9b4
SHA1 80b7aa33ca9704bf6182208d1a3f17cec6e8be25
SHA256 223b20f1ef4b5c4975608d2e2e462f15f7fa39f0c40c52ff1765b95e780ee72b
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /www/delivery/fl.js HTTP/1.1
Host: progress.esky.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-length: 1858
last-modified: Wed, 11 Mar 2020 08:25:54 GMT
etag: "15d6-5a08ffc1bc880-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
server: esky-edge
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
POST secure.eskytravel.it/pass/cookies?partner_id=ESKYTRAVELIT
204 No Content 0 B URL
secure.eskytravel.it/pass/cookies?partner_id=ESKYTRAVELIT
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
POST /pass/cookies?partner_id=ESKYTRAVELIT HTTP/1.1
Host: secure.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 131
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; esky_TCSI=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0, must-revalidate, private
content-security-policy: default-src 'nonce-764f6aaee226b19fb4d1f17bd70f1901' 'self' www.eskytravel.it secure.eskytravel.it api.esky.com bookings.eskypartners.com secure.eskypartners.com https: *.edestinos.com uk.cdn-net.com creativecdn.com *.creativecdn.com *.doubleclick.net *.facebook.com *.google.al *.google.am *.google.at *.google.ba *.google.be *.google.bg *.google.bs *.google.by *.google.ca *.google.cat *.google.ch *.google.cl *.google.cn *.google.co *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.uk *.google.co.ve *.google.co.za *.google.com *.google.com.ar *.google.com.au *.google.com.bo *.google.com.br *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.ni *.google.com.pa *.google.com.pe *.google.com.ph *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sv *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vn *.google.cz *.google.de *.google.dk *.google.dm *.google.ee *.google.es *.google.eu *.google.fi *.google.fr *.google.ge *.google.gr *.google.hn *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.je *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.mn *.google.mv *.google.nl *.google.no *.google.pl *.google.ro *.google.rs *.google.ru *.google.sc *.google.se *.google.si *.google.sk *.google.sm *.google.tn *.google.us *.googleadservices.com *.google-analytics.com *.gstatic.com *.hotelbeds.com *.ipresso.pl *.riskified.com *.bstatic.com asa-isa.com bat.bing.com bat.r.msn.com do1ztk2swfi8z.cloudfront.net images.gta-travel.com media.expedia.com mpsnare.iesnare.com secure.rentalcars.com *.esky.pl *.eskypartners.com www.tripadvisor.com *.esky.com *.msecnd.net ads.avocet.io i.travelapi.com *.adara.com criteo-partners.tremorhub.com sync-criteo.ads.yieldmo.com criteo-sync.teads.tv exchange.mediavine.com ib.adnxs.com matching.ivitrack.com r.casalemedia.com simage2.pubmatic.com sync-t1.taboola.com ups.analytics.yahoo.com visitor.omnitagjs.com *.bidswitch.net *.criteo.com *.googlesyndication.com www.googletagmanager.com cm.adform.net e1.emxdgt.com ad.yieldlab.net id5-sync.com ad.360yield.com contextual.media.net *.3lift.com sync.outbrain.com match.sharethrough.com pixel.rubiconproject.com dpm.demdex.net s.thebrighttag.com tags.bluekai.com idsync.rlcdn.com static.sojern.com clickmeter.com *.smartadserver.com beacon.krxd.net *.clickmeter.com c.bing.com x.dlx.addthis.com i.liadm.com ade.clmbtech.com s.ad.smaato.net trends.revcontent.com *.socdm.com ads.travelaudience.com www.mczbf.com mczbf.com *.usercentrics.eu data: *.hotjar.com:* *.hotjar.io ws://*.hotjar.com wss://*.hotjar.com stags.bluekai.com; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; frame-ancestors https://skybox.eskypartners.com; report-uri /csp-report;
x-frame-options: ALLOW-FROM https://skybox.eskypartners.com
esky-correlation-id: AB1FA3C0-8082-7EEA-C425-EA84D6D10DD7
x-generated-by: dbr-transaction-process-b1900
pragma: no-cache
expires: Tue, 17 Oct 2023 08:30:29 GMT
access-control-allow-origin: https://www.eskytravel.it
access-control-allow-credentials: true
x-request-id: 064b43d5623b36fb129013b66a62f2953ed9d34f
server: esky-edge
date: Tue, 17 Oct 2023 08:30:29 GMT
set-cookie: esky_TCSIS=ZIZOZ1697531428843; path=/; samesite=lax
esky_TCSI=WZSQ1697531428840; expires=Mon, 17-Oct-2033 08:30:29 GMT; Max-Age=315619200; path=/; samesite=lax
MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; expires=Mon, 17-Oct-2033 08:30:29 GMT; Max-Age=315619200; path=/; samesite=lax
firstTimeVisit=202310170830; expires=Thu, 17-Oct-2024 08:30:29 GMT; Max-Age=31622400; path=/; samesite=lax
partner_id=ESKYTRAVELIT; expires=Tue, 17-Oct-2023 09:05:29 GMT; Max-Age=2100; path=/; samesite=lax
uguid=6361b2beda92b179c2e8be7d56bc53fe9847b2cf; expires=Mon, 17-Oct-2033 08:30:29 GMT; Max-Age=315619200; path=/; secure; httponly; samesite=lax
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/_fe/img/UGC_HERO_008.jpg
200 OK 148 kB URL
www.eskytravel.it/_fe/img/UGC_HERO_008.jpg
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 148 kB (148106 bytes)
MD5 3e1e879e42e26e806fff97f459e574ba
SHA1 60fd7b0a8a7b17cb2dad6c80f3c4f1390d01053a
SHA256 6755b10e7f156a550123b5c1e59cc0b108ed4957542354f23fdd051442177f17
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /_fe/img/UGC_HERO_008.jpg HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 148106
x-generated-by: pms-b40
last-modified: Mon, 16 Oct 2023 23:29:00 GMT
etag: W/"2428a-YP17Cop7F8strWyA88TxOQ0BBTo"
accept-ranges: bytes
server: esky-edge
cache-control: private, max-age=1564
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET www.eskytravel.it/akam/13/3d0324de
200 OK 8.8 kB URL
www.eskytravel.it/akam/13/3d0324de
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/xstorage.html
Resource Info
File type ASCII text, with very long lines (14360)
First Seen 2023-03-08
Last Seen 2023-10-17
Times Seen 6
Size 8.8 kB (8755 bytes)
MD5 e1647fea5ef495c0d76a00c1abe1752e
SHA1 758ace17776c485aae3662366baf9d55c31a40d8
SHA256 af58756f6b684ed00fbb2bb8da71d582f5e23b66a36a1e7467526086e0874cbe
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /akam/13/3d0324de HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/xstorage.html
DNT: 1
Connection: keep-alive
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=E2C278982D4537539250BFBA09E33E3E~YAAQnphUaE/dBzmLAQAAtgDCPBUEuQULBQd2knO6pLo3gdwvdnOY25f/7ChYJGyX3r8VZWxUB78v0Wra8wOibpIRJQZ2lgGCs0h/z44fnEv6lewYrGLvHjHp4rJriv1lupw1LpRXddwwDcvPgpFdNLBHwq4dtsS04nXeHtJn+kJym746vGzFRZDcGl8d3v0Vg2ZfmVIRK1PZ+6AhJBsOX9CcQ1Dl7kiuEVv0TfCF4HAWP/ZYmW0Jj1zr6erphIsFaP49~1; mes_referrer=; lux_uid=169753142977580886
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Feb 2022 15:12:48 GMT
etag: "96c41dab296eb86db791650f725d2f9bf792c7ca3b20be09b97e4a1c356226a3"
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 8755
expires: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7197; HttpOnly
X-Firefox-Spdy: h2
GET static1.eskypartners.com/deals/NAP_0_SquareSmall_290_290.jpg
148 kB URL
static1.eskypartners.com/deals/NAP_0_SquareSmall_290_290.jpg
IP / ASN
54.230.111.63
#16509 AMAZON-02
Requested by https://www.eskytravel.it/
Resource Info
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 290x290, components 3\012- data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 148 kB (147733 bytes)
MD5 96a88b1b874439afedec20b13bec6587
SHA1 a8fdda334b7ea607b788a3dca2c37bfbeaf5d619
SHA256 16b8b0d9071dc20260f53080f0b0acb56a5248eb5ec3b3813cf992cd6c02f7af
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
Analyzer Verdict Alert Public InfoSec YARA rules malware Identifies a webshell or backdoor in image files.
GET /deals/NAP_0_SquareSmall_290_290.jpg HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
date: Tue, 19 Sep 2023 18:43:16 GMT
last-modified: Mon, 01 Feb 2016 08:05:28 GMT
etag: W/"56af11c8-5b48"
expires: Thu, 19 Oct 2023 18:43:16 GMT
cache-control: max-age=2592000
content-encoding: gzip
server: esky-edge
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QABHLD43eqnhyb0hvYDL5LlWx15Sk0QoP9uK8O6RrPmV2iW_Gj29jw==
age: 2382432
X-Firefox-Spdy: h2
POST www.eskytravel.it/eapi
200 OK 198 B URL
www.eskytravel.it/eapi
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 198 B (198 bytes)
MD5 a881310f0d3e4b692b33fb0610946d67
SHA1 e0d79f8b960bd5fa2805f52d1e0e2978eec351af
SHA256 6f7bb03b0520a42c2e565fac441721d8c26d8be6987777b3eb2e17f4607e3dc9
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
POST /eapi HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
partner: ESKYTRAVELIT
X-Requested-With: XMLHttpRequest
Content-Length: 139
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaOvcBzmLAQAA0vzBPBUZ7PcB4JCSPJ9ELk0QyvwWxTjGdYR6N5MD3yaS0dT4yTT7dmMWD/wMKzVoclsYFZQrJ8Ti8yTQcpEgLNtTG5x9FuzlJkbg9Hxy38qBHJgYP2jhU9jwtnbZ8JwovlTKXIXSkUi00CzyWAwyvXVqcNOrinYFF5EOR/gJCWg3ASWAmYXHW6lNap0BzuWHlyupfhXVV/5jGhV6wRu/vsTkrbrxwbi0hE9didI45nNVHjTLDF6I80hF+o1/YsV0qHCFn35XrkswcJK4RXLCFWYlya+YZk8mmTycxmb8x3VQ1T+TS+P+swNLVFPbZhX31dYWDWIZvC4g+OYcIr1UnPWMcvCZzI7fNY9DllsBsooj3bQV2OuPcU+J9G3J0gDv7FqRZ9FsGt3OF6VC+uwvAw6F8W486cacnBADXhDtbwnlPIyaY1TWziusit7K7lEqvj9AKQOHwjxHz1xb8hyXjZ3LKBc/; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
access-control-allow-origin: https://www.eskytravel.it
vary: Accept-Encoding, Origin
access-control-allow-credentials: true
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
x-download-options: noopen
x-powered-by:
x-generated-by: esky_api-b40-spin-spin
esky-correlation-id: BBCCCB3F-2AE6-3E52-B000-64948FC00210
esky-eapi-status: missing-token
etag: W/"ee-4Nefi5YL1fooBfUtHg4peO7DUa8"
x-envoy-upstream-service-time: 6
server: esky-edge
content-encoding: gzip
content-length: 198
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: esky_uz_uuid=; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 08:30:29 GMT
bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:29 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
GET static1.eskypartners.com/favicons/esky.ico
200 OK 15 kB URL
static1.eskypartners.com/favicons/esky.ico
IP / ASN
54.230.111.63
#16509 AMAZON-02
Requested by https://www.eskytravel.it/
Resource Info
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
First Seen 2023-05-09
Last Seen 2024-08-21
Times Seen 4
Size 15 kB (15406 bytes)
MD5 371735b689b041d4b363a46eeb215f35
SHA1 0fcc0dadda98f2442a1456de2bbc54f87046fcfa
SHA256 8e178deff87a66c4e9c8c013f9c9cfb5c20abca2d373f8ba3faf3e049e20b81e
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
GET /favicons/esky.ico HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 15406
date: Tue, 17 Oct 2023 05:56:25 GMT
last-modified: Tue, 06 Dec 2022 09:12:29 GMT
etag: "638f077d-3c2e"
accept-ranges: bytes
server: esky-edge
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 143gZOqBGwVVx3Wdr9fEB8n-CQZT6-_MI8R8FZi-Ehca6XXs4mqYsA==
age: 9244
X-Firefox-Spdy: h2
471 B URL
ocsp.pki.goog/s/gts1d4/fUDbRzgnsOo
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 10
Size 471 B (471 bytes)
MD5 fc6ae152fe705291758f6ae204ebe165
SHA1 845c68c6fbb5cfd328961bc163feb6d9a134b7bd
SHA256 8e9c66e6a1995f0ce86878d6dad9aa31404bdb483e48856f155fad793287f3c9
POST /s/gts1d4/fUDbRzgnsOo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:29 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET app.usercentrics.eu/browser-ui/latest/loader.js
200 OK 8.1 kB URL
app.usercentrics.eu/browser-ui/latest/loader.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (31438)
First Seen 2023-10-13
Last Seen 2025-06-24
Times Seen 299
Size 8.1 kB (8093 bytes)
MD5 8fcde824d432757e171b332ba6ad2682
SHA1 af5440019927ff7bc5d688f72e1a10da15a7c349
SHA256 09062e1c596b84b6a9e065e1de82571e253e071c327ec31466ec96a597b8b37a
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/latest/loader.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPonUP_7o0rRz8Bp3krJMlrmSCKS9zu0fQfurEgcM1rvTZHp9HdaYzAwVRRIi4FWoVM5etj3EFnGOsjozKNEZA_-HFHt6gKA
x-goog-generation: 1697121676166506
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8093
content-encoding: gzip
x-goog-hash: crc32c=rWdLbw==, md5=AtXf2GY7wmCHzmo0GhAuZw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 8093
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Transfer-Encoding
server: UploadServer
date: Tue, 17 Oct 2023 08:30:12 GMT
expires: Tue, 17 Oct 2023 09:30:12 GMT
cache-control: public, max-age=3600, no-transform
age: 17
last-modified: Thu, 12 Oct 2023 14:41:16 GMT
etag: "02d5dfd8663bc26087ce6a341a102e67"
content-type: text/javascript
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B URL
ocsp.pki.goog/s/gts1d4/fUDbRzgnsOo
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 10
Size 471 B (471 bytes)
MD5 fc6ae152fe705291758f6ae204ebe165
SHA1 845c68c6fbb5cfd328961bc163feb6d9a134b7bd
SHA256 8e9c66e6a1995f0ce86878d6dad9aa31404bdb483e48856f155fad793287f3c9
POST /s/gts1d4/fUDbRzgnsOo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:29 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET progress.esky.pl/www/delivery/lg.php?bannerid=0&campaignid=0&zoneid=443&loc=https%3A%2F%2Fwww.eskytravel.it%2F&cb=9c46dda9c5
200 OK 43 B URL
progress.esky.pl/www/delivery/lg.php?bannerid=0&campaignid=0&zoneid=443&loc=https%3A%2F%2Fwww.eskytravel.it%2F&cb=9c46dda9c5
IP / ASN
104.84.152.49
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type GIF image data, version 89a, 1 x 1\012- data
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 80211
Size 43 B (43 bytes)
MD5 b4491705564909da7f9eaf749dbbfbb1
SHA1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8
SHA256 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Certificate Info
Issuer Let's Encrypt
Subject esky.com
Fingerprint F8:4B:77:01:55:51:E1:50:D1:B5:F1:1C:5E:22:15:70:B3:D0:AB:B6
Validity Tue, 19 Sep 2023 04:00:19 GMT - Mon, 18 Dec 2023 04:00:18 GMT
GET /www/delivery/lg.php?bannerid=0&campaignid=0&zoneid=443&loc=https%3A%2F%2Fwww.eskytravel.it%2F&cb=9c46dda9c5 HTTP/1.1
Host: progress.esky.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: OAID=a2465f241405d3924debee8f610802d6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="CUR ADM OUR NOR STA NID"
server: esky-edge
expires: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: OAID=a2465f241405d3924debee8f610802d6; expires=Wed, 16-Oct-2024 08:30:29 GMT; Max-Age=31536000; path=/; secure; SameSite=none
