English

euconsent

consent

gdpr_consent

esky_TCSIS

cookieconsent_status

MasterId

esky_TCSI

lux_uid

_iPresso_idAnonymous_blE5MVZBPT1v5KOJwvS_eQiIjRzzGbeI

sjrn_ccid

__ipcan_sisswEr98xAma6Lq6phG6dc-UG5wVxiibxDf-9ETrQ4.

_ga_ZLQK3JJ7WD

The domain 'www.thomascook.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The registrable portion 'thomascook' spans 10 characters holding 4 vowels versus six consonants. Tokenizing the label suggests 2 words: thomas, cook. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

default-src * 'unsafe-inline' data:; img-src * 'unsafe-inline' 'unsafe-eval' data:; script-src  'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.wpengine.com *.bootstrapcdn.com *.twitter.com *.jquery.com *.fontawesome.com *.google.com *.pinterest.com *.gstatic.com *.uploadlibrary.com *.thomascook.com *.hotjar.com *.imi.chat *.adyen.com *.spendology.io *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.google.co.uk *.google.com.ua *.direct.ingenico.com cc-cdn.com *.google.nl *.appsflyer.com *.freshchat.com *.btttag.com *.euc-freshbots.ai *.trustpilot.com *.cookielaw.org *.worldline-solutions.com https://embed.typeform.com/next/embed.js https://tgtag.io *.bing.com *.clarity.ms *.tiktok.com https://www.awin1.com *.reflow.tv https://apps.mypurecloud.de *.ada.support https://cdn.speedcurve.com *.ipresso.pl *.usercentrics.eu *.travelaudience.com *.sojern.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.wpengine.com *.bootstrapcdn.com *.imi.chat *.adyen.com *.spendology.io *.thomascook.com *.google.com *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.freshchat.com *.euc-freshbots.ai *.typeform.com *.typekit.net; font-src 'self' data: *.googleapis.com *.adyen.com *.gstatic.com *.wpengine.com *.imi.chat *.spendology.io *.thomascook.com https://script.hotjar.com *.bootstrapcdn.com *.typekit.net; object-src 'self' *.adyen.com;  frame-src 'self' data: *.facebook.com https://platform.twitter.com *.google.com *.hotjar.com *.imi.chat *.adyen.com *.vimeo.com *.youtube.com *.doubleclick.net *.thomascook.io *.youtu.be *.googlesyndication.com https://www.covidchecker.com *.direct.ingenico.com *.modirum.com *.thomascook.com *.freshchat.com *.euc-freshbots.ai *.trustpilot.com *.cardinalcommerce.com *.braintreegateway.com *.braintree-api.com *.rsa3dsauth.co.uk *.arcot.com *.mycardsecure.com *.monzo.com *.capitalone.com *.touch.tech *.wibmo.com *.mncbank.co.id *.typeform.com *.revolut.com *.sparkassen-kreditkarten.de *.swedbank.se *.wlp-acs.com *.rabobank.nl *.tsys.co.uk *.marqeta.com *.viseca.ch *.apata.io *.redsys.es *.edb.com *.asseco-see.hr *.mashreq.com *.cm-cic.com *.monext.fr *.garanti.com.tr https://apps.mypurecloud.de *.ada.support *.googletagmanager.com *.appspot.com *.usercentrics.eu; form-action * 'self' 'unsafe-inline' 'unsafe-eval' *.adyen.com *.thomascook.io *.thomascook.com;

