firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 07:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: F9zw3TP6aKNNqUcjs3tWtOokeX2Rl_BcczsK2cIUdfVXopaeq23jjg==
Age: 3516
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4467
Expires: Wed, 28 Sep 2022 09:28:42 GMT
Date: Wed, 28 Sep 2022 08:14:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fg4eNyaD8JJyGYtYSGxxw0YoztXVr9Mf1tAqfMFlLg9njfuOfZ_Saw==
age: 82202
X-Firefox-Spdy: h2
saladosjogos.com/mtm/direct/.eJxtikEOwjAMBP_iY4lqjlDEW5AV3CYoqUPiSpEQf6_hiLjN7swLthphAgQHVJdmaFR55srVRlAtE2KjRHdpD1mkjV6yNUGa3lbKbNUfTd5zUXPKXTFoTo5KSdGTRlmxf55D_31zujyvx_HsBhy-dIL3DnquNys:1ocGHw:kKy1NWB045NStjF8nvmjAeT38FE/2
302 Found 0 B URL HTTP/1.1 saladosjogos.com/mtm/direct/.eJxtikEOwjAMBP_iY4lqjlDEW5AV3CYoqUPiSpEQf6_hiLjN7swLthphAgQHVJdmaFR55srVRlAtE2KjRHdpD1mkjV6yNUGa3lbKbNUfTd5zUXPKXTFoTo5KSdGTRlmxf55D_31zujyvx_HsBhy-dIL3DnquNys:1ocGHw:kKy1NWB045NStjF8nvmjAeT38FE/2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /mtm/direct/.eJxtikEOwjAMBP_iY4lqjlDEW5AV3CYoqUPiSpEQf6_hiLjN7swLthphAgQHVJdmaFR55srVRlAtE2KjRHdpD1mkjV6yNUGa3lbKbNUfTd5zUXPKXTFoTo5KSdGTRlmxf55D_31zujyvx_HsBhy-dIL3DnquNys:1ocGHw:kKy1NWB045NStjF8nvmjAeT38FE/2 HTTP/1.1
Host: saladosjogos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Wed, 28 Sep 2022 08:14:15 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJzYWxhZG9zam9nb3MuY29tIiwiaHR0cDovL3d3dzEuc2FsYWRvc2pvZ29zLmNvbS8_dG09MSZzdWJpZDQ9MTY2NDM1Mjg1NS4wMjM3ODgwMDAwJmt3PWZyZWUrZ3JhcGhpYytzeW1ib2xzJktXMT1PbmxpbmUlMjBUZXh0JTIwTWFuaXB1bGF0aW9uJTIwVG9vbHMmS1cyPUN1c3RvbSUyMEZvbnQlMjBEZXNpZ24mS1czPUZvbnQlMjBNYW5hZ2VtZW50JktXND1DdXN0b20lMjBMb2dvJTIwRGVzaWduJnNlYXJjaGJveD0wJmRvbWFpbm5hbWU9MCZiYWNrZmlsbD0wIiwxLCIyMDIyLTA5LTI4IDA4OjE0OjE1IiwxLCIxNjY0MzUyODU1LjAyMzc4ODAwMDAiLDE2MCxudWxsLG51bGxd:1odSCt:GBUHBsoZFOaTd1e-QVitxyNtnAg; expires=Wed, 28-Sep-2022 09:14:15 GMT; Max-Age=3600; Path=/
connection: close
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 08:14:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 07:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 08:18:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: s5x8AR5ZC5k7UgHd8wlB5pqNDeFUMx3uoBtAM726RybUUKCRcDSfhA==
Age: 2683
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5752
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:16 GMT
Last-Modified: Wed, 28 Sep 2022 06:38:24 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
200 OK 2.5 kB URL HTTP/1.1 www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2210)
Hash dedfec2aa2df830143f7113b38eb336d
99b0d1a88260d4c5706febd7980ac9ce4b1e63e2
9857de70d4ec1ccb886ac2544679cee7ddce615459773b02af8a4346294b94dd
GET /?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0 HTTP/1.1
Host: www1.saladosjogos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
200 OK 1.1 kB URL HTTP/1.1 d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (506)
Hash 64b79b43df8fbf2c5d082964b9116a68
dc3c763519baf0f4c32bb60bfc429651a491ea01
c57e9feec209e3ea5eb1d75a1ba6fa277242a3df250055be8446052b51e58637
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.saladosjogos.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1134
Connection: keep-alive
Server: nginx
Date: Tue, 27 Sep 2022 09:14:30 GMT
Last-Modified: Tue, 17 Aug 2021 09:17:22 GMT
Accept-Ranges: bytes
ETag: "611b7ea2-46e"
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7zSScbnWDgoxJhavZimfdhU075zn_cI-XIqSfuNuzfZecvjEB3pB9A==
Age: 82786
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ii89aMfbP2yARHHOTavtTw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tRDHozu3Nsawo74EPN4I/YoA3CE=