_abck=16295DE154EA98BE592DEF0FEC811133~-1~YAAQLZhUaJtx2hSLAQAABAPCPAraPki1vm7zKdfXHmBKvKrS8aNBjus2JCbCIOojtaLspvEUEdj5rMktjEoM4A9GYsD8fdMbvvyfQw1xDclu2XE216dWNoG6DtBthN7tj3NsNJ8vWsG24z7gH0tVGzoYmaGplYCc06FaUthV/SP7kdxDNuIhzZyFtgtZ20WRsEm6EYCBOfmpWqZQDQOMYhrauW+pH7IvlKC67S/5p6ZFryq27hkf+8LflqEv2WnkGfPF0n+SR8XAnqSFLGxmnJjo25CZoR7J0hRcS7nDabnFNErY60y5sBx/ChEk3qVtXlzux3Sue1t4c1Zf3MoIMhI/stcR5BeUaV6RUImu8zSpBQlqRXvXKtk=~-1~-1~-1; Domain=.esky.pl; Path=/; Expires=Wed, 16 Oct 2024 08:30:29 GMT; Max-Age=31536000; Secure
bm_sz=304108458E1A0AE9D3DE5BCEFA28D8F8~YAAQLZhUaJxx2hSLAQAABAPCPBXLBPtCxNWPZ7NHPVjwXsshaBEH+gSR4L3BVM9DYYvbd79muAw0hVS4zAGiW+poG/9xEhWrUN3iSOJQ2Pfrl87DHyccMyn4h6Sjyih0wOjFmy4NjRoNJifEPZ2NsigVOLOf9jUES/RjyNo7NUlpTP2dGPNmCco5lqxEuKWKkL7KE7yd1CM3tHxKAcsOC/QxvN3fLqj/l5zVf2g8fhJJ99d+EHWLswATpyxBuGYahBYEgd+CpA5oBuYbCRQ+YSnrqseyrJSI05S6EVSy5Us=~3422022~4404289; Domain=.esky.pl; Path=/; Expires=Tue, 17 Oct 2023 12:30:29 GMT; Max-Age=14400
X-Firefox-Spdy: h2
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 192
Size 472 B (472 bytes)
MD5 d6bcc00e463407e3860eb64c72538ebd
SHA1 27287c7e98927e2804e0b130353e03d4e70ad157
SHA256 8f697ef05a1f9ca4b7cdf383127e4be7a3e6ce8baaf83c902273e9819e0ddf12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST www.eskytravel.it/patalyst/v1.1
200 OK 0 B URL
www.eskytravel.it/patalyst/v1.1
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
POST /patalyst/v1.1 HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 1261
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; lux_uid=169753142977580886
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 0
access-control-allow-origin: *
api-supported-versions: 1.0, 1.1, 1.2
x-envoy-upstream-service-time: 1
date: Tue, 17 Oct 2023 08:30:29 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHndBzmLAQAAawPCPBVA7WsuE2AWTP6Yezg0JysYVjBWwJ/iiBC/2JGwjrpqXQ+CsfyxzFY/+GIKSm4OGDrLnnvnPfbtCvv0DlgZU5ikkOsb4SRUamLsmk/UXpGQtRi/aHoLuT4dC1n8l8+c+eTmflbvU7OVI9jyUhy7QcTuHQ8Y/+gu/M1qg440vkFv+djJ2xlpMv6bnwC0kZCvSjdD0KK7xYHr2sngabS4n7H6TADQzMhMyQyfDOkMbDbrTm01kf+raG3dmO4/MPM3YaN4nm+TtBdh/dvqx1XlC/OPtzxEMgMhYlbB/qPdd4KloGQjXjsFUr3wqDDKja00TrG5Y4lnXBTp0LM3+36D5/urSYnurFH4CH/ujZ1IHVKfzo8Dx6QYTSsuinR6mXf5td+zCEXwOR9j9SOgL8CxQDg+2XVasoq4evqCGD+qFprZHvRtPZ09Yxmg8RAPFbPpjfPzTw0uEnKJKhBA7B3mb264Vzg0XDHyg2QxXrdzB6r+dIS7brEtfc3AV66qYSGsL6K9eSeO8TJzmWQT+x/vKri90g==; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7197; HttpOnly
X-Firefox-Spdy: h2
GET app.usercentrics.eu/browser-ui/3.31.0/index.module.js
200 OK 105 kB URL
app.usercentrics.eu/browser-ui/3.31.0/index.module.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (65536), with no line terminators
First Seen 2023-10-13
Last Seen 2025-06-24
Times Seen 300
Size 105 kB (104579 bytes)
MD5 d9e3f73fa7e1ff1d0b14bc82442ceaae
SHA1 a7d206ace1f309f42eb12ca880d33244eb641fe4
SHA256 855f64ae035fc393ea382fddbd283f9ee61d4a2617a8ef8f36d22b677ae39fbb
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/index.module.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdvCLS9_BDhzsSTOhoQB5p3yzY87Ds8Nkgs7aWKjEbnvols549jnyY1NTfubc7zQQTAiCzmyu9-AufrK3i9u_rp0nQgWZQn4
x-goog-generation: 1697121649401713
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 104579
content-encoding: gzip
x-goog-hash: crc32c=7Ao0gw==, md5=kxj+WAhHA2FNPvvPBlGg6g==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 104579
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 12 Oct 2023 14:45:39 GMT
expires: Fri, 11 Oct 2024 14:45:39 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:49 GMT
etag: "9318fe58084703614d3efbcf0651a0ea"
content-type: text/javascript
age: 409490
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST www.eskytravel.it/akam/13/pixel_3d0324de
200 OK 0 B URL
www.eskytravel.it/akam/13/pixel_3d0324de
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/xstorage.html
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
POST /akam/13/pixel_3d0324de HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2876
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; lux_uid=169753142977580886
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 0
date: Tue, 17 Oct 2023 08:30:29 GMT
content-security-policy-report-only: frame-ancestors 'self' https://skybox.eskypartners.com; report-uri https://secure.esky.com/csp-report
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7197; HttpOnly
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 1380
Size 471 B (471 bytes)
MD5 92c66a077e2d56a10cb3919ab0fcb616
SHA1 e0b68920b8eace24f3b492aa3c71359479a55c28
SHA256 784f9288b19eb3b1f8608377ce54750ee9a8c1a1309d3f5107af2e7f0a611f6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST www.eskytravel.it/akam/13/pixel_3d0324de
200 OK 0 B URL
www.eskytravel.it/akam/13/pixel_3d0324de
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/xstorage.html
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
POST /akam/13/pixel_3d0324de HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/xstorage.html
Content-Type: application/x-www-form-urlencoded
Content-Length: 2893
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaHndBzmLAQAAawPCPBVA7WsuE2AWTP6Yezg0JysYVjBWwJ/iiBC/2JGwjrpqXQ+CsfyxzFY/+GIKSm4OGDrLnnvnPfbtCvv0DlgZU5ikkOsb4SRUamLsmk/UXpGQtRi/aHoLuT4dC1n8l8+c+eTmflbvU7OVI9jyUhy7QcTuHQ8Y/+gu/M1qg440vkFv+djJ2xlpMv6bnwC0kZCvSjdD0KK7xYHr2sngabS4n7H6TADQzMhMyQyfDOkMbDbrTm01kf+raG3dmO4/MPM3YaN4nm+TtBdh/dvqx1XlC/OPtzxEMgMhYlbB/qPdd4KloGQjXjsFUr3wqDDKja00TrG5Y4lnXBTp0LM3+36D5/urSYnurFH4CH/ujZ1IHVKfzo8Dx6QYTSsuinR6mXf5td+zCEXwOR9j9SOgL8CxQDg+2XVasoq4evqCGD+qFprZHvRtPZ09Yxmg8RAPFbPpjfPzTw0uEnKJKhBA7B3mb264Vzg0XDHyg2QxXrdzB6r+dIS7brEtfc3AV66qYSGsL6K9eSeO8TJzmWQT+x/vKri90g==; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; lux_uid=169753142977580886
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 0
date: Tue, 17 Oct 2023 08:30:29 GMT
content-security-policy-report-only: frame-ancestors 'self' https://skybox.eskypartners.com; report-uri https://secure.esky.com/csp-report
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:26 GMT; Max-Age=7197; HttpOnly
X-Firefox-Spdy: h2
471 B URL
ocsp.pki.goog/s/gts1d4/EgAwTu950RA
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 8
Size 471 B (471 bytes)
MD5 7534038cdbd2d2a20171f7126dfa82bf
SHA1 eba43a60cfbc7396a2ae4414611f3add1c876cdf
SHA256 94932f092fcba38f8b5470bf2ee881c596f04501ad5800e3dffd613c39946e88
POST /s/gts1d4/EgAwTu950RA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:29 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B URL
ocsp.pki.goog/s/gts1d4/EgAwTu950RA
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 8
Size 471 B (471 bytes)
MD5 7534038cdbd2d2a20171f7126dfa82bf
SHA1 eba43a60cfbc7396a2ae4414611f3add1c876cdf
SHA256 94932f092fcba38f8b5470bf2ee881c596f04501ad5800e3dffd613c39946e88
POST /s/gts1d4/EgAwTu950RA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:29 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/languages.json
200 OK 0 B URL
api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/languages.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
OPTIONS /settings/toPQAH6Zg5mF0T/latest/languages.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.eskytravel.it/
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsrS-4Nj9u0GwrYSPBA7mz053Jqmg7LI8KJWQKRMb-A-JJJEHkZRLuIgNfX3GdHqYfsNA2KVGSYJruDoG3LH7BWnA
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE
access-control-allow-headers: content-type
date: Tue, 17 Oct 2023 08:30:30 GMT
expires: Tue, 17 Oct 2023 08:30:30 GMT
cache-control: private, max-age=0
content-length: 0
server: UploadServer
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/languages.json
200 OK 76 B URL
api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/languages.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with no line terminators
First Seen 2023-10-17
Last Seen 2024-08-21
Times Seen 3
Size 76 B (76 bytes)
MD5 feeab42cdd3058e7ca26bd6eb43c5478
SHA1 d06266f7a46e8baf6c6478147bcb3557998876db
SHA256 0e7a305e422279dba43a5dc8b0b15b0c3cbab0f17e0dd0b639697b3cd4bf293a
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
GET /settings/toPQAH6Zg5mF0T/latest/languages.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
content-type: application/json
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycds1bFmvtWIqrl26WM0HBHQ9blX2k8YCL4J_c7neOu3kZdFBYtbh4zBqbSjodVEDhwcQvMS3KqCtttZJs7irf0mWcH_pVMgN
x-goog-generation: 1696505358195400
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 76
content-encoding: gzip
x-goog-hash: crc32c=ZC2ObA==, md5=9zurkY05/zeDcuFp9jnewA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 76
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 17 Oct 2023 08:30:30 GMT
expires: Tue, 17 Oct 2023 08:31:30 GMT
cache-control: public, max-age=1800, s-maxage=60
last-modified: Thu, 05 Oct 2023 11:29:18 GMT
etag: "f73bab918d39ff378372e169f639dec0"
content-type: application/json
vary: Accept-Encoding
age: 0
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/it.json
200 OK 0 B URL
api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/it.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
OPTIONS /settings/toPQAH6Zg5mF0T/latest/it.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.eskytravel.it/
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduU8pd87Wm6biHzNWrnA8hOst6YEpK5-o49n1FAuJ8QjbkqN5crsOrsceDDKf_4MXJKgKUpM8-qweNQeaE5h5Il_g
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE
access-control-allow-headers: content-type
date: Tue, 17 Oct 2023 08:30:30 GMT
expires: Tue, 17 Oct 2023 08:30:30 GMT
cache-control: private, max-age=0
content-length: 0
server: UploadServer
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B URL
ocsp.pki.goog/s/gts1d4/EgAwTu950RA
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 8
Size 471 B (471 bytes)
MD5 7534038cdbd2d2a20171f7126dfa82bf
SHA1 eba43a60cfbc7396a2ae4414611f3add1c876cdf
SHA256 94932f092fcba38f8b5470bf2ee881c596f04501ad5800e3dffd613c39946e88
POST /s/gts1d4/EgAwTu950RA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
OPTIONS api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/it.json
200 OK 8.3 kB URL
api.usercentrics.eu/settings/toPQAH6Zg5mF0T/latest/it.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (30290), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 8.3 kB (8292 bytes)
MD5 5aedbf3242764d453f4575a772d87019
SHA1 6f0bc7898009eff8afbabed4a411c10ef2b105fc
SHA256 91a6437ba3564e961ae449ce95c5ce3e59be98a6772a1cce75bac136ba221471
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
GET /settings/toPQAH6Zg5mF0T/latest/it.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
content-type: application/json
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycds2dyyLVDDmAVuubtxvW5_UtxR-RMned8xEhrikLAF99zmyf_nXSByU8pgaI01zCAmxoiEvGosTxiZXTe2DGmZH0g
x-goog-generation: 1696505358195519
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 8292
content-encoding: gzip
x-goog-hash: crc32c=3yf7ZA==, md5=GoDhm+rl/ZGLVsD7Op7gjA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 8292
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 17 Oct 2023 08:30:30 GMT
expires: Tue, 17 Oct 2023 08:31:30 GMT
cache-control: public, max-age=1800, s-maxage=60
last-modified: Thu, 05 Oct 2023 11:29:18 GMT
etag: "1a80e19beae5fd918b56c0fb3a9ee08c"
content-type: application/json
vary: Accept-Encoding
age: 0
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET app.usercentrics.eu/browser-sdk/4.28.2/cross-domain-bridge.html
200 OK 1.1 kB URL
app.usercentrics.eu/browser-sdk/4.28.2/cross-domain-bridge.html
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
First Seen 2023-04-07
Last Seen 2025-07-26
Times Seen 881
Size 1.1 kB (1123 bytes)
MD5 9e7949c2859c0c8525e1f12192cd0c66
SHA1 a4a919dc3ec2fb7ff7e81425d5beeb5cad18eaa7
SHA256 8563f915516318c564b1a4b4d4005778294178cfac736d0ed7dd5afa86d4cd50
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-sdk/4.28.2/cross-domain-bridge.html HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdsDxylH_A8KXNThAiBQ79XXR28X-6pWKKKbyyawuOSn1jsf5GBltPTjnQ0hf2rKlPyTooqqhtJbccHhFoz8JUX9f-bI29Z5
x-goog-generation: 1697121627728711
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1123
content-encoding: gzip
x-goog-hash: crc32c=gnFlxQ==, md5=bdfN0mHYGdLJq8zsSxAIvQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 1123
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Transfer-Encoding
server: UploadServer
date: Thu, 12 Oct 2023 14:45:40 GMT
expires: Sat, 11 Nov 2023 14:45:40 GMT
cache-control: public, max-age=2592000, no-transform
age: 409490
last-modified: Thu, 12 Oct 2023 14:40:27 GMT
etag: "6dd7cdd261d819d2c9abccec4b1008bd"
content-type: text/html
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/gsi/status?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&as=Eway8eCxIPY%2FxJk5l4Nb4A
200 OK 66 B URL
accounts.google.com/gsi/status?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&as=Eway8eCxIPY%2FxJk5l4Nb4A
IP / ASN
142.250.74.109
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 66 B (66 bytes)
MD5 7432716aad66899bfb9ed469d5a88cd4
SHA1 2fe5a28fe77f546c5c677f272c691a103a36e10c
SHA256 88ffae8a22656e249976ee2a4736da83c953ed0d56ce40cc9cc99ba7ba01b70d
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.com
Fingerprint 09:1E:68:9F:BD:40:4B:47:8D:AC:BE:FE:EF:35:D6:52:C1:A0:EC:9F
Validity Mon, 18 Sep 2023 08:19:26 GMT - Mon, 11 Dec 2023 08:19:25 GMT
GET /gsi/status?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&as=Eway8eCxIPY%2FxJk5l4Nb4A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
access-control-allow-origin: https://www.eskytravel.it
access-control-allow-credentials: true
access-control-allow-methods: GET
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 17 Oct 2023 08:30:30 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-security-policy: script-src 'nonce-pzneyhgj0hy6aMWikilNnw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it
200 OK 64 kB URL
accounts.google.com/gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it
IP / ASN
142.250.74.109
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32399)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 64 kB (64423 bytes)
MD5 33a0bc9c624dd33bde901084e4e3e89c
SHA1 18b277ac35c91f88a814874a6d761cc500bcd015
SHA256 f5daede06c3f25291d2dfdcf6e78b1924565ef77fcaa02319c1f7f7e13a8098c
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.com
Fingerprint 09:1E:68:9F:BD:40:4B:47:8D:AC:BE:FE:EF:35:D6:52:C1:A0:EC:9F
Validity Mon, 18 Sep 2023 08:19:26 GMT - Mon, 11 Dec 2023 08:19:25 GMT