default-src * 'unsafe-inline' data:; img-src * 'unsafe-inline' 'unsafe-eval' data:; script-src  'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.wpengine.com *.bootstrapcdn.com *.twitter.com *.jquery.com *.fontawesome.com *.google.com *.pinterest.com *.gstatic.com *.uploadlibrary.com *.thomascook.com *.hotjar.com *.imi.chat *.adyen.com *.spendology.io *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.google.co.uk *.google.com.ua *.direct.ingenico.com cc-cdn.com *.google.nl *.appsflyer.com *.freshchat.com *.btttag.com *.euc-freshbots.ai *.trustpilot.com *.cookielaw.org *.worldline-solutions.com https://embed.typeform.com/next/embed.js https://tgtag.io *.bing.com *.clarity.ms *.tiktok.com https://www.awin1.com *.reflow.tv https://apps.mypurecloud.de *.ada.support https://cdn.speedcurve.com *.ipresso.pl *.usercentrics.eu *.travelaudience.com *.joinsherpa.io; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.wpengine.com *.bootstrapcdn.com *.imi.chat *.adyen.com *.spendology.io *.thomascook.com *.google.com *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.freshchat.com *.euc-freshbots.ai *.typeform.com *.typekit.net *.joinsherpa.io; font-src 'self' data: *.googleapis.com *.adyen.com *.gstatic.com *.wpengine.com *.imi.chat *.spendology.io *.thomascook.com https://script.hotjar.com *.bootstrapcdn.com *.typekit.net; object-src 'self' *.adyen.com;  frame-src 'self' data: *.facebook.com https://platform.twitter.com *.google.com *.hotjar.com *.imi.chat *.adyen.com *.vimeo.com *.youtube.com *.doubleclick.net *.thomascook.io *.youtu.be *.googlesyndication.com https://www.covidchecker.com *.direct.ingenico.com *.modirum.com *.thomascook.com *.freshchat.com *.euc-freshbots.ai *.trustpilot.com *.cardinalcommerce.com *.braintreegateway.com *.braintree-api.com *.rsa3dsauth.co.uk *.arcot.com *.mycardsecure.com *.monzo.com *.capitalone.com *.touch.tech *.wibmo.com *.mncbank.co.id *.typeform.com *.revolut.com *.sparkassen-kreditkarten.de *.swedbank.se *.wlp-acs.com *.rabobank.nl *.tsys.co.uk *.marqeta.com *.viseca.ch *.apata.io *.redsys.es *.edb.com *.asseco-see.hr *.mashreq.com *.cm-cic.com *.monext.fr *.garanti.com.tr https://apps.mypurecloud.de *.ada.support *.googletagmanager.com *.appspot.com *.usercentrics.eu *.joinsherpa.io; form-action * 'self' 'unsafe-inline' 'unsafe-eval' *.adyen.com *.thomascook.io *.thomascook.com;

default-src * 'unsafe-inline' data:; img-src * 'unsafe-inline' 'unsafe-eval' data:; script-src  'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.wpengine.com *.bootstrapcdn.com *.twitter.com *.jquery.com *.fontawesome.com *.google.com *.pinterest.com *.gstatic.com *.uploadlibrary.com *.thomascook.com *.hotjar.com *.imi.chat *.adyen.com *.spendology.io *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.google.co.uk *.google.com.ua *.direct.ingenico.com cc-cdn.com *.google.nl *.appsflyer.com *.freshchat.com *.btttag.com *.euc-freshbots.ai *.trustpilot.com *.cookielaw.org *.worldline-solutions.com https://embed.typeform.com/next/embed.js https://tgtag.io *.bing.com *.clarity.ms *.tiktok.com https://www.awin1.com *.reflow.tv https://apps.mypurecloud.de *.ada.support https://cdn.speedcurve.com *.ipresso.pl *.usercentrics.eu *.travelaudience.com *.joinsherpa.io *.sojern.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.wpengine.com *.bootstrapcdn.com *.imi.chat *.adyen.com *.spendology.io *.thomascook.com *.google.com *.webtrends-optimize.com *.azurewebsites.net *.webtrends.com *.optimize.com *.freshchat.com *.euc-freshbots.ai *.typeform.com *.typekit.net *.joinsherpa.io; font-src 'self' data: *.googleapis.com *.adyen.com *.gstatic.com *.wpengine.com *.imi.chat *.spendology.io *.thomascook.com https://script.hotjar.com *.bootstrapcdn.com *.typekit.net; object-src 'self' *.adyen.com;  frame-src 'self' data: *.facebook.com https://platform.twitter.com *.google.com *.hotjar.com *.imi.chat *.adyen.com *.vimeo.com *.youtube.com *.doubleclick.net *.thomascook.io *.youtu.be *.googlesyndication.com https://www.covidchecker.com *.direct.ingenico.com *.modirum.com *.thomascook.com *.freshchat.com *.euc-freshbots.ai *.trustpilot.com *.cardinalcommerce.com *.braintreegateway.com *.braintree-api.com *.rsa3dsauth.co.uk *.arcot.com *.mycardsecure.com *.monzo.com *.capitalone.com *.touch.tech *.wibmo.com *.mncbank.co.id *.typeform.com *.revolut.com *.sparkassen-kreditkarten.de *.swedbank.se *.wlp-acs.com *.rabobank.nl *.tsys.co.uk *.marqeta.com *.viseca.ch *.apata.io *.redsys.es *.edb.com *.asseco-see.hr *.mashreq.com *.cm-cic.com *.monext.fr *.garanti.com.tr https://apps.mypurecloud.de *.ada.support *.googletagmanager.com *.appspot.com *.usercentrics.eu *.joinsherpa.io; form-action * 'self' 'unsafe-inline' 'unsafe-eval' *.adyen.com *.thomascook.io *.thomascook.com;

