HTTP/1.1 200 OK
Date: Thu, 13 Mar 2025 04:25:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Set-Cookie: AppSessionId=IBE-GulfAir-20250313042504-4b3022d6-defc-4e6a-b29a-7df967d5ecd1; path=/; secure; samesite=none; httponly
Set-Cookie: UserId=df9ec657-fec2-4c1a-a413-26de03f1b6ae; expires=Tue, 13 Mar 2035 04:25:04 GMT; domain=gfholidays.gulfair.com; path=/
Set-Cookie: OriginGeo_CountryISOCode=US; expires=Fri, 14 Mar 2025 04:25:04 GMT; domain=; path=/
Set-Cookie: UserId=f89fbbf5-a9b7-4e12-9624-0276082eb138; expires=Tue, 13 Mar 2035 04:25:04 GMT; domain=gfholidays.gulfair.com; path=/
Set-Cookie: UserId=b7137275-e589-4db0-ac4f-c2cfa23eb763; expires=Tue, 13 Mar 2035 04:25:04 GMT; domain=gfholidays.gulfair.com; path=/
Set-Cookie: UserId=4b8566b2-73e4-4ffb-9702-69eb12fd4112; expires=Tue, 13 Mar 2035 04:25:04 GMT; domain=gfholidays.gulfair.com; path=/
Set-Cookie: OriginGeo_CountryISOCode=US; expires=Fri, 14 Mar 2025 04:25:04 GMT; domain=; path=/
Set-Cookie: UserId=2307aa4f-5c97-4a34-a874-6523566047d6; expires=Tue, 13 Mar 2035 04:25:04 GMT; domain=gfholidays.gulfair.com; path=/
Set-Cookie: .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; samesite=lax; httponly
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Permissions-Policy: geolocation=(self), microphone=()
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self' https://rum.browser-intake-datadoghq.eu https://browser-intake-datadoghq.eu https://sdk.fra-01.braze.eu https://js.appboycdn.com https://*.ablyft.com https://feedback.informizely.com https://region1.analytics.google.com https://analytics.google.com https://www.emjcd.com https://api.boxever.com https://api-engage-eu.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://cdn.jsdelivr.net https://q.stripe.com https://unpkg.com https://code.jquery.com https://www.clarity.ms https://*.creativecdn.com https://analytic https://*.facebook.com https://www.mczbf.com https://*.tiktok.com https://*.optimonk.com https://*.snapchat.com https://*.browser-intake-datadoghq.eu https://*.hellobar.com https://*.hellobar.com https://*.hdpp-tui.com https://*.fw-cdn.com https://*.googleapis.com https://src.freshmarketer.in https://*.google-analytics.com https://*.adyen.com https://stats.g.doubleclick.ne.com; frame-src 'self' https://*.doubleclick.net https://www.googletagmanager.com https://api-engage-eu.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://api.boxever.com https://cms.staging.hdpp-tui.com https://tr.snapchat.com https://asia.creativecdn.com https://*.stripe.com https://*.adyen.com https://storage.googleapis.com https://www.tripadvisor.com https://www.google.com https://*.boxever.com https://*.sitecorecloud.io https://*.cloudfront.net https://*.doubleclick.net https://www.googletagmanager.com https://api-engage-eu.sitecorecloud.io https://d1mj578wat5n4o.cloudfront.net https://api.boxever.com https://cms.staging.hdpp-tui.com https://tr.snapchat.com https://asia.creativecdn.com https://*.stripe.com https://*.adyen.com https://storage.googleapis.com https://www.tripadvisor.com https://www.google.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.appboycdn.com https://*.ablyft.com https://cdn.jsdelivr.net https://q.stripe.com https://unpkg.com https://code.jquery.com https://*.creativecdn.com https://www.googleadservices.com https://*.trackjs.com https://www.google.de https://*.optimonk.com https://*.snapchat.com https://polyfill.io https://sc-static.net https://connect.facebook.net https://onsite.optimonk.com https://www.redditstatic.com https://www.mczbf.com https://analytics.tiktok.com https://googleads.g.doubleclick.net https://www.google.com https://*.stripe.com https://*.datadoghq-browser-agent.com https://*.browser-intake-datadoghq.eu https://*.hellobar.com https://*.hdpp-tui.com https://*.fw-cdn.com https://insitez.blob.core.windows.net https://feedback.informizely.com https://tui1-org.myfreshworks.com https://*.2c2p.com https://*.goquo.io https://*.cloudfront.net https://*.staging.hdpp-tui.com https://api.boxever.com https://malaysiaairlines.demdex.net https://www.google-analytics.com https://storage.googleapis.com https://mpsnare.iesnare.com https://pixel.everesttech.net https://www.googletagmanager.com https://assets.adobedtm.com https://*.googleapis.com https://*.staging.goquo.io https://*.goquo.com ;style-src 