GET /gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 17 Oct 2023 08:30:30 GMT
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-OEVE9_mnN2jdcWga0vC6aQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app.usercentrics.eu/browser-ui/3.31.0/TcfData-44389810-d107b1cb.js
200 OK 6.4 kB URL
app.usercentrics.eu/browser-ui/3.31.0/TcfData-44389810-d107b1cb.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (24574)
First Seen 2023-10-17
Last Seen 2023-11-14
Times Seen 14
Size 6.4 kB (6413 bytes)
MD5 4825dfca1c01360fbf0f703f5c6e24dc
SHA1 2e553038c4fd8aa081a99f7393b2c9595aba84dc
SHA256 fc7abdf46191a63cf42d2cb5068ae221e67c86e3d9239fb398f5c8b720ed3528
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/TcfData-44389810-d107b1cb.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://app.usercentrics.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdu3QXzE6k5k55ia4erDioC30KVlfCnL2m_9pxZP9pCA75Lz37eTbRa9HcPmY7HPLt1fEmeJ42fYWIQF9xNUUoejP814wyR-
x-goog-generation: 1697121643378408
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 6413
content-encoding: gzip
x-goog-hash: crc32c=d55Xhg==, md5=vVTOZI3MrMNE6ctdmKyDZw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 6413
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 12 Oct 2023 14:45:39 GMT
expires: Fri, 11 Oct 2024 14:45:39 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:43 GMT
etag: "bd54ce648dccacc344e9cb5d98ac8367"
content-type: text/javascript
age: 409491
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app.usercentrics.eu/browser-ui/3.31.0/DefaultData-90e20df0-73e6fe6d.js
200 OK 968 B URL
app.usercentrics.eu/browser-ui/3.31.0/DefaultData-90e20df0-73e6fe6d.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Java source, ASCII text, with very long lines (2216)
First Seen 2023-09-15
Last Seen 2025-06-24
Times Seen 419
Size 968 B (968 bytes)
MD5 83aeba25da2a752f6dfaaeba3f4c24be
SHA1 cdac4d6536707ba6b753f45d408dc3054df7a0f7
SHA256 a88df466fee0bb0d3fa786712623c7b60c713d62457466a56c1644b36fb7f86e
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/DefaultData-90e20df0-73e6fe6d.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://app.usercentrics.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdsCmXQ2AppDWJb6k52DimLNhB7XJ1ErhL7vFqqoO6i-fyCiaIfV9WwPrEWfpROC4_RXibj-jK385zX8S0_Ybhnuyg
x-goog-generation: 1697121641090137
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 968
content-encoding: gzip
x-goog-hash: crc32c=qMsMrA==, md5=6R9bYekx2h2/F50ydfqWfA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 968
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Fri, 13 Oct 2023 01:45:59 GMT
expires: Sat, 12 Oct 2024 01:45:59 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:41 GMT
etag: "e91f5b61e931da1dbf179d3275fa967c"
content-type: text/javascript
age: 369871
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
OPTIONS api.usercentrics.eu/translations/translations-it.json
200 OK 0 B URL
api.usercentrics.eu/translations/translations-it.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
OPTIONS /translations/translations-it.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.eskytravel.it/
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvf9FkC-5YqEixSRRHRGO9xF06VK-VgmPSeSAdaYdKBDm__0QsWnTQlxiduxAw004HcLlckIsHpv6EXS4GHd0Pyfg
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE
access-control-allow-headers: content-type
date: Tue, 17 Oct 2023 08:30:30 GMT
expires: Tue, 17 Oct 2023 08:30:30 GMT
cache-control: private, max-age=0
content-length: 0
server: UploadServer
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
OPTIONS api.usercentrics.eu/translations/translations-it.json
200 OK 2.6 kB URL
api.usercentrics.eu/translations/translations-it.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (7634), with no line terminators
First Seen 2023-09-19
Last Seen 2024-08-21
Times Seen 20
Size 2.6 kB (2578 bytes)
MD5 aa27c0b154102e7abd9bec35aa7b410a
SHA1 2e5e8a605fcb5d595e6a25dc796380c8ead6ca5c
SHA256 2a560f127018b9e00bb62de531c8bcd65a6745b3c487fa0b6b2486b82c93a83e
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
GET /translations/translations-it.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
content-type: application/json
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdud69FQ2p7f7urmi4JObHnZpqb0ffmRqEU24_ULrqnd6i-DKdsfLIvdGMrFqVzuBl83IKYUwLpOFNeOH1WyloSOqrEI9zFL
x-goog-generation: 1693475533662508
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2578
content-encoding: gzip
x-goog-hash: crc32c=W6Oa3Q==, md5=bN5wdJLK5OebfLFrYxoL9g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 2578
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 17 Oct 2023 08:10:24 GMT
expires: Wed, 18 Oct 2023 08:10:24 GMT
cache-control: public, max-age=86400, s-maxage=86400
age: 1206
last-modified: Mon, 11 Sep 2023 07:33:51 GMT
etag: "6cde707492cae4e79b7cb16b631a0bf6"
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
200 OK 27 kB URL
fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://accounts.google.com/gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google Sans MediumRegularGoogle;GoogleSans-Medium\012- data
First Seen 2023-04-05
Last Seen 2025-07-25
Times Seen 6241
Size 27 kB (27431 bytes)
MD5 9ecc1a07aa9e5e87f04d31b49ca09897
SHA1 a030a565d2168e505861d6f1de260dc1adf8b77b
SHA256 ebeace42646aa327b1fa6225f70120658993d4796cc9103484a6f068d3a58a6d
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27431
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Oct 2023 13:51:59 GMT
expires: Sat, 12 Oct 2024 13:51:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:43:31 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 326311
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
200 OK 27 kB URL
fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
IP / ASN
216.58.207.227
#15169 GOOGLE
Requested by https://accounts.google.com/gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google SansRegularGoogle;GoogleSans-RegularGoogle\012- data
First Seen 2023-04-05
Last Seen 2025-06-18
Times Seen 6891
Size 27 kB (27191 bytes)
MD5 20f7180ebc95ade510a7fbd4cbdc35b6
SHA1 6cfc5afa73095577a20461de09d2a8f4b34d80e0
SHA256 8087cf253743d85d9153ba12ce624c2e460e966c40a61928b3a036a2d452f45a
Certificate Info
Issuer Google Trust Services LLC
Subject *.gstatic.com
Fingerprint 24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
Validity Mon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT
GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27191
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Oct 2023 14:13:27 GMT
expires: Tue, 15 Oct 2024 14:13:27 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:42:54 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 65823
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B URL
ocsp.pki.goog/s/gts1d4/HqUqxEhNF44
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 4
Size 471 B (471 bytes)
MD5 0c0e878f9021ba9b9c3396e2f119e1ec
SHA1 b4db1f98345d47eaf0059aa560758ab9926b17d1
SHA256 b43f9177e7638edb036cf686ec64b38914b761236d829e9674d3f5e822da7d97
POST /s/gts1d4/HqUqxEhNF44 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
471 B URL
ocsp.pki.goog/s/gts1d4/HqUqxEhNF44
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 4
Size 471 B (471 bytes)
MD5 0c0e878f9021ba9b9c3396e2f119e1ec
SHA1 b4db1f98345d47eaf0059aa560758ab9926b17d1
SHA256 b43f9177e7638edb036cf686ec64b38914b761236d829e9674d3f5e822da7d97
POST /s/gts1d4/HqUqxEhNF44 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
OPTIONS aggregator.service.usercentrics.eu/aggregate/it?templates=175UByuloFcprN@1.0.22,9V8bg4D63@9.6.6,ASds_Gg7tggCSJ@1.0.22,AX2-Du8kHJnXG8@1.0.22,D1mop7XEih8Xwo@1.0.22,EzjdL9yELy3gjZ@1.0.22,HkPBYFofN@10.3.1,Hko_qNsui-Q@14.5.15,HkocEodjb7@52.11.40,Hm50x8nnOzpE6N@1.0.8,S1_9Vsuj-Q@15.7.19,S1pcEj_jZX@21.10.9,Scywjwe3JutCeG@1.0.7,SkEscVsusbX@6.2.1,SkPc5EjOsWm@6.2.1,W-_3rmLYm8dRsZ@1.0.22,XYQZBUojc@9.6.4,dsS7z9Hv4@1.1.3,ekcusj-u4Uarv5@1.0.22,hh14TcFxfBFhH7@1.0.22,kPSiO3GBmKyqp4@1.0.22,ko1w5PpFl@23.12.21,qnhqQoUIF9EZBy@1.0.9,yWa2KEn6sdpSG-@1.0.22
204 No Content 0 B URL
aggregator.service.usercentrics.eu/aggregate/it?templates=175UByuloFcprN@1.0.22,9V8bg4D63@9.6.6,ASds_Gg7tggCSJ@1.0.22,AX2-Du8kHJnXG8@1.0.22,D1mop7XEih8Xwo@1.0.22,EzjdL9yELy3gjZ@1.0.22,HkPBYFofN@10.3.1,Hko_qNsui-Q@14.5.15,HkocEodjb7@52.11.40,Hm50x8nnOzpE6N@1.0.8,S1_9Vsuj-Q@15.7.19,S1pcEj_jZX@21.10.9,Scywjwe3JutCeG@1.0.7,SkEscVsusbX@6.2.1,SkPc5EjOsWm@6.2.1,W-_3rmLYm8dRsZ@1.0.22,XYQZBUojc@9.6.4,dsS7z9Hv4@1.1.3,ekcusj-u4Uarv5@1.0.22,hh14TcFxfBFhH7@1.0.22,kPSiO3GBmKyqp4@1.0.22,ko1w5PpFl@23.12.21,qnhqQoUIF9EZBy@1.0.9,yWa2KEn6sdpSG-@1.0.22
IP / ASN
34.120.28.121
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject aggregator.service.usercentrics.eu
Fingerprint 74:B7:37:78:4E:C9:DC:80:4D:67:9F:4E:A7:D5:22:45:AC:B2:F2:B8
Validity Sat, 23 Sep 2023 15:44:52 GMT - Fri, 22 Dec 2023 16:38:26 GMT
OPTIONS /aggregate/it?templates=175UByuloFcprN@1.0.22,9V8bg4D63@9.6.6,ASds_Gg7tggCSJ@1.0.22,AX2-Du8kHJnXG8@1.0.22,D1mop7XEih8Xwo@1.0.22,EzjdL9yELy3gjZ@1.0.22,HkPBYFofN@10.3.1,Hko_qNsui-Q@14.5.15,HkocEodjb7@52.11.40,Hm50x8nnOzpE6N@1.0.8,S1_9Vsuj-Q@15.7.19,S1pcEj_jZX@21.10.9,Scywjwe3JutCeG@1.0.7,SkEscVsusbX@6.2.1,SkPc5EjOsWm@6.2.1,W-_3rmLYm8dRsZ@1.0.22,XYQZBUojc@9.6.4,dsS7z9Hv4@1.1.3,ekcusj-u4Uarv5@1.0.22,hh14TcFxfBFhH7@1.0.22,kPSiO3GBmKyqp4@1.0.22,ko1w5PpFl@23.12.21,qnhqQoUIF9EZBy@1.0.9,yWa2KEn6sdpSG-@1.0.22 HTTP/1.1
Host: aggregator.service.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.eskytravel.it/
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
access-control-max-age: 86400
x-cloud-trace-context: af991eeb5921baafcc6d0d7511ff4778
date: Tue, 17 Oct 2023 08:30:30 GMT
content-type: text/html
server: Google Frontend
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B URL
ocsp.pki.goog/s/gts1d4/HqUqxEhNF44
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 4
Size 471 B (471 bytes)
MD5 0c0e878f9021ba9b9c3396e2f119e1ec
SHA1 b4db1f98345d47eaf0059aa560758ab9926b17d1
SHA256 b43f9177e7638edb036cf686ec64b38914b761236d829e9674d3f5e822da7d97
POST /s/gts1d4/HqUqxEhNF44 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET api.usercentrics.eu/tcf2/en-v2.json
200 OK 57 kB URL
api.usercentrics.eu/tcf2/en-v2.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65513), with no line terminators
First Seen 2023-10-14
Last Seen 2023-10-26
Times Seen 8
Size 57 kB (57348 bytes)
MD5 0ae73ce9f91282e51cea88531b08affa
SHA1 f342490a47eefb954f66d0372c6231441b39ac02
SHA256 b447450b884eb18a2f0d078f45d814469cac135501731772a77dcbc07d19cd08
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
GET /tcf2/en-v2.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdtD5ZOGQUrniZATCAGb71t4EyModVmYrTi3nRl1NTXzMvcAToBhPVoQ5KbyxXSLsleTR_Op8dzDYnCDfM9LWHGtuA
x-goog-generation: 1697158810145274
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 57348
content-encoding: gzip
x-goog-hash: crc32c=dIOiUg==, md5=CcIxdmbk7PkEkF35PHIUVQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 57348
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 17 Oct 2023 07:22:20 GMT
expires: Tue, 17 Oct 2023 09:22:20 GMT
cache-control: public, max-age=7200, s-maxage=7200, no-transform
age: 4090
last-modified: Fri, 13 Oct 2023 01:00:10 GMT
etag: "09c2317666e4ecf904905df93c721455"
content-type: application/json
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET accounts.google.com/gsi/client?_=1697531428829
200 OK 84 kB URL
accounts.google.com/gsi/client?_=1697531428829
IP / ASN
142.250.74.109
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (3006)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 84 kB (83896 bytes)
MD5 a440277f1ca77295585e3f7dc064e1cf
SHA1 ccc9b3010c3d1a8f469a2ed3189d871e559d1b44
SHA256 58b815a44df3a982c2a79879f69e5f30b151d718b12969691ddef11065952bf7
Certificate Info
Issuer Google Trust Services LLC
Subject accounts.google.com
Fingerprint 4A:5A:3C:9D:EC:4D:02:20:DE:B6:76:11:1C:40:B5:78:E9:AA:A6:0D
Validity Mon, 18 Sep 2023 08:25:15 GMT - Mon, 11 Dec 2023 08:25:14 GMT
GET /gsi/client?_=1697531428829 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 17 Oct 2023 08:30:29 GMT
date: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: private, max-age=1800
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-security-policy: script-src 'nonce-GBbruPnNZtB16NBbPn5a-Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET app.usercentrics.eu/browser-ui/3.31.0/TcfUI-52273b2a-b627271c.js
200 OK 657 B URL
app.usercentrics.eu/browser-ui/3.31.0/TcfUI-52273b2a-b627271c.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Java source, ASCII text, with very long lines (1474)
First Seen 2023-10-17
Last Seen 2023-11-14
Times Seen 14
Size 657 B (657 bytes)
MD5 1cbe55689adf76c699db439bf38c46f4
SHA1 c76d1d7607ce137489cf47756dcad39192cecd8e
SHA256 35c98ea6240bfafff2ddd2a540d78401aa4f1338bfe799b1901c70a2d1cbfca6
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/TcfUI-52273b2a-b627271c.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://app.usercentrics.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdse8ex_8WPEBvdkiDxMQAzCevn8f2UYA6jj86vTqzq2zDw6OcEcj6doE5-PxeGa1NIoz3WpX-33C_LQuSVJ_7MGIw
x-goog-generation: 1697121643623978
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 657
content-encoding: gzip
x-goog-hash: crc32c=slNKHQ==, md5=XDwI/y5xqjSPHUpraC6jrQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 657
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Fri, 13 Oct 2023 13:13:23 GMT
expires: Sat, 12 Oct 2024 13:13:23 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:43 GMT
etag: "5c3c08ff2e71aa348f1d4a6b682ea3ad"
content-type: text/javascript
age: 328627
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app.usercentrics.eu/browser-ui/3.31.0/FirstLayerCustomization-bab18a58-27434383.js
200 OK 1.1 kB URL
app.usercentrics.eu/browser-ui/3.31.0/FirstLayerCustomization-bab18a58-27434383.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Java source, ASCII text, with very long lines (2934)
First Seen 2023-09-12
Last Seen 2025-06-24
Times Seen 421
Size 1.1 kB (1075 bytes)
MD5 4ab498a4dee63c157a7e69b0ed0c61d2
SHA1 33ce2ea31e33324142e221ca96e81d1b7362a283
SHA256 fdca819eed878aa74b52c43b07ef775bde65457494c40a2228697a5fe298158d
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/FirstLayerCustomization-bab18a58-27434383.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://app.usercentrics.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdvenGXccQBBqqHrgRFNFQh6m6BCj6OOvkeG9tEYyQZMS2l9Fk1TIqoRoyp0Pb8gaAc_hyIRvgyPFT_-VQyKIp8sqobjPkmi