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

attachment; filename="KSPSecureTrustAccount.svg"

e57f8e3a19d89cc9dc02e8e02bb5a1e77de5d0a77d04fc9c80844a7983a5882c

05d37fcd0c44f7577eb8f88821398f131d2791c65c5ac5c61fbfda5331dc30ba

893a65de4d2b0c33c7d2cd6514d4b8edb44e33dc02f8a2a56ac48e0039fd90bf

fb6baf19e5e2caf05f9cfb19f9c43e07405f5f7c85699ae623f44ec88030e2cb

abb7098c3a8d3b67b52f9525b6f2752e1be760def22578063bb6fa87dc642f5a

a90c673aca2ea2b4ed6a92f5651e58759eb751423764a7ee26310f58dec15bbd

765d0a7482c60f4da9a9cf7b11bc62adbdb1f0dfaa0eab0b4482811cff01bdea

e97b9a5c1d98589a44c450884f66eb8a857f466fcdb18580f6e92086d0ab7816

bf83705a7a26103da979b97db45f1a9017ce6f435c2b2df589d054dc3a2a7bac

f6877d8ba139e4012839706b65453aa9ea0e22a972ba3bf51631f50eead4b70f

98705de177becf271c123bef291f33f79a3f8de439c67f14f7d6d3f0c95336b6

f78c0a265506fb73a408f61a039228352993e6fdad9f2576d902c524638ca2dc

e78250e426e3915faafb36d76fcf86bd43a28dc5591a5a204557721e9413dfbf

b342fa29f2222e18bd0c7d3cbdb15237b0bc5eb4b511b1ef27fe04beca7145c5

eb804d2797d30cdc8e0419b863b2e856ffa607823b25ef6a15d88c8096582afb

05c67f552831d2f791e553ad2d35221943c54d71c38cd3c79e5499fc0cad61bf

dde4a6aacc6b9dd9653232e94d90fadc47e2600f8675fc5bca3f7facbaacab5e

eaf132dbe235903e6611127fe5c6e0eec2dd2c1ce2ee69324882f8d93be20224

9233240373e4db9bc14376698b45b97ffbe48c3cc75e1abac8074fa7c9eb0c1e

viewport

Want to go to USA in December and don't know what clothes to pack? Visit our holiday weather guide and check out the weather!

description

og:type

og:title

og:description

https://www.thomascook.com/holidays/weather/usa/december/

og:url

og:site_name

https://cdn.thomascook.com/tcweath-content/uploads/2016/01/usa1-min.jpg

twitter:card

twitter:title

twitter:description

twitter:image

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Nom-iq Ltd. dba COM LAUDE

THOMASCOOK.COM

NOC United States

ipadmin

Akamai Technologies, Inc.