'self' 'unsafe-inline' https://cdn-asset.optimonk.com https://cdn.jsdelivr.net https://q.stripe.com https://unpkg.com https://code.jquery.com https://cdn.hdpp-tui.com http://*.cloudfront.net https://*.staging.hdpp-tui.com https://*.goquo.io https://*.adyen.com https://fonts.googleapis.com https://storage.googleapis.com;font-src 'self' https://cdn.hdpp-tui.com https://cdn.jsdelivr.net https://q.stripe.com https://unpkg.com https://code.jquery.com http://*.cloudfront.net https://*.staging.hdpp-tui.com https://*.goquo.io https://themes.googleusercontent.com https://storage.googleapis.com https://fonts.gstatic.com;object-src 'none'; img-src 'self' https: data: http:; report-uri https://csp-report.browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pubb952ecf17ce6ec000cf493bbacdf631a&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Ahdpp-agoda-shared-production%2Cenv%3Aprod; worker-src blob:
Vary: Origin
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:39:4a:27:00:d2:09:1c:8a:c1:2f:47:02:9a:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
Validity
Not Before: Sep 19 10:30:30 2024 GMT
Not After : Oct 18 10:30:29 2025 GMT
Subject: C=BH, L=Muharraq, O=Gulf Air BSC, CN=gfholidays.gulfair.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c4:f8:58:b6:53:16:aa:13:00:9d:c9:b2:c7:e1:
69:d8:3a:c3:3d:e1:4e:f5:2a:c2:b1:a5:b4:93:0b:
4a:29:3a:f1:44:58:b7:38:3c:26:2b:bf:c0:00:60:
56:33:f8:77:a3:9c:60:13:15:30:88:4b:c0:e1:9e:
ac:1d:24:3f:63:ca:4d:32:95:b8:1e:4d:1c:cd:0b:
c2:7e:aa:43:72:5e:6d:27:8f:68:6e:51:50:32:e1:
7a:de:45:6e:20:11:8a:13:b1:ff:05:1b:38:e7:c0:
3a:60:2f:4e:85:ca:e9:bb:14:b8:9f:fe:23:9a:76:
eb:d4:3a:6c:a0:c1:7d:68:2e:01:28:a1:77:d1:c1:
a2:16:62:97:9f:86:37:ec:08:bf:92:a3:28:12:3f:
51:2a:b1:94:92:74:2e:ca:62:ec:1f:53:18:49:0b:
20:31:01:09:be:a4:5e:08:57:bc:ba:d4:32:e8:a2:
f5:cf:b9:14:12:c1:61:48:07:f6:1b:92:67:40:2b:
4d:0a:65:bc:f8:0a:55:f4:4f:8a:31:1b:f2:3f:ba:
01:4f:6c:a7:07:44:43:56:31:7c:43:b9:f7:75:f4:
75:69:4f:35:bd:9d:74:e0:5b:19:1d:c2:b2:6b:87:
a0:fb:5f:e5:47:c2:8f:8b:4f:b3:6d:6a:12:45:6f:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
D5:76:CE:D2:14:A9:98:85:0B:2B:93:D4:42:E1:8B:8F:B7:A1:A7:C8
X509v3 Authority Key Identifier:
82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
Authority Information Access:
OCSP - URI:http://ocsp.entrust.net
CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.entrust.net/level1k.crl
X509v3 Subject Alternative Name:
DNS:gfholidays.gulfair.com
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
Timestamp : Sep 19 10:30:30.979 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:88:74:60:A3:FA:22:01:FC:6A:F3:81:
5F:EF:C5:5B:40:3F:CC:D2:99:26:09:F4:9E:EB:1E:6A:
E4:1E:13:ED:41:02:20:7E:8F:6F:63:7E:A3:AA:C4:5A:
66:88:72:F4:98:D3:C6:84:65:C8:46:14:E3:46:54:F7:
E1:31:06:5A:D3:D6:7B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
Timestamp : Sep 19 10:30:31.036 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:BD:B4:EF:DB:76:74:CC:98:2E:77:79:
FF:30:D6:EB:46:60:43:D9:8F:11:47:B7:D4:85:FA:48:
BC:2D:1C:A6:69:02:21:00:8C:59:45:E5:0D:F7:62:C3:
27:4D:46:A3:EB:81:49:58:96:61:FB:A2:86:80:2E:B5:
6C:0C:D4:42:EE:29:EC:1A
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Sep 19 10:30:31.080 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:96:C1:1D:25:61:D4:DD:B9:6D:00:7D:
44:FC:2B:FB:90:00:47:BD:FA:C8:4C:C6:A1:1E:68:34:
59:41:C3:F1:29:02:21:00:AE:D8:4B:DE:36:58:0A:34:
19:2B:96:77:18:83:74:75:5B:EB:6A:CC:E0:69:C7:14:
3E:16:91:83:1E:1C:86:6C
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
9d:85:6b:4b:13:89:23:c0:f5:ce:22:f3:ea:92:c2:a4:88:b9:
fe:a7:5c:83:2c:a1:ac:4d:0f:29:6d:26:1e:91:08:20:68:2f:
d1:33:45:ac:b5:d2:b8:9d:80:d9:63:3f:e2:56:26:1e:4a:76:
ba:28:34:0b:99:7d:a7:4b:38:74:d1:38:7e:72:f5:fc:ec:6c:
59:72:cc:6d:08:ec:2c:7f:cc:f2:8d:3c:a3:0d:51:0e:62:68:
ed:21:b9:8e:b4:e8:f4:a2:31:bc:28:50:86:b1:cd:7a:2a:13:
03:c2:30:19:d8:38:e6:50:73:bb:d1:89:33:92:a1:87:59:06:
33:9a:18:88:a5:83:77:63:95:20:86:6c:fa:4f:da:d9:fb:d7:
6b:27:37:d9:4f:5a:a4:c7:6a:40:f2:20:66:61:85:43:7e:34:
01:cd:c7:99:83:21:26:88:aa:75:88:c8:30:4f:2c:a0:3a:24:
52:5e:3e:8b:57:36:cc:20:29:8d:f3:67:b9:19:b8:94:4c:77:
68:bd:06:4d:02:e9:b6:49:cf:6f:6b:c7:38:1e:82:d4:b0:41:
44:24:a3:f2:f9:d0:e6:e2:d3:6b:4f:47:e1:c3:1e:68:8f:e2:
8e:fe:fa:05:79:f3:f9:c8:ed:ae:03:4a:ca:8b:e4:0e:07:9c:
f3:0d:c9:bd