x-goog-generation: 1697121641797068
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1075
content-encoding: gzip
x-goog-hash: crc32c=8fiYyg==, md5=MBtPywB5cq4nPqd4Th8tmw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 1075
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 12 Oct 2023 14:45:40 GMT
expires: Fri, 11 Oct 2024 14:45:40 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:41 GMT
etag: "301b4fcb007972ae273ea7784e1f2d9b"
content-type: text/javascript
age: 409490
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app.usercentrics.eu/browser-ui/3.31.0/ButtonsCustomization-a07b1a9d-10719b6b.js
200 OK 236 B URL
app.usercentrics.eu/browser-ui/3.31.0/ButtonsCustomization-a07b1a9d-10719b6b.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type Java source, ASCII text, with very long lines (472)
First Seen 2023-09-12
Last Seen 2025-06-24
Times Seen 346
Size 236 B (236 bytes)
MD5 609080adfd9f1b25370617ba88a26091
SHA1 79d92de2c41d0352c0837d4378ac3197cd9674aa
SHA256 4a0e0c5931babc166aaca2c1a7ca666d4ca07fcd2579fbdd9163ad9b9273102b
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/ButtonsCustomization-a07b1a9d-10719b6b.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://app.usercentrics.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdvYYovflvU-WOBU9Rpr733UmSYZE_uTFlSTWXrcibc60mutr5Dzuz82JA5kkpv8Ho0DbeqiORvaXPJsYr0xgQG3IsP4d6Jm
x-goog-generation: 1697121639920449
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 236
content-encoding: gzip
x-goog-hash: crc32c=OEvNyA==, md5=pemJu3dxkDqA5GtzWHYjXQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 236
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 12 Oct 2023 14:45:40 GMT
expires: Fri, 11 Oct 2024 14:45:40 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:39 GMT
etag: "a5e989bb7771903a80e46b735876235d"
content-type: text/javascript
age: 409490
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET app.usercentrics.eu/browser-ui/3.31.0/Taglogger-d4c92ced-e5f4d971.js
200 OK 690 B URL
app.usercentrics.eu/browser-ui/3.31.0/Taglogger-d4c92ced-e5f4d971.js
IP / ASN
35.190.14.188
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type C source text\012- Java source, ASCII text, with very long lines (1274)
First Seen 2023-10-13
Last Seen 2025-06-24
Times Seen 283
Size 690 B (690 bytes)
MD5 a480e7e3ab38bb28b936e45bd9a42c82
SHA1 222438204283249ade72cee705c470c984199e87
SHA256 9308a14874225435d0d03059f971e3e881a360bdb6081c288a5d9686fa164ea6
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /browser-ui/3.31.0/Taglogger-d4c92ced-e5f4d971.js HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://app.usercentrics.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-guploader-uploadid: ADPycdsAMlkkDALbIh6Lv2ax9I6462DOpav2ty7hqMUkS-mNx4_nCaHMchrBHN6JWQVOzR5kfx_eZqX3kdhD4JmaN9hrH0XA589T
x-goog-generation: 1697121643148045
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 690
content-encoding: gzip
x-goog-hash: crc32c=wBoxGg==, md5=gxHUDUpwENpjYeN0FtWhDA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 690
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 12 Oct 2023 14:45:40 GMT
expires: Fri, 11 Oct 2024 14:45:40 GMT
cache-control: public, max-age=31536000, no-transform
last-modified: Thu, 12 Oct 2023 14:40:43 GMT
etag: "8311d40d4a7010da6361e37416d5a10c"
content-type: text/javascript
age: 409490
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
472 B URL
ocsp.pki.goog/s/gts1d4/g_a7sp26vEc
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-18
Times Seen 8
Size 472 B (472 bytes)
MD5 be5dbb8eaf505463310ee74145348915
SHA1 e1595dd81d6e432ddbd183a882cf845f88079115
SHA256 71e625af706d54942c7686254aaf7f1fc44603dae01265534304d1384aa53218
POST /s/gts1d4/g_a7sp26vEc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B URL
ocsp.pki.goog/s/gts1d4/g_a7sp26vEc
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-18
Times Seen 8
Size 472 B (472 bytes)
MD5 be5dbb8eaf505463310ee74145348915
SHA1 e1595dd81d6e432ddbd183a882cf845f88079115
SHA256 71e625af706d54942c7686254aaf7f1fc44603dae01265534304d1384aa53218
POST /s/gts1d4/g_a7sp26vEc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
OPTIONS consent-api.service.consent.usercentrics.eu/consent/uw/2
204 No Content 0 B URL
consent-api.service.consent.usercentrics.eu/consent/uw/2
IP / ASN
35.201.111.240
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject consent-api.service.consent.usercentrics.eu
Fingerprint 98:A5:80:1B:DC:4C:99:8F:4D:2A:C8:EA:AD:0D:74:B2:F9:1C:D1:9F
Validity Sun, 15 Oct 2023 04:07:24 GMT - Sat, 13 Jan 2024 05:02:19 GMT
OPTIONS /consent/uw/2 HTTP/1.1
Host: consent-api.service.consent.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-control-allow-origin,content-type,x-request-id
Referer: https://www.eskytravel.it/
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: access-control-allow-origin,content-type,x-request-id
access-control-max-age: 86400
x-cloud-trace-context: 7f759cb2742fa81deb031c35cfd9b477
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: text/html
server: Google Frontend
content-length: 0
via: 1.1 google
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B URL
ocsp.pki.goog/s/gts1d4/g_a7sp26vEc
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-18
Times Seen 8
Size 472 B (472 bytes)
MD5 be5dbb8eaf505463310ee74145348915
SHA1 e1595dd81d6e432ddbd183a882cf845f88079115
SHA256 71e625af706d54942c7686254aaf7f1fc44603dae01265534304d1384aa53218
POST /s/gts1d4/g_a7sp26vEc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
OPTIONS consent-api.service.consent.usercentrics.eu/consent/uw/2
204 No Content 0 B URL
consent-api.service.consent.usercentrics.eu/consent/uw/2
IP / ASN
35.201.111.240
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject consent-api.service.consent.usercentrics.eu
Fingerprint 98:A5:80:1B:DC:4C:99:8F:4D:2A:C8:EA:AD:0D:74:B2:F9:1C:D1:9F
Validity Sun, 15 Oct 2023 04:07:24 GMT - Sat, 13 Jan 2024 05:02:19 GMT
POST /consent/uw/2 HTTP/1.1
Host: consent-api.service.consent.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
content-type: application/json
Access-Control-Allow-Origin: *
X-Request-ID: bf525e3e-616e-4aea-b070-5483f84ac363
Content-Length: 2458
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 201 Created
vary: Origin
access-control-allow-origin: *
x-cloud-trace-context: 7164ed4585ba97d1bb0ca4871f9234a0
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: text/html
server: Google Frontend
content-length: 0
via: 1.1 google
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-HHES4LMH8M&l=dataLayer&cx=c
200 OK 92 kB URL
www.googletagmanager.com/gtag/js?id=G-HHES4LMH8M&l=dataLayer&cx=c
IP / ASN
142.250.74.72
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (5788)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 92 kB (92539 bytes)
MD5 a531846d5c767c6d4c6282601fabe83a
SHA1 9c8edf2325527762e12ad9fbad861dc7694f88cc
SHA256 d19ed16dc5967399eefd7ddc3395c0d0edd03203c2b5fdc5187e64ec8065d89a
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
GET /gtag/js?id=G-HHES4LMH8M&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Oct 2023 08:30:31 GMT
expires: Tue, 17 Oct 2023 08:30:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92539
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.googletagmanager.com/gtag/js?id=G-6RMQ2VTF3Z&l=dataLayer&cx=c
200 OK 93 kB URL
www.googletagmanager.com/gtag/js?id=G-6RMQ2VTF3Z&l=dataLayer&cx=c
IP / ASN
142.250.74.72
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (5788)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 93 kB (92608 bytes)
MD5 7dd6ea120bf13ceafd95d2f071dcdad0
SHA1 d97aad0d1a1d72603411c972ac77a136dc5b3909
SHA256 4b41a52a638732da4be63fa4cb3d5c6b1cc9623f3cae4b0c3e586f31116af46a
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
GET /gtag/js?id=G-6RMQ2VTF3Z&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Oct 2023 08:30:31 GMT
expires: Tue, 17 Oct 2023 08:30:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92608
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.googletagmanager.com/gtag/js?id=G-N9CRQD0ZQC&l=dataLayer&cx=c
200 OK 93 kB URL
www.googletagmanager.com/gtag/js?id=G-N9CRQD0ZQC&l=dataLayer&cx=c
IP / ASN
142.250.74.72
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (5788)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 93 kB (92818 bytes)
MD5 bc7766954ce53537e197276ea6367d0f
SHA1 27cf07d341fbc4fe9a0988f4d8e43a5dfd949608
SHA256 cb5feba177493a13371b03ee2bc9c1283e882b828eae919904d8a606aec8c415
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
GET /gtag/js?id=G-N9CRQD0ZQC&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 17 Oct 2023 08:30:31 GMT
expires: Tue, 17 Oct 2023 08:30:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92818
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
471 B IP / ASN
192.229.221.95
#15133 EDGECAST
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 471 B (471 bytes)
MD5 114529df5f137e57f25ab2d7e791b4b3
SHA1 383a90f9fa281cd8d6e6bc3558424bc7ce935cd9
SHA256 be1fcb7f2d4dffc02be4e8bb9e5e3a4c5a9545751429c16ff31a8af506425684
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6017
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:31 GMT
Last-Modified: Tue, 17 Oct 2023 06:50:14 GMT
Server: ECAcc (ska/F6A0)
X-Cache: HIT
Content-Length: 471
GET js.adara.com/index.js
200 OK 1.6 kB IP / ASN
151.101.1.195
#54113 FASTLY
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (4314), with no line terminators
First Seen 2023-03-10
Last Seen 2023-11-14
Times Seen 3
Size 1.6 kB (1617 bytes)
MD5 f92e3e3af466792022997b0b66582600
SHA1 a8d6ceb2adc42e887d8153caafde8db9e6ecc67c
SHA256 5cb557a93cee9ab58da4f7e0ded20309261f563d53dc5573ccf6a4a1a9ed6a30
Certificate Info
Issuer Google Trust Services LLC
Subject virtusest.com
Fingerprint F4:16:8A:41:02:5F:8D:46:4A:8F:E7:19:93:23:00:F6:18:8F:C0:60
Validity Sat, 23 Sep 2023 06:34:12 GMT - Fri, 22 Dec 2023 07:32:13 GMT
GET /index.js HTTP/1.1
Host: js.adara.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "7a8337caae20a0c135adffbe3cb67fe41d814816469cb25a936431d29e14d413-br"
last-modified: Mon, 23 May 2022 17:57:27 GMT
strict-transport-security: max-age=31556926
accept-ranges: bytes
date: Tue, 17 Oct 2023 08:30:31 GMT
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 24924
x-timer: S1697531431.361598,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1617
X-Firefox-Spdy: h2
GET ads.travelaudience.com/trg.gif?ds=dp&acc=ES&pt=5&lvl=1&la=IT&exid=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0&sc=1
307 Temporary Redirect 35 B URL
ads.travelaudience.com/trg.gif?ds=dp&acc=ES&pt=5&lvl=1&la=IT&exid=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0&sc=1
IP / ASN
35.190.0.66
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type GIF image data, version 89a, 1 x 1\012- data
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 64180
Size 35 B (35 bytes)
MD5 c2196de8ba412c60c22ab491af7b1409
SHA1 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
SHA256 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
Certificate Info
Issuer Let's Encrypt
Subject ads.travelaudience.com
Fingerprint 88:1C:02:16:B5:AD:DC:58:29:EE:C2:31:DC:AD:B1:94:18:6F:13:FE
Validity Thu, 07 Sep 2023 03:03:47 GMT - Wed, 06 Dec 2023 03:03:46 GMT
GET /trg.gif?ds=dp&acc=ES&pt=5&lvl=1&la=IT&exid=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0&sc=1 HTTP/1.1
Host: ads.travelaudience.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
server: nginx/1.21.6
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: image/gif
content-length: 35
location: https://secure.adnxs.com/px?bidder=320&seg=4564892&external_uid=23BA9A95467A4607AFA086107C1B22AE&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMxNTcmdGw9MTI5NjAw%26piggybackCookie%3D23BA9A95467A4607AFA086107C1B22AE%26r%3Dhttps%253A%252F%252Fcm.g.doubleclick.net%252Fpixel%253Fgoogle_nid%253Dta%2526google_cm%2526google_hm%253DI7qalUZ6RgevoIYQfBsirg
set-cookie: _tracker=%7B%22UUID%22%3A%2223BA9A95-467A-4607-AFA0-86107C1B22AE%22%7D; Path=/; Domain=travelaudience.com; Expires=Sun, 17 Nov 2024 08:30:31 GMT; Max-Age=34300799; Secure; SameSite=None
x-engine-version: 0.0.0
x-host: tde-deliveryengine-production-7595df5684-bv8d5
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR LAW CUR DEV PSA PSD IVA OUR BUS UNI COM NAV INT CNT LOC"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET media-eskytravel-it.ipresso.pl/monitoridentification/4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU./xT9LqL69W8-JeaiVrkhYPiRuvZbEiAcFjiVbFpbKgvk./monitoridentification.js?r=&ti=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&c=null&z=6blVZeZ1wL07W7wXNbxloaSCo9Yjv9NENab0WeSFWSM.&as=1
200 OK 30 kB URL
media-eskytravel-it.ipresso.pl/monitoridentification/4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU./xT9LqL69W8-JeaiVrkhYPiRuvZbEiAcFjiVbFpbKgvk./monitoridentification.js?r=&ti=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&c=null&z=6blVZeZ1wL07W7wXNbxloaSCo9Yjv9NENab0WeSFWSM.&as=1
IP / ASN
93.179.224.106
#31242 3S S.A.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (23428)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 30 kB (29672 bytes)
MD5 cf9d0e7952267b0a1c8ad71baa033160
SHA1 8dd9af73dbdcc76efc8b1f0c3dc7c43b0abe4490
SHA256 17d5083e47778487917b690fb00266802720977593fc48282e6f406c5e7135a3
Certificate Info
Issuer DigiCert Inc
Subject *.ipresso.pl
Fingerprint 94:07:D4:53:07:91:00:D6:51:95:36:4F:FB:71:7F:A2:AE:97:8B:02
Validity Wed, 31 May 2023 00:00:00 GMT - Thu, 30 May 2024 23:59:59 GMT
GET /monitoridentification/4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU./xT9LqL69W8-JeaiVrkhYPiRuvZbEiAcFjiVbFpbKgvk./monitoridentification.js?r=&ti=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&c=null&z=6blVZeZ1wL07W7wXNbxloaSCo9Yjv9NENab0WeSFWSM.&as=1 HTTP/1.1
Host: media-eskytravel-it.ipresso.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 17 Oct 2023 08:30:31 GMT
Content-Type: application/x-javascript; charset=utf-8
X-Content-Type-Options: nosniff
content-length: 29672
472 B URL
ocsp.pki.goog/s/gts1d4/oYkje7coGAk
IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 472 B (472 bytes)
MD5 76ce47541fa0a2d31dc19bbded64f4df
SHA1 ccac57b3b35cdf151e859e2fd8e517fd866a38ff