Steven Jay Schecter

AKAMAI

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
              new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
              j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
              'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
              })(window,document,'script','dataLayer','GTM-MV8Z4W4');

LUX=(function(){var a=("undefined"!==typeof(LUX)&&"undefined"!==typeof(LUX.gaMarks)?LUX.gaMarks:[]);var d=("undefined"!==typeof(LUX)&&"undefined"!==typeof(LUX.gaMeasures)?LUX.gaMeasures:[]);var j="LUX_start";var k=window.performance;var l=("undefined"!==typeof(LUX)&&LUX.ns?LUX.ns:(Date.now?Date.now():+(new Date())));if(k&&k.timing&&k.timing.navigationStart){l=k.timing.navigationStart}function f(){if(k&&k.now){return k.now()}var o=Date.now?Date.now():+(new Date());return o-l}function b(n){if(k){if(k.mark){return k.mark(n)}else{if(k.webkitMark){return k.webkitMark(n)}}}a.push({name:n,entryType:"mark",startTime:f(),duration:0});return}function m(p,t,n){if("undefined"===typeof(t)&&h(j)){t=j}if(k){if(k.measure){if(t){if(n){return k.measure(p,t,n)}else{return k.measure(p,t)}}else{return k.measure(p)}}else{if(k.webkitMeasure){return k.webkitMeasure(p,t,n)}}}var r=0,o=f();if(t){var s=h(t);if(s){r=s.startTime}else{if(k&&k.timing&&k.timing[t]){r=k.timing[t]-k.timing.navigationStart}else{return}}}if(n){var q=h(n);if(q){o=q.startTime}else{if(k&&k.timing&&k.timing[n]){o=k.timing[n]-k.timing.navigationStart}else{return}}}d.push({name:p,entryType:"measure",startTime:r,duration:(o-r)});return}function h(n){return c(n,g())}function c(p,o){for(i=o.length-1;i>=0;i--){var n=o[i];if(p===n.name){return n}}return undefined}function g(){if(k){if(k.getEntriesByType){return k.getEntriesByType("mark")}else{if(k.webkitGetEntriesByType){return k.webkitGetEntriesByType("mark")}}}return a}return{mark:b,measure:m,gaMarks:a,gaMeasures:d}})();LUX.ns=(Date.now?Date.now():+(new Date()));LUX.ac=[];LUX.cmd=function(a){LUX.ac.push(a)};LUX.init=function(){LUX.cmd(["init"])};LUX.send=function(){LUX.cmd(["send"])};LUX.addData=function(a,b){LUX.cmd(["addData",a,b])};LUX_ae=[];window.addEventListener("error",function(a){LUX_ae.push(a)});LUX_al=[];if("function"===typeof(PerformanceObserver)&&"function"===typeof(PerformanceLongTaskTiming)){var LongTaskObserver=new PerformanceObserver(function(c){var b=c.getEntries();for(var a=0;a<b.length;a++){var d=b[a];LUX_al.push(d)}});try{LongTaskObserver.observe({type:["longtask"]})}catch(e){}};

LUX.samplerate = (function (p, s) { try { return Math.max.apply(null, String(s).split(';').map(function (v, i) { return i === 0 ? ['*', v] : v.split(':'); }).map(function (a) { return [new RegExp('^' + a[0].replace(/\*/g, '.*').replace(/\+/g, '\$&'), 'i'), parseInt(a[1], 10) ]; }).filter(function (a) { return a[0].test(p); }).map(function (a) { return a[1]; })) || void 0 } catch(e) { return; }; })(location.pathname, '20');

{"props":{"header":"\n\n\u003c!-- cms:page content=\"website:/uk/sharedWidgets/CMSHEADER-BASIC\" dialog=\"thomascook:pages/shared\" --\u003e\n\u003c!-- /cms:page --\u003e\n\n\u003cdiv class=\"tc-share

window.sjn=window.sjn||function(){(sjn.q=sjn.q||[]).push(arguments)};sjn("initAndFire","partner","1PRDxxqus4h4yjgt","homePage",{context:{vertical:"vacation"},params:{}});

Requests	IP Address	Location	AS Autonomous System
97	23.36.162.196	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
15	92.123.104.64	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
8	23.53.42.250	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	34.149.254.14	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
4	107.178.244.119	United States	AS396982GOOGLE-CLOUD-PLATFORM
3	142.250.186.131	United States	AS15169GOOGLE
3	172.217.18.8	United States	AS15169GOOGLE
2	92.123.104.23	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	104.126.37.128	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	92.123.104.11	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
160	57	-	-

Security Scan Report: www.thomascook.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History