SHA256 748040eab7b87adaa78f8e43dc28bbf1836db7ff403eb6e649553f75d731d3f5
POST /s/gts1d4/oYkje7coGAk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 1160
Size 472 B (472 bytes)
MD5 563a3bab24190c8ca83022ac691d21c1
SHA1 3cc5c13bd8288315e55d980392b63baef627da11
SHA256 c7e58e6cafdf3277ced660fb53a54ca4269cd942a79caa04fdcd5f71e99ece4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST www.google.com/pagead/landing?gcs=G111&gcd=G100&rnd=1939654419.1697531432&url=https%3A%2F%2Fwww.eskytravel.it%2F>m=45He3ab0n81NH83QL6&auid=881208613.1697531430
302 Found 42 B URL
www.google.com/pagead/landing?gcs=G111&gcd=G100&rnd=1939654419.1697531432&url=https%3A%2F%2Fwww.eskytravel.it%2F>m=45He3ab0n81NH83QL6&auid=881208613.1697531430
IP / ASN
142.250.74.164
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type GIF image data, version 89a, 1 x 1\012- data
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 320101
Size 42 B (42 bytes)
MD5 d89746888da2d9510b64a9f031eaecd5
SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
Certificate Info
Issuer Google Trust Services LLC
Subject www.google.com
Fingerprint C9:F6:98:54:A9:56:99:75:0A:10:B7:BD:95:70:40:74:3A:B0:B0:77
Validity Mon, 18 Sep 2023 08:25:14 GMT - Mon, 11 Dec 2023 08:25:13 GMT
POST /pagead/landing?gcs=G111&gcd=G100&rnd=1939654419.1697531432&url=https%3A%2F%2Fwww.eskytravel.it%2F>m=45He3ab0n81NH83QL6&auid=881208613.1697531430 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 17 Oct 2023 08:30:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=G100&rnd=1939654419.1697531432&url=https%3A%2F%2Fwww.eskytravel.it%2F>m=45He3ab0n81NH83QL6&auid=881208613.1697531430
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20231017
200 OK 914 B URL
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20231017
IP / ASN
151.101.1.229
#54113 FASTLY
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with very long lines (1596), with no line terminators
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 17
Size 914 B (914 bytes)
MD5 0f5eba016163bd8a60cd8a9e1da10495
SHA1 651b99f7f350e6496711dae61a53401e4a3825ac
SHA256 645ffa5e4bd7d2398eb0639ad31670b6d7fb6c873fa2377d544f69388e932b16
Certificate Info
Issuer GlobalSign nv-sa
Subject jsdelivr.net
Fingerprint 05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
Validity Wed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
GET /gh/prebid/currency-file@1/latest.json?date=20231017 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1845
x-jsd-version-type: version
etag: W/"63c-ZRuZ9/NQ5klnEdrmGlNAHko4Jaw"
content-encoding: br
accept-ranges: bytes
date: Tue, 17 Oct 2023 08:30:31 GMT
age: 16179
x-served-by: cache-fra-eddf8230103-FRA, cache-bma1669-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 914
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20231017
200 OK 914 B URL
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20231017
IP / ASN
151.101.1.229
#54113 FASTLY
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with very long lines (1596), with no line terminators
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 17
Size 914 B (914 bytes)
MD5 0f5eba016163bd8a60cd8a9e1da10495
SHA1 651b99f7f350e6496711dae61a53401e4a3825ac
SHA256 645ffa5e4bd7d2398eb0639ad31670b6d7fb6c873fa2377d544f69388e932b16
Certificate Info
Issuer GlobalSign nv-sa
Subject jsdelivr.net
Fingerprint 05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
Validity Wed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
GET /gh/prebid/currency-file@1/latest.json?date=20231017 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1845
x-jsd-version-type: version
etag: W/"63c-ZRuZ9/NQ5klnEdrmGlNAHko4Jaw"
content-encoding: br
accept-ranges: bytes
date: Tue, 17 Oct 2023 08:30:31 GMT
age: 16179
x-served-by: cache-fra-eddf8230103-FRA, cache-bma1669-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 914
X-Firefox-Spdy: h2
GET etm.eskytravel.it/g/collect?v=2&tid=G-HHES4LMH8M>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_nsi=1&_ss=1&ep.user_data._tag_mode=MANUAL&tfd=5137&richsstsse
200 OK 353 B URL
etm.eskytravel.it/g/collect?v=2&tid=G-HHES4LMH8M>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_nsi=1&_ss=1&ep.user_data._tag_mode=MANUAL&tfd=5137&richsstsse
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 353 B (353 bytes)
MD5 b3f73c9b1deeac6cc5d1aaa9d56c1916
SHA1 7bddc66f98feecdeb33ef4b82122cb2d33d466cf
SHA256 1d9e30898fb4cb5d90639b476d20154b4f08087a3f3ae0f108f8a8ddb0ad3280
Certificate Info
Issuer Let's Encrypt
Subject etm.esky.com
Fingerprint 16:50:36:B2:50:A8:C6:D5:F7:24:E6:39:4A:AE:1C:4F:0D:13:E7:FA
Validity Fri, 06 Oct 2023 10:28:46 GMT - Thu, 04 Jan 2024 10:28:45 GMT
GET /g/collect?v=2&tid=G-HHES4LMH8M>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_nsi=1&_ss=1&ep.user_data._tag_mode=MANUAL&tfd=5137&richsstsse HTTP/1.1
Host: etm.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; esky_TCSI=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; _ga_HHES4LMH8M=GS1.1.1697531432.1.0.1697531432.0.0.0; _ga=GA1.1.615350220.1697531432; _ga_N9CRQD0ZQC=GS1.1.1697531432.1.0.1697531432.0.0.0; _ga_6RMQ2VTF3Z=GS1.1.1697531432.1.0.1697531432.0.0.0; __ipcan_4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU.=IaSD9dQzJ_zSyIl5xOTb4yRCV8Q1T1vZ75FWUrzc6Ss.
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/plain
access-control-allow-origin: https://www.eskytravel.it
access-control-allow-credentials: true
x-envoy-upstream-service-time: 13
content-encoding: gzip
content-length: 353
vary: Accept-Encoding
expires: Tue, 17 Oct 2023 08:30:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:31 GMT
set-cookie: FPID=FPID2.2.4SB8vxYZhZL9IWOFmTJAGH6hat92E8mMxrenM8mAbR8%3D.1697531432; Max-Age=63072000; Domain=eskytravel.it; Path=/; Secure; HttpOnly
FPLC=vY01c5H303BmG8pyH5%2Fb4hJ6AJgE%2FPh5RLvIZ2CCM1bGToqiCbtFASSxhcY7G60%2FyQaZkIHEULxVXcrYeade3Nn7a1JZDqkI4VDo8vc04QpbR6HXU4BFRolLelWTTQ%3D%3D; Max-Age=72000; Domain=eskytravel.it; Path=/; Secure
FPGSID=1.1697531431.1697531431.G-HHES4LMH8M.IOnlWpr9h91cZJjmZf3obQ; Max-Age=1800; Domain=eskytravel.it; Path=/; SameSite=strict; Secure
bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaOfdBzmLAQAAIQzCPBXJklI+g8a/cHAT3ApjHQyUro4f2roMcp88pObHfAZCVN//7fZ53B/+MBildaBN+1kg6cOTZ8dQyKHvZ6huGnrRO3AAlgtptUNY7v9w7saK1eDAgc4cHqsLQqQHNXbvKuw8zhKhUK2k5DQ+FZfc33aPmU/JXcC2EqKcMSgix4VkGJwoUxleSegiBT0WPD2O3iPs3YTv5Zqx8akgaBtoIXWSU4w+5Hg/aGiKAW4IqeZ8~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:29 GMT; Max-Age=7198; Secure
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET perun.ipresso.pl/perun/4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU./xT9LqL69W8-JeaiVrkhYPiRuvZbEiAcFjiVbFpbKgvk./?i=&ia=IaSD9dQzJ_zSyIl5xOTb4yRCV8Q1T1vZ75FWUrzc6Ss.&d=1697531432343&r=&s=https%3A%2F%2Fwww.eskytravel.it%2F
200 OK 20 B URL
perun.ipresso.pl/perun/4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU./xT9LqL69W8-JeaiVrkhYPiRuvZbEiAcFjiVbFpbKgvk./?i=&ia=IaSD9dQzJ_zSyIl5xOTb4yRCV8Q1T1vZ75FWUrzc6Ss.&d=1697531432343&r=&s=https%3A%2F%2Fwww.eskytravel.it%2F
IP / ASN
93.179.224.106
#31242 3S S.A.
Requested by https://www.eskytravel.it/
Resource Info
File type gzip compressed data, from Unix\012- data
First Seen 2023-04-09
Last Seen 2025-03-02
Times Seen 229342
Size 20 B (20 bytes)
MD5 7029066c27ac6f5ef18d660d5741979a
SHA1 46c6643f07aa7f6bfe7118de926b86defc5087c4
SHA256 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Certificate Info
Issuer DigiCert Inc
Subject *.ipresso.pl
Fingerprint 94:07:D4:53:07:91:00:D6:51:95:36:4F:FB:71:7F:A2:AE:97:8B:02
Validity Wed, 31 May 2023 00:00:00 GMT - Thu, 30 May 2024 23:59:59 GMT
GET /perun/4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU./xT9LqL69W8-JeaiVrkhYPiRuvZbEiAcFjiVbFpbKgvk./?i=&ia=IaSD9dQzJ_zSyIl5xOTb4yRCV8Q1T1vZ75FWUrzc6Ss.&d=1697531432343&r=&s=https%3A%2F%2Fwww.eskytravel.it%2F HTTP/1.1
Host: perun.ipresso.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
Access-Control-Allow-Headers: origin, content-type, accept
Access-Control-Allow-Origin: *
Cache-Control: no-cache, private
Date: Tue, 17 Oct 2023 08:30:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
content-length: 20
2.1 kB IP / ASN
192.124.249.24
#30148 SUCURI-SEC
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 2.1 kB (2108 bytes)
MD5 6bda4e890db80b676b2190d9ad16c852
SHA1 c50bc9eb47c8578117c0c6115fb007d228c996fd
SHA256 9bb6f07d2afa6743cb0eeaadc400b3cb76c5eda74955ded9c98c29d62cb7317d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 17 Oct 2023 08:30:31 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 16 Oct 2023 19:15:06 GMT
Expires: Tue, 17 Oct 2023 19:15:06 GMT
ETag: "c50bc9eb47c8578117c0c6115fb007d228c996fd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
2.1 kB IP / ASN
192.124.249.24
#30148 SUCURI-SEC
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 2.1 kB (2108 bytes)
MD5 6bda4e890db80b676b2190d9ad16c852
SHA1 c50bc9eb47c8578117c0c6115fb007d228c996fd
SHA256 9bb6f07d2afa6743cb0eeaadc400b3cb76c5eda74955ded9c98c29d62cb7317d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 17 Oct 2023 08:30:31 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 16 Oct 2023 19:15:06 GMT
Expires: Tue, 17 Oct 2023 19:15:06 GMT
ETag: "c50bc9eb47c8578117c0c6115fb007d228c996fd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
GET etm.eskytravel.it/g/collect?v=2&tid=G-6RMQ2VTF3Z>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.ngs=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_ss=1&ep.user_data._tag_mode=MANUAL&up.referrer_short=&tfd=5334&richsstsse
200 OK 90 B URL
etm.eskytravel.it/g/collect?v=2&tid=G-6RMQ2VTF3Z>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.ngs=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_ss=1&ep.user_data._tag_mode=MANUAL&up.referrer_short=&tfd=5334&richsstsse
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-04-07
Last Seen 2025-08-02
Times Seen 7252
Size 90 B (90 bytes)
MD5 83a02fe42f8c2198e7c608aff363aa49
SHA1 7b20ae1014450492cc708e3c9dc7522b05c2effd
SHA256 e64954dc34e12c7190cc2338a54b07644ff0f102aa71cc7209bcbb49c3009f7c
Certificate Info
Issuer Let's Encrypt
Subject etm.esky.com
Fingerprint 16:50:36:B2:50:A8:C6:D5:F7:24:E6:39:4A:AE:1C:4F:0D:13:E7:FA
Validity Fri, 06 Oct 2023 10:28:46 GMT - Thu, 04 Jan 2024 10:28:45 GMT
GET /g/collect?v=2&tid=G-6RMQ2VTF3Z>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.ngs=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_ss=1&ep.user_data._tag_mode=MANUAL&up.referrer_short=&tfd=5334&richsstsse HTTP/1.1
Host: etm.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; esky_TCSI=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; _ga_HHES4LMH8M=GS1.1.1697531432.1.0.1697531432.0.0.0; _ga=GA1.1.615350220.1697531432; _ga_N9CRQD0ZQC=GS1.1.1697531432.1.0.1697531432.0.0.0; _ga_6RMQ2VTF3Z=GS1.1.1697531432.1.0.1697531432.0.0.0; __ipcan_4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU.=IaSD9dQzJ_zSyIl5xOTb4yRCV8Q1T1vZ75FWUrzc6Ss.
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/plain
access-control-allow-origin: https://www.eskytravel.it
access-control-allow-credentials: true
x-envoy-upstream-service-time: 30
content-encoding: gzip
content-length: 90
vary: Accept-Encoding
expires: Tue, 17 Oct 2023 08:30:32 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:32 GMT
set-cookie: FPID=FPID2.2.4SB8vxYZhZL9IWOFmTJAGH6hat92E8mMxrenM8mAbR8%3D.1697531432; Max-Age=63072000; Domain=eskytravel.it; Path=/; Secure; HttpOnly
FPLC=feEZtsiBt5Y7xaUnWEcTE4wqimfUslkT%2B%2FHHWbPKX%2F7l32P4pQx8qQy7J3T2kp1JUfhvwK3TURu7jWNuZxSN%2B9ftM9nlGrG%2BjLsSDCEfbOoQ5%2FD%2F05tF6aNt%2BjGhCQ%3D%3D; Max-Age=72000; Domain=eskytravel.it; Path=/; Secure
bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaOrdBzmLAQAAVwzCPBWixMEb8U0t/byWadyDfAg7xv8pxxyPNd74eHVKNEKvbqplPPhuOrKuFY5rVMVcQQdzKOstsL7D3j1ahHoIwh22HqGHbUpzg9idGdeywRJznxpd6x2320MPg1EAZ/Q8sK+ss+K56jvseXAUoSeI6r2SKqRfnqLxJUN7ox1Tctdi5WIFjTbGvMnUCAeDeGarddj3M7bmOD4THoRneWVX4dIOVp/3QocEtLW9tWO5X+Yc~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:29 GMT; Max-Age=7197; Secure
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET etm.eskytravel.it/g/collect?v=2&tid=G-N9CRQD0ZQC>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_ss=1&ep.user_data._tag_mode=MANUAL&up.referrer_short=&tfd=5265&richsstsse
200 OK 375 B URL
etm.eskytravel.it/g/collect?v=2&tid=G-N9CRQD0ZQC>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_ss=1&ep.user_data._tag_mode=MANUAL&up.referrer_short=&tfd=5265&richsstsse
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 375 B (375 bytes)
MD5 61f58b9fbd89af5984ba8c2d72ff95b8
SHA1 bd5ebeb90b77e12b4d85e9f7354756c992a7b48c
SHA256 6858d6545c65d1c5b06749b1a02931741a69319afc8b5b29e4871c174fd61a99
Certificate Info
Issuer Let's Encrypt
Subject etm.esky.com
Fingerprint 16:50:36:B2:50:A8:C6:D5:F7:24:E6:39:4A:AE:1C:4F:0D:13:E7:FA
Validity Fri, 06 Oct 2023 10:28:46 GMT - Thu, 04 Jan 2024 10:28:45 GMT
GET /g/collect?v=2&tid=G-N9CRQD0ZQC>m=45je3ab0&_p=1361410490&gcs=G111&gdid=dOThhZD&cid=615350220.1697531432&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=NO-03&_eu=EA&sst.uc=NO&sst.rnd=1939654419.1697531432&sst.gse=1&sst.etld=google.no&sst.gcsub=region1&sst.gcd=G100&sst.tft=1697531428372&_s=1&sid=1697531432&sct=1&seg=0&dl=https%3A%2F%2Fwww.eskytravel.it%2F&dt=eSkyTravel.it%20-%20Biglietti%20aerei%2C%20City%20Break%2C%20Vacanze&en=page_view&_fv=1&_ss=1&ep.user_data._tag_mode=MANUAL&up.referrer_short=&tfd=5265&richsstsse HTTP/1.1
Host: etm.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~YAAQnphUaH/dBzmLAQAA/QPCPBVeZDnnKZ4tJsMW6VMnybwwaqelfv3rq3/9w7HqX4JQQXPyoH4yJQtoSifMZn381eSHjylZo1krUBMNYXoTP/DOMxGcRR4ZiDp4hWA7f1rSQdJ5iY+CS0cVjSAhqKWdyV5Nplk2CCvkoPJ2WV+3vsE9SpDuyGUt+oq2dAfPc6RW7UVUCA+XTEW0/MkkCrqfJ8xJYErMTdpvOsXvLOyl6Weq8+otJI1vXmDG/enN0Qv6WDN7A8hpJd2pV2eAKTGayxkD/mwkZ1Seb+O2PeLjOc8Hm8EokmDx35FCZwy5AlpjBM4yMLcVJY7nKZyLe9Htn3LjLhtbrDj6eNV7aMpLRuq6PL7qZn9BL5HSReTcjxyv8qbThrI0poIhJbE6LzDbeBGEIDLXqfgVOHBIVHn1449eLO6KtflaegTQxgfgn2HxuAbg54seEeCLCnf6YRTHIwdH1klHaoe47gAPHiI4CjPa43bbLoxcIiYjnEXCamITiqkrOT01Zrktl3XC1U5lo+J3xR/EHMeIYOgoWA==; esky_TCSI=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; _ga_HHES4LMH8M=GS1.1.1697531432.1.0.1697531432.0.0.0; _ga=GA1.1.615350220.1697531432; _ga_N9CRQD0ZQC=GS1.1.1697531432.1.0.1697531432.0.0.0; _ga_6RMQ2VTF3Z=GS1.1.1697531432.1.0.1697531432.0.0.0; __ipcan_4T2slX6L15OPjdtbX6HJqkwatnyCW_m7tMnHTnwlFGU.=IaSD9dQzJ_zSyIl5xOTb4yRCV8Q1T1vZ75FWUrzc6Ss.
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/plain
access-control-allow-origin: https://www.eskytravel.it
access-control-allow-credentials: true
x-envoy-upstream-service-time: 37
content-encoding: gzip
content-length: 375
vary: Accept-Encoding
expires: Tue, 17 Oct 2023 08:30:32 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:32 GMT
set-cookie: FPID=FPID2.2.4SB8vxYZhZL9IWOFmTJAGH6hat92E8mMxrenM8mAbR8%3D.1697531432; Max-Age=63072000; Domain=eskytravel.it; Path=/; Secure; HttpOnly
FPLC=T%2BBriFa9pWkrPJYLSCylk6m%2Fa%2FDk3oer9AF2ZXEsFNtd7OeJpoH5LbDxWeyluuMBY%2FpNrtSG8DdsM3yTV%2BXK2kXwnI3NCtWW%2F1LRdmLalwoIQDkCGsJHxDThlIOTDA%3D%3D; Max-Age=72000; Domain=eskytravel.it; Path=/; Secure
FPGSID=1.1697531431.1697531431.G-N9CRQD0ZQC.5GlymFuTVJkZVSAYFOixkg; Max-Age=1800; Domain=eskytravel.it; Path=/; SameSite=strict; Secure
bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaOjdBzmLAQAARAzCPBVvwVhjcp2CSiOD6nSE6IxHSgjB2uchPb7eJhxvs4Xcl4CRsfeST6Zyw4waSDQv7TR4kHeic8PIWsf6eYTC029pYZXw/BPhB/QU5iSXUcc5x8Rq3kbH4wI/cqXXFkzhThgukff8pAjj771Vu0wAcUW3W0LPsugqArw34rc9aM4ftKBtors21OY1yhJkZMaIQA42iW9oHFe907xpbSuzCN8YEfBU4T7q0dI3H9/98HBY~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:29 GMT; Max-Age=7197; Secure
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET lib.wtg-ads.com/publisher/www.eskytravel.it/standard.publisher.config.min.js
200 OK 8.4 kB URL
lib.wtg-ads.com/publisher/www.eskytravel.it/standard.publisher.config.min.js
IP / ASN
172.67.70.115
#13335 CLOUDFLARENET
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (18922), with CRLF line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 8.4 kB (8380 bytes)
MD5 0638f4e65fa920872fc681d8f83a3d6d
SHA1 99b1876a3ab2ebd8058e0f6c4136de76a7980880
SHA256 d40b0d22826c2c81c9aa91d69a22645694502fcfd09f0c6b7baeeef3c77bab8c
Certificate Info
Issuer Cloudflare, Inc.
Subject sni.cloudflaressl.com
Fingerprint AD:7F:C0:D4:8D:E7:2B:EC:E3:EC:17:71:03:6B:DF:EF:0C:14:DB:91
Validity Sat, 29 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
GET /publisher/www.eskytravel.it/standard.publisher.config.min.js HTTP/1.1
Host: lib.wtg-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 03 Aug 2023 10:11:39 GMT
etag: W/"64cb7d5b-6ee6"
expires: Sun, 24 Sep 2023 22:25:53 GMT
cache-control: max-age=10800
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-max-age: 1728000
cf-cache-status: HIT
age: 1947878
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uYc2xJhwGkcn08UobuSOLwad15X%2Fza7Tu0R2SM32FF9sszBRPl%2F%2BPOqyXa9MEIDC2OddPAlwMV%2Bp0rOBwfoxrfArzI0napzWo5w0qnBuRfatw32FCxe8qmxfUaNjbN2qoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81772e180b4f5690-OSL
content-encoding: br
X-Firefox-Spdy: h2
POST sdk.adara.com/api
200 OK 16 B IP / ASN
34.102.191.167
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with no line terminators
First Seen 2023-04-06
Last Seen 2025-08-02
Times Seen 4076
Size 16 B (16 bytes)
MD5 ba518e7bb13f1b9d72a0569a52fc2832
SHA1 331078cb830b731e900eca7c6fcbe0a7b885305a
SHA256 fb1bf528d8237aac3e9ead389ab246ba0068f61fe281610110937ef2b8adefce
Certificate Info
Issuer GoDaddy.com, Inc.
Subject *.adara.com
Fingerprint 3B:15:93:8C:A6:98:EA:31:5F:F0:C9:27:32:99:2B:B8:CA:3B:74:53
Validity Wed, 31 May 2023 14:22:44 GMT - Mon, 01 Jul 2024 14:22:44 GMT
POST /api HTTP/1.1
Host: sdk.adara.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
X-Adara-Key: NzM1ZTdmYWQtMjE2Yi00MTMwLTk1OGUtZjNmNjQ0NDdkYjE4
Content-Type: text/plain;charset=UTF-8
Content-Length: 434
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Adara-Key
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
date: Tue, 17 Oct 2023 08:30:32 GMT
content-length: 16
content-type: text/plain; charset=utf-8
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20231017
200 OK 914 B URL
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20231017
IP / ASN
151.101.1.229
#54113 FASTLY
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with very long lines (1596), with no line terminators
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 17
Size 914 B (914 bytes)
MD5 0f5eba016163bd8a60cd8a9e1da10495
SHA1 651b99f7f350e6496711dae61a53401e4a3825ac
SHA256 645ffa5e4bd7d2398eb0639ad31670b6d7fb6c873fa2377d544f69388e932b16
Certificate Info
Issuer GlobalSign nv-sa
Subject jsdelivr.net
Fingerprint 05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
Validity Wed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
GET /gh/prebid/currency-file@1/latest.json?date=20231017 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1845
x-jsd-version-type: version
etag: W/"63c-ZRuZ9/NQ5klnEdrmGlNAHko4Jaw"
content-encoding: br
accept-ranges: bytes
date: Tue, 17 Oct 2023 08:30:32 GMT
age: 16179
x-served-by: cache-fra-eddf8230103-FRA, cache-bma1669-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 914
X-Firefox-Spdy: h2
POST prebid.a-mo.net/a/c
204 No Content 0 B IP / ASN
147.75.84.158
#54825 PACKET
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject *.a-mo.net
Fingerprint 5D:67:7D:2D:E3:95:FC:C1:C1:A0:21:79:01:E7:63:2B:B9:29:29:9D
Validity Fri, 06 Oct 2023 13:41:28 GMT - Thu, 04 Jan 2024 13:41:27 GMT
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1353
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://www.eskytravel.it
cache-control: max-age=0, private, must-revalidate
date: Tue, 17 Oct 2023 08:30:31 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
POST ssp.wp.pl/bidder/?bdver=5.8&pbver=7.51.0&inver=0
204 No Content 0 B URL
ssp.wp.pl/bidder/?bdver=5.8&pbver=7.51.0&inver=0
IP / ASN
212.77.99.29
#12827 Wirtualna Polska Media S.A.
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer DigiCert Inc
Subject *.wp.pl
Fingerprint C7:39:94:AB:7C:39:DA:34:4E:66:CF:5D:29:1B:19:46:92:6E:42:8C
Validity Thu, 09 Mar 2023 00:00:00 GMT - Thu, 14 Mar 2024 23:59:59 GMT
POST /bidder/?bdver=5.8&pbver=7.51.0&inver=0 HTTP/1.1
Host: ssp.wp.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 744
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Tue, 17 Oct 2023 08:30:32 GMT
accept-ch: device-memory, dpr, width, viewport-width, rtt, downlink, ect
accept-ch-lifetime: 604800
access-control-allow-credentials: true
access-control-allow-origin: https://www.eskytravel.it
vary: Origin
X-Firefox-Spdy: h2
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 482
Size 472 B (472 bytes)
MD5 67b43384673fc96151b4a4dc9418f6b5
SHA1 e236786cd2d630195cf2f27459d2ac8238fde9bf
SHA256 914f341e2a78062c490c502336a2991b337136fed970f4515e1fd3950a550b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 482
Size 472 B (472 bytes)
MD5 67b43384673fc96151b4a4dc9418f6b5
SHA1 e236786cd2d630195cf2f27459d2ac8238fde9bf
SHA256 914f341e2a78062c490c502336a2991b337136fed970f4515e1fd3950a550b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET bat.bing.com/bat.js
200 OK 13 kB IP / ASN
204.79.197.200
#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.eskytravel.it/
Resource Info
File type Unicode text, UTF-8 text, with very long lines (45268), with no line terminators
First Seen 2023-10-14
Last Seen 2024-08-21
Times Seen 1943
Size 13 kB (12978 bytes)
MD5 e40b427011f00b406d7409132b0f259b
SHA1 d45d537ae9b8b7b1679c0dc153dfc0d642271d75
SHA256 a7006c9765b3997f8d2ff41cc0560fe325677b74d57c26084c958431d2325574
Certificate Info
Issuer Microsoft Corporation
Subject www.bing.com
Fingerprint CD:30:E8:F8:D2:A7:C2:85:A1:F7:A2:2E:B6:B3:FD:F9:08:FA:31:D1
Validity Wed, 26 Jul 2023 23:57:23 GMT - Mon, 22 Jan 2024 23:57:23 GMT
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 12978
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 12 Oct 2023 17:36:49 GMT
accept-ranges: bytes
etag: "808ec9ad32fdd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FD41A254080C478B85E9F144517C1308 Ref B: OSL30EDGE0409 Ref C: 2023-10-17T08:30:32Z
date: Tue, 17 Oct 2023 08:30:32 GMT
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-N9CRQD0ZQC&cid=615350220.1697531432>m=45j91e3ac0h1&aip=1&z=642390480
200 OK 42 B URL
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-N9CRQD0ZQC&cid=615350220.1697531432>m=45j91e3ac0h1&aip=1&z=642390480
IP / ASN
142.250.74.163
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type GIF image data, version 89a, 1 x 1\012- data
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 320101
Size 42 B (42 bytes)
MD5 d89746888da2d9510b64a9f031eaecd5
SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.no
Fingerprint 48:45:BE:2F:7E:1C:5E:22:C9:20:2A:BC:C6:A6:CD:D1:C4:35:68:65
Validity Mon, 18 Sep 2023 08:27:03 GMT - Mon, 11 Dec 2023 08:27:02 GMT
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-N9CRQD0ZQC&cid=615350220.1697531432>m=45j91e3ac0h1&aip=1&z=642390480 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 17 Oct 2023 08:30:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-HHES4LMH8M&cid=615350220.1697531432>m=45j91e3ac0&aip=1&z=617338127
200 OK 42 B URL
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-HHES4LMH8M&cid=615350220.1697531432>m=45j91e3ac0&aip=1&z=617338127
IP / ASN
142.250.74.163
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type GIF image data, version 89a, 1 x 1\012- data
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 320101
Size 42 B (42 bytes)
MD5 d89746888da2d9510b64a9f031eaecd5
SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.no
Fingerprint 48:45:BE:2F:7E:1C:5E:22:C9:20:2A:BC:C6:A6:CD:D1:C4:35:68:65
Validity Mon, 18 Sep 2023 08:27:03 GMT - Mon, 11 Dec 2023 08:27:02 GMT
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-HHES4LMH8M&cid=615350220.1697531432>m=45j91e3ac0&aip=1&z=617338127 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 17 Oct 2023 08:30:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 482
Size 472 B (472 bytes)
MD5 67b43384673fc96151b4a4dc9418f6b5
SHA1 e236786cd2d630195cf2f27459d2ac8238fde9bf
SHA256 914f341e2a78062c490c502336a2991b337136fed970f4515e1fd3950a550b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET bat.bing.com/action/0?ti=30002521&tm=gtm002&Ver=2&mid=e61ef1a7-8735-4784-93f5-92590d07f907&sid=704db9e06cc711eeb829df7c44b6f6e1&vid=704dade06cc711eeb87e2dbde40eb329&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=eSkyTravel.it%20-%20Biglietti%20aerei,%20City%20Break,%20Vacanze&kw=biglietti%20aerei,%20biglietti%20aerei%20economici,%20prenotazione%20dei%20biglietti%20aerei,%20motore%20di%20ricerca%20dei%20biglietti%20aerei,%20biglietti%20aerei%20economici%20&p=https%3A%2F%2Fwww.eskytravel.it%2F&r=<=3201&evt=pageLoad&sv=1&rn=752109
204 No Content 0 B URL
bat.bing.com/action/0?ti=30002521&tm=gtm002&Ver=2&mid=e61ef1a7-8735-4784-93f5-92590d07f907&sid=704db9e06cc711eeb829df7c44b6f6e1&vid=704dade06cc711eeb87e2dbde40eb329&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=eSkyTravel.it%20-%20Biglietti%20aerei,%20City%20Break,%20Vacanze&kw=biglietti%20aerei,%20biglietti%20aerei%20economici,%20prenotazione%20dei%20biglietti%20aerei,%20motore%20di%20ricerca%20dei%20biglietti%20aerei,%20biglietti%20aerei%20economici%20&p=https%3A%2F%2Fwww.eskytravel.it%2F&r=<=3201&evt=pageLoad&sv=1&rn=752109
IP / ASN
204.79.197.200
#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Microsoft Corporation
Subject www.bing.com
Fingerprint CD:30:E8:F8:D2:A7:C2:85:A1:F7:A2:2E:B6:B3:FD:F9:08:FA:31:D1
Validity Wed, 26 Jul 2023 23:57:23 GMT - Mon, 22 Jan 2024 23:57:23 GMT
GET /action/0?ti=30002521&tm=gtm002&Ver=2&mid=e61ef1a7-8735-4784-93f5-92590d07f907&sid=704db9e06cc711eeb829df7c44b6f6e1&vid=704dade06cc711eeb87e2dbde40eb329&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=eSkyTravel.it%20-%20Biglietti%20aerei,%20City%20Break,%20Vacanze&kw=biglietti%20aerei,%20biglietti%20aerei%20economici,%20prenotazione%20dei%20biglietti%20aerei,%20motore%20di%20ricerca%20dei%20biglietti%20aerei,%20biglietti%20aerei%20economici%20&p=https%3A%2F%2Fwww.eskytravel.it%2F&r=<=3201&evt=pageLoad&sv=1&rn=752109 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=153E6E8288DB6FCF1A777D2F898C6E9A; domain=.bing.com; expires=Sun, 10-Nov-2024 08:30:32 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7DA50F8FBE5C4618917C9C113C280589 Ref B: OSL30EDGE0409 Ref C: 2023-10-17T08:30:32Z
date: Tue, 17 Oct 2023 08:30:32 GMT
X-Firefox-Spdy: h2
GET bat.bing.com/p/action/30002521.js
204 No Content 0 B URL
bat.bing.com/p/action/30002521.js
IP / ASN
204.79.197.200
#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Microsoft Corporation
Subject www.bing.com
Fingerprint CD:30:E8:F8:D2:A7:C2:85:A1:F7:A2:2E:B6:B3:FD:F9:08:FA:31:D1
Validity Wed, 26 Jul 2023 23:57:23 GMT - Mon, 22 Jan 2024 23:57:23 GMT
GET /p/action/30002521.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D96FFE39563F4AA58A912A4A0E8BE7C5 Ref B: OSL30EDGE0409 Ref C: 2023-10-17T08:30:32Z
date: Tue, 17 Oct 2023 08:30:32 GMT
X-Firefox-Spdy: h2
OPTIONS aggregator.service.usercentrics.eu/aggregate/it?templates=175UByuloFcprN@1.0.22,9V8bg4D63@9.6.6,ASds_Gg7tggCSJ@1.0.22,AX2-Du8kHJnXG8@1.0.22,D1mop7XEih8Xwo@1.0.22,EzjdL9yELy3gjZ@1.0.22,HkPBYFofN@10.3.1,Hko_qNsui-Q@14.5.15,HkocEodjb7@52.11.40,Hm50x8nnOzpE6N@1.0.8,S1_9Vsuj-Q@15.7.19,S1pcEj_jZX@21.10.9,Scywjwe3JutCeG@1.0.7,SkEscVsusbX@6.2.1,SkPc5EjOsWm@6.2.1,W-_3rmLYm8dRsZ@1.0.22,XYQZBUojc@9.6.4,dsS7z9Hv4@1.1.3,ekcusj-u4Uarv5@1.0.22,hh14TcFxfBFhH7@1.0.22,kPSiO3GBmKyqp4@1.0.22,ko1w5PpFl@23.12.21,qnhqQoUIF9EZBy@1.0.9,yWa2KEn6sdpSG-@1.0.22
204 No Content 32 kB URL
aggregator.service.usercentrics.eu/aggregate/it?templates=175UByuloFcprN@1.0.22,9V8bg4D63@9.6.6,ASds_Gg7tggCSJ@1.0.22,AX2-Du8kHJnXG8@1.0.22,D1mop7XEih8Xwo@1.0.22,EzjdL9yELy3gjZ@1.0.22,HkPBYFofN@10.3.1,Hko_qNsui-Q@14.5.15,HkocEodjb7@52.11.40,Hm50x8nnOzpE6N@1.0.8,S1_9Vsuj-Q@15.7.19,S1pcEj_jZX@21.10.9,Scywjwe3JutCeG@1.0.7,SkEscVsusbX@6.2.1,SkPc5EjOsWm@6.2.1,W-_3rmLYm8dRsZ@1.0.22,XYQZBUojc@9.6.4,dsS7z9Hv4@1.1.3,ekcusj-u4Uarv5@1.0.22,hh14TcFxfBFhH7@1.0.22,kPSiO3GBmKyqp4@1.0.22,ko1w5PpFl@23.12.21,qnhqQoUIF9EZBy@1.0.9,yWa2KEn6sdpSG-@1.0.22
IP / ASN
34.120.28.121
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (58116), with no line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 32 kB (31560 bytes)
MD5 899c2f8a063290b7f22dfd3fc965f147
SHA1 21799b12c3a2b95cafaa87d34e071dee0f2a321c
SHA256 8df843d53c0ec97dd35abc81558503137f251880ceece696dee086133ca15c89
Certificate Info
Issuer Google Trust Services LLC
Subject aggregator.service.usercentrics.eu
Fingerprint 74:B7:37:78:4E:C9:DC:80:4D:67:9F:4E:A7:D5:22:45:AC:B2:F2:B8
Validity Sat, 23 Sep 2023 15:44:52 GMT - Fri, 22 Dec 2023 16:38:26 GMT
GET /aggregate/it?templates=175UByuloFcprN@1.0.22,9V8bg4D63@9.6.6,ASds_Gg7tggCSJ@1.0.22,AX2-Du8kHJnXG8@1.0.22,D1mop7XEih8Xwo@1.0.22,EzjdL9yELy3gjZ@1.0.22,HkPBYFofN@10.3.1,Hko_qNsui-Q@14.5.15,HkocEodjb7@52.11.40,Hm50x8nnOzpE6N@1.0.8,S1_9Vsuj-Q@15.7.19,S1pcEj_jZX@21.10.9,Scywjwe3JutCeG@1.0.7,SkEscVsusbX@6.2.1,SkPc5EjOsWm@6.2.1,W-_3rmLYm8dRsZ@1.0.22,XYQZBUojc@9.6.4,dsS7z9Hv4@1.1.3,ekcusj-u4Uarv5@1.0.22,hh14TcFxfBFhH7@1.0.22,kPSiO3GBmKyqp4@1.0.22,ko1w5PpFl@23.12.21,qnhqQoUIF9EZBy@1.0.9,yWa2KEn6sdpSG-@1.0.22 HTTP/1.1
Host: aggregator.service.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
content-type: application/json
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, accept-encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
cache-control: public, max-age=604800
etag: "rgsatf"
content-encoding: br
date: Tue, 17 Oct 2023 08:30:30 GMT
server: Google Frontend
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/s/collect?gtm=45j91e3ac0h1&_gsid=N9CRQD0ZQC5GlymFuTVJkZVSAYFOixkg
204 No Content 0 B URL
region1.analytics.google.com/g/s/collect?gtm=45j91e3ac0h1&_gsid=N9CRQD0ZQC5GlymFuTVJkZVSAYFOixkg
IP / ASN
216.239.32.36
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
POST /g/s/collect?gtm=45j91e3ac0h1&_gsid=N9CRQD0ZQC5GlymFuTVJkZVSAYFOixkg HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.eskytravel.it
date: Tue, 17 Oct 2023 08:30:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST sdk.adara.com/api
200 OK 16 B IP / ASN
34.102.191.167
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type JSON data\012- , ASCII text, with no line terminators
First Seen 2023-04-06
Last Seen 2025-08-02
Times Seen 4076
Size 16 B (16 bytes)
MD5 ba518e7bb13f1b9d72a0569a52fc2832
SHA1 331078cb830b731e900eca7c6fcbe0a7b885305a
SHA256 fb1bf528d8237aac3e9ead389ab246ba0068f61fe281610110937ef2b8adefce
Certificate Info
Issuer GoDaddy.com, Inc.
Subject *.adara.com
Fingerprint 3B:15:93:8C:A6:98:EA:31:5F:F0:C9:27:32:99:2B:B8:CA:3B:74:53
Validity Wed, 31 May 2023 14:22:44 GMT - Mon, 01 Jul 2024 14:22:44 GMT
POST /api HTTP/1.1
Host: sdk.adara.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.eskytravel.it/
X-Adara-Key: NzM1ZTdmYWQtMjE2Yi00MTMwLTk1OGUtZjNmNjQ0NDdkYjE4
Content-Type: text/plain;charset=UTF-8
Content-Length: 506
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Adara-Key
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
date: Tue, 17 Oct 2023 08:30:33 GMT
content-length: 16
content-type: text/plain; charset=utf-8
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.1 kB IP / ASN
192.124.249.23
#30148 SUCURI-SEC
Resource Info
File type data
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 2.1 kB (2108 bytes)
MD5 6bda4e890db80b676b2190d9ad16c852
SHA1 c50bc9eb47c8578117c0c6115fb007d228c996fd
SHA256 9bb6f07d2afa6743cb0eeaadc400b3cb76c5eda74955ded9c98c29d62cb7317d
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 17 Oct 2023 08:30:34 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 16 Oct 2023 19:15:06 GMT
Expires: Tue, 17 Oct 2023 19:15:06 GMT
ETag: "c50bc9eb47c8578117c0c6115fb007d228c996fd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
GET lib.wtg-ads.com/prebid/prebid_7.51.0.js
200 OK 140 kB URL
lib.wtg-ads.com/prebid/prebid_7.51.0.js
IP / ASN
172.67.70.115
#13335 CLOUDFLARENET
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (64729)
First Seen 2023-10-17
Last Seen 2023-12-02
Times Seen 3
Size 140 kB (139936 bytes)
MD5 eb5769ae8a33a11ede6007814b6dc60b
SHA1 4fe903347419520cc2e26790033e3a27b8bfa291
SHA256 a410377e6dce51bf660a20980d6f3ad1169e2228a01140a75a629fcd79519d60
Certificate Info
Issuer Cloudflare, Inc.
Subject sni.cloudflaressl.com
Fingerprint AD:7F:C0:D4:8D:E7:2B:EC:E3:EC:17:71:03:6B:DF:EF:0C:14:DB:91
Validity Sat, 29 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
GET /prebid/prebid_7.51.0.js HTTP/1.1
Host: lib.wtg-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 08 Sep 2023 09:33:34 GMT
etag: W/"64faea6e-6f5e2"
expires: Fri, 06 Oct 2023 13:16:16 GMT
cache-control: max-age=10800
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-max-age: 1728000
cf-cache-status: HIT
age: 944055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YrVJNv%2FJ1f%2FTtArwATe1r%2Fm6q0r%2Fpge%2FR6JXIJaxBwEt2GmSWRiVkWEQT7VuFOqGue1BC6H6xc5o91xxS%2BkDkxa9iu7sNo9d7XOs%2F0oGZxFc8eHYB2MOOdx%2BWmZNCQBmxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81772e19ac885690-OSL
content-encoding: br
X-Firefox-Spdy: h2
471 B IP / ASN
142.250.74.131
#15169 GOOGLE
Resource Info
File type data
First Seen 2023-10-16
Last Seen 2023-10-17
Times Seen 1380
Size 471 B (471 bytes)
MD5 92c66a077e2d56a10cb3919ab0fcb616
SHA1 e0b68920b8eace24f3b492aa3c71359479a55c28
SHA256 784f9288b19eb3b1f8608377ce54750ee9a8c1a1309d3f5107af2e7f0a611f6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 17 Oct 2023 08:30:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL
play.google.com/log?format=json&hasfast=true&authuser=0
IP / ASN
142.250.74.14
#15169 GOOGLE
Requested by https://accounts.google.com/gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.com
Fingerprint 09:1E:68:9F:BD:40:4B:47:8D:AC:BE:FE:EF:35:D6:52:C1:A0:EC:9F
Validity Mon, 18 Sep 2023 08:19:26 GMT - Mon, 11 Dec 2023 08:19:25 GMT
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 17 Oct 2023 08:30:40 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+887; expires=Thu, 16-Oct-2025 08:30:40 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 17 Oct 2023 08:30:40 GMT
cache-control: private
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL
play.google.com/log?format=json&hasfast=true&authuser=0
IP / ASN
142.250.74.14
#15169 GOOGLE
Requested by https://accounts.google.com/gsi/iframe/select?client_id=342823845731-pgfhgkrpb92aeldeu3kd48ctj9thniqv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=Eway8eCxIPY%2FxJk5l4Nb4A&is_itp=true&channel_id=a1730159e55df3f4e6c7a9ac66e83bdde2c9c8ca849cf0d3d52f37b31556a76d&origin=https%3A%2F%2Fwww.eskytravel.it
Resource Info
File type JSON data\012- , ASCII text, with no line terminators
First Seen 2023-04-05
Last Seen 2025-08-02
Times Seen 126142
Size 131 B (131 bytes)
MD5 ca0b7e866005f6774d284b9f438ebfd2
SHA1 53644f5ee3640189bdb223473ba6a2d46606c556
SHA256 502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.com
Fingerprint 09:1E:68:9F:BD:40:4B:47:8D:AC:BE:FE:EF:35:D6:52:C1:A0:EC:9F
Validity Mon, 18 Sep 2023 08:19:26 GMT - Mon, 11 Dec 2023 08:19:25 GMT
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 445
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://accounts.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 17 Oct 2023 08:30:40 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+594; expires=Thu, 16-Oct-2025 08:30:40 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 17 Oct 2023 08:30:40 GMT
X-Firefox-Spdy: h2
GET www.eskytravel.it/xstorage.html
200 OK 1.2 kB URL
www.eskytravel.it/xstorage.html
IP / ASN
95.101.10.131
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 1.2 kB (1248 bytes)
MD5 e6f8b1a895e920c691dc5a44e4ce1c06
SHA1 df27c59f63beba34640445f5b4802b6cb86d93b9
SHA256 f0445cddf2608155e4475e2e758692ddba5d8063654039bb0c4315fc8081d164
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
GET /xstorage.html HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
last-modified: Thu, 12 Oct 2023 07:51:07 GMT
x-generated-by: dbr30-b1713
vary: Accept-Encoding
accept-ranges: bytes
server: esky-edge
x-akamai-transformed: 9 - 0 pmb=mTOE,4
content-encoding: gzip
expires: Tue, 17 Oct 2023 08:30:45 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 17 Oct 2023 08:30:45 GMT
content-length: 1248
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
set-cookie: ak_bmsc=88AA5D3B8125DFBCEE60392924B3F6E5~000000000000000000000000000000~YAAQfwplXwmy+TOLAQAAykHCPBV2YzqRziZmhpqUMOSkDl2dbUM7lymTDEdl/Ft6NG+j73WWIK3/8ItvOPQ+Xblm2annXeE1/XZOVVUvng6khkgAo2A/n0okD4nEiUYbCp5wjONLxeFkRJNSt/+9f7UNPWVJOmT6dhEiXYsfJUSPXiD0wz5cZeLpv7lw0mQOCrmMFVFhns1CARY/fFwoZfuO4u2jeQgGKnIS1MhEv9ttjnc2RpCxl8gILMdzoc/V98Zs8Dhbva9N32GSjxZ5hrfNq9cLx+6+2fV4u7L05wpKnLg8G0fTHHvtUXoiUuu99JU83MpZcXwoewKXJPzm1HSkh7ooFMHXRB6emM8HSj5V4sjiKXdDXsQcs4f9B/elZDRnuIrymP4S; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 10:30:45 GMT; Max-Age=7200; HttpOnly
bm_mi=39856F9D76A8D7981B0BD396EACCDDE3~YAAQfwplXwqy+TOLAQAAykHCPBWfVUwlIuVQFoaEWHwReVMSKkI1eewwnp1II8KuMME00HSxs9pdUyVgtQp+/RnTCfriUOKEQDPk2jn3h0Q5gEJLLJKk/xQTiWRD3DWaUKn/HYWp8XUdxa8ptV/vN0ZtQldNIcD72uVKYrrUHBIEgu8Vl3s9jFhO6vSWO7lTPB3ftPj3Nohkt/BrI1AtT5WsPBe6fmoMVW0lj4MtCS6CKxUACMYYdIOylt2Rl79waIZ7BlDSRI5jB472B3Lx77X++NE0Jxq07F4cXnyl4o7UREAu8xVZF354UsfhPE++8MldknGFMEAvg774lzY=~1; Domain=.eskytravel.it; Path=/; Expires=Tue, 17 Oct 2023 08:30:45 GMT; Max-Age=0; Secure
X-Firefox-Spdy: h2
GET lib.wtg-ads.com/publisher/www.eskytravel.it/main.publisher.config.min.js
200 OK 22 kB URL
lib.wtg-ads.com/publisher/www.eskytravel.it/main.publisher.config.min.js
IP / ASN
172.67.70.115
#13335 CLOUDFLARENET
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (18922), with CRLF line terminators
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 22 kB (21765 bytes)
MD5 130491b2d887ba60e3798f25de8d1487
SHA1 9822f090753eb4beb23b4091ce617cd19dd45810
SHA256 bc31cce2a5e940789422f0dbea85f5c6d729c09b415f4e85c0b2f5ae85e5f659
Certificate Info
Issuer Cloudflare, Inc.
Subject sni.cloudflaressl.com
Fingerprint AD:7F:C0:D4:8D:E7:2B:EC:E3:EC:17:71:03:6B:DF:EF:0C:14:DB:91
Validity Sat, 29 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
GET /publisher/www.eskytravel.it/main.publisher.config.min.js HTTP/1.1
Host: lib.wtg-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 14 Jun 2023 13:07:47 GMT
etag: W/"6489bba3-5505"
expires: Sun, 01 Oct 2023 10:02:30 GMT
cache-control: max-age=10800
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-max-age: 1728000
cf-cache-status: HIT
age: 1387681
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cTjuD7XwtOMmBOjLctpjDNhoKcxFO8YbyHvhCXMzHQP8Pvgpeq6dB%2BydBAlxutaXcSocepf7w1ndrOA6ZMb3%2BOoEu45f8kuEhLwFklsNzwEOGzPhI3efYv9e9y0i%2FpX6kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81772e188b985690-OSL
content-encoding: br
X-Firefox-Spdy: h2
POST www.eskytravel.it/_fe/log
204 No Content 0 B URL
www.eskytravel.it/_fe/log
IP / ASN
104.84.152.162
#20940 Akamai International B.V.
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Let's Encrypt
Subject zalando.esky.pl
Fingerprint 14:80:7A:2B:C7:49:69:F2:18:6E:DE:31:22:F9:25:64:8E:89:A1:6D
Validity Mon, 09 Oct 2023 04:24:24 GMT - Sun, 07 Jan 2024 04:24:23 GMT
POST /_fe/log HTTP/1.1
Host: www.eskytravel.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 192
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Cookie: ak_bmsc=AF0DD5B654E9A560406ABE968EE32E15~000000000000000000000000000000~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; firstTimeVisit=202310170830; uguid=066bf1329b612e43aecebfcefa1b4778080ae6f2; esky_TCSI=WZSQ1697531428840; newUser=WZSQ1697531428840; esky_TCSIS=ZIZOZ1697531428843; MasterId=5e6424fc-dfd0-5667-9a4d-3fb7a2893ab0; esky_TCTTIStart=1697531429093; _gcl_au=1.1.881208613.1697531430; bm_mi=50EC526CD8D83D9347A290D606C86ACD~YAAQnphUaE7dBzmLAQAAtgDCPBVFxAm43WOF1csb/LNaqQ9CTEHpVNfFiNCuvbMZMDTmyc3ptaTvFonaffT0SGL8bLn+b52ubn1dzFa+EQ3frCxl0UPNfhTklYWd0BiFmyuNoIU0DIKGbxQdbJpP5Fg5rYevQjJ38VSphvnx3aWTSye47w39PQs0flQt+5gfWs2KoZXbZs8eph1ZmHQ2X67T9gQSi2k0t00sZ46k4WwIXr1F9Xvop6r1HZsbxvVWY00HZH0SwFLZhmOuNdeJOQDKncb6gG7ZjHgP+s29rAXa7pFakVzlt5vjz9xQexG9Bn+ZQvbRkJJWxelsEPc=~1; bm_sv=424D4D6EE66002A5AAEED884763FA197~YAAQnphUaGLdBzmLAQAAswHCPBX3f1/gwKVPnxCJWzmNkrLeExLOuX5IXClGMAaofrjoc9q5yr2C5o6G1+9tpTVEatVEP+WrUdB+D5GQIU91ZvmAMFP53x7g2gL4f5k8Apcaqv/GPCzi2vMii8oIcoZzua6cLSDjJqRoqG4e2CNUFUvWlZkf0YZAEGS+ETl5Womb7driZwQWB8BugLEU9NZ+5gkp2EFVIb2gLdRIpBRswvaOJvaLxJ8NvzrYOU4CbEVN~1; mes_referrer=; lux_uid=169753142977580886; UniqueUserId=8a3e6252496427b80d0527c5983ed0d0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
x-powered-by: Express
access-control-allow-origin: *
x-envoy-upstream-service-time: 0
server: esky-edge
date: Tue, 17 Oct 2023 08:30:30 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload;
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
GET static1.eskypartners.com/deals/MXP_0_SquareSmall_290_290.jpg
0 B URL
static1.eskypartners.com/deals/MXP_0_SquareSmall_290_290.jpg
IP / ASN
0.0.0.0
#0
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
GET /deals/MXP_0_SquareSmall_290_290.jpg HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
date: Fri, 06 Oct 2023 15:48:23 GMT
last-modified: Mon, 01 Feb 2016 08:05:28 GMT
etag: W/"56af11c8-530b"
expires: Sun, 05 Nov 2023 15:48:23 GMT
cache-control: max-age=2592000
content-encoding: gzip
server: esky-edge
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: saRsLwTdmBOBZignJAEdvkFeZu08nxsN5f1NUnUl4bQixRMxXedjIQ==
age: 924125
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-NH83QL6
200 OK 535 kB URL
www.googletagmanager.com/gtm.js?id=GTM-NH83QL6
IP / ASN
142.250.74.72
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (65316)
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 535 kB (535016 bytes)
MD5 daeddd10fcf398309432294e88ecf1da
SHA1 0f93ca3a80ee255ab0d8a3e65ad58ddd525ce3f7
SHA256 1974f78a36eb74cae3550ecd2d06612044f1a31d8d95c89077ce666dce54b07b
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
GET /gtm.js?id=GTM-NH83QL6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 17 Oct 2023 08:30:29 GMT
expires: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: private, max-age=900
last-modified: Tue, 17 Oct 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 124561
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST mp.4dex.io/prebid
200 OK 60 B IP / ASN
104.18.2.114
#13335 CLOUDFLARENET
Requested by https://www.eskytravel.it/
Resource Info
File type troff or preprocessor input, ASCII text, with no line terminators
First Seen 2023-07-15
Last Seen 2025-03-31
Times Seen 645
Size 60 B (60 bytes)
MD5 a1884f600d7fc4b248d48992e08cbcc9
SHA1 0c1d2c3753339249da9c28a4941ad7271fda0bef
SHA256 24a9b895cda57aea260bce4c6ef89964ee518f931a019d068f5dfb0500244f18
Certificate Info
Issuer Cloudflare, Inc.
Subject sni.cloudflaressl.com
Fingerprint 02:E1:92:C5:72:6D:E0:64:4A:46:05:69:81:98:7C:43:13:E7:15:7A
Validity Tue, 01 Aug 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2373
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Oct 2023 08:30:32 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://www.eskytravel.it
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
x-version: 3.0.0-gcp-ams
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 81772e1bd82e568a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET static1.eskypartners.com/deals/TFS_0_SquareSmall_290_290.jpg
0 B URL
static1.eskypartners.com/deals/TFS_0_SquareSmall_290_290.jpg
IP / ASN
0.0.0.0
#0
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
GET /deals/TFS_0_SquareSmall_290_290.jpg HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
date: Fri, 22 Sep 2023 08:53:06 GMT
last-modified: Mon, 01 Feb 2016 08:06:12 GMT
etag: W/"56af11f4-5852"
expires: Sun, 22 Oct 2023 08:53:06 GMT
cache-control: max-age=2592000
content-encoding: gzip
server: esky-edge
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: h7ctbm5FUkaFMFXvsUpXhv9KhMi_FQxF2cpqCRW0mwF2nB1ppJb1CQ==
age: 2158642
X-Firefox-Spdy: h2
GET static1.eskypartners.com/deals/CDG_0_SquareSmall_290_290.jpg
0 B URL
static1.eskypartners.com/deals/CDG_0_SquareSmall_290_290.jpg
IP / ASN
0.0.0.0
#0
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
GET /deals/CDG_0_SquareSmall_290_290.jpg HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Mon, 01 Feb 2016 08:04:33 GMT
content-encoding: gzip
server: esky-edge
timing-allow-origin: *
date: Wed, 27 Sep 2023 07:13:28 GMT
expires: Fri, 27 Oct 2023 07:13:28 GMT
cache-control: max-age=2592000
etag: W/"56af1191-58e1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gvawwswWNZ0KTrwXCe8N9BTu2zSjMgVldTdcacOTgfEavFH352WKCg==
age: 1732620
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/s/collect?gtm=45j91e3ac0&_gsid=HHES4LMH8MIOnlWpr9h91cZJjmZf3obQ
204 No Content 0 B URL
region1.analytics.google.com/g/s/collect?gtm=45j91e3ac0&_gsid=HHES4LMH8MIOnlWpr9h91cZJjmZf3obQ
IP / ASN
216.239.32.36
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject *.google-analytics.com
Fingerprint 54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F
Validity Mon, 18 Sep 2023 08:19:25 GMT - Mon, 11 Dec 2023 08:19:24 GMT
POST /g/s/collect?gtm=45j91e3ac0&_gsid=HHES4LMH8MIOnlWpr9h91cZJjmZf3obQ HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.eskytravel.it
date: Tue, 17 Oct 2023 08:30:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/gsi/style
200 OK 530 B URL
accounts.google.com/gsi/style
IP / ASN
142.250.74.109
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text, with very long lines (530), with no line terminators
First Seen 2023-04-05
Last Seen 2025-05-28
Times Seen 16082
Size 530 B (530 bytes)
MD5 6ce3c682ce6b9e0b88670395a63345c8
SHA1 8cbfc0856a52320e3567792dfe2487748ac07458
SHA256 524f1ea2ac242c6fae3c1cc52c7ae7d05a8a7db466fe3c7b46e8efcfc2d95e53
Certificate Info
Issuer Google Trust Services LLC
Subject *.google.com
Fingerprint 09:1E:68:9F:BD:40:4B:47:8D:AC:BE:FE:EF:35:D6:52:C1:A0:EC:9F
Validity Mon, 18 Sep 2023 08:19:26 GMT - Mon, 11 Dec 2023 08:19:25 GMT
GET /gsi/style HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
expires: Tue, 17 Oct 2023 08:30:29 GMT
date: Tue, 17 Oct 2023 08:30:29 GMT
cache-control: private, max-age=86400
content-security-policy: script-src 'nonce-9rovYlHRTTVbRi-NZy8Ufg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET lib.wtg-ads.com/lib.min.js
200 OK 106 kB URL
lib.wtg-ads.com/lib.min.js
IP / ASN
172.67.70.115
#13335 CLOUDFLARENET
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 106 kB (105941 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Cloudflare, Inc.
Subject sni.cloudflaressl.com
Fingerprint AD:7F:C0:D4:8D:E7:2B:EC:E3:EC:17:71:03:6B:DF:EF:0C:14:DB:91
Validity Sat, 29 Apr 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
GET /lib.min.js HTTP/1.1
Host: lib.wtg-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Oct 2023 08:30:31 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 27 Sep 2023 09:31:05 GMT
etag: W/"6513f659-19dd5"
expires: Wed, 27 Sep 2023 12:31:07 GMT
cache-control: max-age=10800
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-max-age: 1728000
cf-cache-status: HIT
age: 1724364
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bCvBzZBAmQnMzpEHBXoqISc6xPNVN%2FZyX51NHZFhrUvgg9exeA3nHyo9mWHEF0FiRJZ4hmdG2LuJHyJAMEUNDqlJjr7gA5pcT6iw3f9wd5Q5rSdwVMJywFXjiYw99vN04A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81772e15a95c5690-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET api.usercentrics.eu/tcf2/it.json
200 OK 32 kB URL
api.usercentrics.eu/tcf2/it.json
IP / ASN
35.241.3.184
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 32 kB (31690 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject api.usercentrics.eu
Fingerprint E0:69:F2:00:86:A0:49:8A:70:7A:5A:9F:D3:9D:91:BE:CD:F6:FC:70
Validity Fri, 06 Oct 2023 15:24:06 GMT - Thu, 04 Jan 2024 16:17:40 GMT
GET /tcf2/it.json HTTP/1.1
Host: api.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.eskytravel.it
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
x-guploader-uploadid: ABPtcPrFFy9DGygZtLd1grwzKbII4n0Imi-qwnT_VMW0X9gzeWKSUj_VhKgaEn5D9_81sUR5hebt0Tykia-i7r-JlryQgA
x-goog-generation: 1697158810131406
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4656
content-encoding: gzip
x-goog-hash: crc32c=d20Uug==, md5=qUfhs7LT/dG36HwwvmPLdw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4656
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Tue, 17 Oct 2023 06:40:34 GMT
expires: Tue, 17 Oct 2023 08:40:34 GMT
cache-control: public, max-age=7200, s-maxage=7200, no-transform
age: 6596
last-modified: Fri, 13 Oct 2023 01:00:10 GMT
etag: "a947e1b3b2d3fdd1b7e87c30be63cb77"
content-type: application/json
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET static1.eskypartners.com/deals/PMO_0_Rectangle_610_290.jpg
0 B URL
static1.eskypartners.com/deals/PMO_0_Rectangle_610_290.jpg
IP / ASN
0.0.0.0
#0
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Unizeto Technologies S.A.
Subject static1.eskypartners.com
Fingerprint DB:F2:47:33:77:84:B8:12:15:2F:41:CE:48:60:60:AA:8E:98:98:C6
Validity Thu, 29 Jun 2023 10:11:19 GMT - Fri, 28 Jun 2024 10:11:18 GMT
GET /deals/PMO_0_Rectangle_610_290.jpg HTTP/1.1
Host: static1.eskypartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
date: Wed, 27 Sep 2023 08:39:12 GMT
last-modified: Mon, 01 Feb 2016 08:05:52 GMT
etag: W/"56af11e0-9583"
expires: Fri, 27 Oct 2023 08:39:12 GMT
cache-control: max-age=2592000
content-encoding: gzip
server: esky-edge
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dknugPHaw9GecFpqy9RG_ZTDwuNiS62V3JmPxdL0ionT4sGAHAyvcw==
age: 1727476
X-Firefox-Spdy: h2
GET app.usercentrics.eu/session/1px.png?settingsId=toPQAH6Zg5mF0T
0 B URL
app.usercentrics.eu/session/1px.png?settingsId=toPQAH6Zg5mF0T
IP / ASN
0.0.0.0
#0
Requested by https://www.eskytravel.it/
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5608794
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services LLC
Subject app.usercentrics.eu
Fingerprint 99:06:DB:64:04:F1:88:13:E7:21:61:37:41:D5:CD:73:09:E9:CB:91
Validity Sun, 08 Oct 2023 13:40:47 GMT - Sat, 06 Jan 2024 14:35:01 GMT
GET /session/1px.png?settingsId=toPQAH6Zg5mF0T HTTP/1.1
Host: app.usercentrics.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
x-guploader-uploadid: ADPycdtcgirfKwQ_SZVCCNGX02B_JUzhJ6zWmgUzkjWXklFM_wIXRP0GtPwPgkz_TaAT8fXas4jHieXGHdKUvNsF4x44
x-goog-generation: 1588928773413784
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 522
content-encoding: gzip
x-goog-hash: crc32c=pFwm0Q==, md5=NwKtpzuJUQF7hFHL1qllIw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 522
server: UploadServer
date: Tue, 17 Oct 2023 08:18:22 GMT
expires: Tue, 17 Oct 2023 08:48:22 GMT
cache-control: public,max-age=1800,no-transform
age: 728
last-modified: Fri, 08 May 2020 09:06:13 GMT
etag: "3702ada73b8951017b8451cbd6a96523"
content-type: image/png
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.googleapis.com/css?family=Ubuntu:300,700|Noto+Sans:400,700|Source+Code+Pro:400,700&subset=latin,cyrillic-ext,latin-ext&display=swap
200 OK 14 kB URL
fonts.googleapis.com/css?family=Ubuntu:300,700|Noto+Sans:400,700|Source+Code+Pro:400,700&subset=latin,cyrillic-ext,latin-ext&display=swap
IP / ASN
142.250.74.106
#15169 GOOGLE
Requested by https://www.eskytravel.it/
Resource Info
File type ASCII text
First Seen 2023-10-17
Last Seen 2023-10-17
Times Seen 1
Size 14 kB (14022 bytes)
MD5 a13f3306f21e214d4693240be7bab044
SHA1 cc5b511d54864e52bf4e3f3fdf166f0a04b9b208
SHA256 868e1fa958a4c65afc6a1aa1ff79d864e255374368be624b7ab6812531cffa02
Certificate Info
Issuer Google Trust Services LLC
Subject upload.video.google.com
Fingerprint 73:C0:B4:AB:41:0A:6A:68:D4:AE:EE:E2:11:A4:38:23:EF:D2:86:B7
Validity Mon, 18 Sep 2023 08:25:07 GMT - Mon, 11 Dec 2023 08:25:06 GMT
GET /css?family=Ubuntu:300,700|Noto+Sans:400,700|Source+Code+Pro:400,700&subset=latin,cyrillic-ext,latin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.eskytravel.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 17 Oct 2023 08:30:27 GMT
date: Tue, 17 Oct 2023 08:30:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