www1.saladosjogos.com/track.php?domain=saladosjogos.com&toggle=browserjs&uid=MTY2NDM1Mjg1Ni4zMzc5OjE5YzE4NGI3MGYwZmM1M2E1NzcxZjBhNDI1NTc2YmRhZjhiNGRmNzU1N2Q5OWMzMWYwZGNhNGNlYjYwYjMxZjU6NjMzNDAyNTg1MjdjYw%3D%3D
200 OK 20 B URL HTTP/1.1 www1.saladosjogos.com/track.php?domain=saladosjogos.com&toggle=browserjs&uid=MTY2NDM1Mjg1Ni4zMzc5OjE5YzE4NGI3MGYwZmM1M2E1NzcxZjBhNDI1NTc2YmRhZjhiNGRmNzU1N2Q5OWMzMWYwZGNhNGNlYjYwYjMxZjU6NjMzNDAyNTg1MjdjYw%3D%3D
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=saladosjogos.com&toggle=browserjs&uid=MTY2NDM1Mjg1Ni4zMzc5OjE5YzE4NGI3MGYwZmM1M2E1NzcxZjBhNDI1NTc2YmRhZjhiNGRmNzU1N2Q5OWMzMWYwZGNhNGNlYjYwYjMxZjU6NjMzNDAyNTg1MjdjYw%3D%3D HTTP/1.1
Host: www1.saladosjogos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.saladosjogos.com/ls.php
201 Created 0 B URL HTTP/1.1 www1.saladosjogos.com/ls.php
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
POST /ls.php HTTP/1.1
Host: www1.saladosjogos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2162
Origin: http://www1.saladosjogos.com
Connection: keep-alive
Referer: http://www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
HTTP/1.1 201 Created
Date: Wed, 28 Sep 2022 08:14:17 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 6334025946553932104a3332
Charset: utf-8
Access-Control-Allow-Origin: http://www1.saladosjogos.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_W3M9Qjt0ecUgDtI6mPUiJeYJl5Jt22/PKys+ZF6yrVDg4YzdNVKI3vgHHqODrVmk0WrPij5lYt6Mqo6UWFvKNg==
www1.saladosjogos.com/favicon.ico
200 OK 0 B URL HTTP/1.1 www1.saladosjogos.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.saladosjogos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:17 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
www1.saladosjogos.com/track.php?click=d5750c6b6d0f8f4e4d15ff913020bf47c704fe02&domain=saladosjogos.com&uid=MTY2NDM1Mjg1Ni4zMzc5OjE5YzE4NGI3MGYwZmM1M2E1NzcxZjBhNDI1NTc2YmRhZjhiNGRmNzU1N2Q5OWMzMWYwZGNhNGNlYjYwYjMxZjU6NjMzNDAyNTg1MjdjYw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzM0MDI1ODUyN2FlfHx8MTY2NDM1Mjg1Ni43MzY4fGFjZTZjY2E4MzYzN2JmYmZiMGI4NzkyMGZmNDQ1NGEwN2Y5YWI2ZjF8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDB8VzEwPXwzM2Y5OTIxOTg0MzM2Y2RmZWIzZTc3M2ViODkyZDk0YzZiODU1NzkxfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
200 OK 20 B URL HTTP/1.1 www1.saladosjogos.com/track.php?click=d5750c6b6d0f8f4e4d15ff913020bf47c704fe02&domain=saladosjogos.com&uid=MTY2NDM1Mjg1Ni4zMzc5OjE5YzE4NGI3MGYwZmM1M2E1NzcxZjBhNDI1NTc2YmRhZjhiNGRmNzU1N2Q5OWMzMWYwZGNhNGNlYjYwYjMxZjU6NjMzNDAyNTg1MjdjYw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzM0MDI1ODUyN2FlfHx8MTY2NDM1Mjg1Ni43MzY4fGFjZTZjY2E4MzYzN2JmYmZiMGI4NzkyMGZmNDQ1NGEwN2Y5YWI2ZjF8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDB8VzEwPXwzM2Y5OTIxOTg0MzM2Y2RmZWIzZTc3M2ViODkyZDk0YzZiODU1NzkxfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=d5750c6b6d0f8f4e4d15ff913020bf47c704fe02&domain=saladosjogos.com&uid=MTY2NDM1Mjg1Ni4zMzc5OjE5YzE4NGI3MGYwZmM1M2E1NzcxZjBhNDI1NTc2YmRhZjhiNGRmNzU1N2Q5OWMzMWYwZGNhNGNlYjYwYjMxZjU6NjMzNDAyNTg1MjdjYw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2MzM0MDI1ODUyN2FlfHx8MTY2NDM1Mjg1Ni43MzY4fGFjZTZjY2E4MzYzN2JmYmZiMGI4NzkyMGZmNDQ1NGEwN2Y5YWI2ZjF8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDB8VzEwPXwzM2Y5OTIxOTg0MzM2Y2RmZWIzZTc3M2ViODkyZDk0YzZiODU1NzkxfDB8ZHAtdGVhbWludGVybmV0MTJfM3BofDB8MA%3D%3D&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.saladosjogos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.saladosjogos.com/?tm=1&subid4=1664352855.0237880000&kw=free+graphic+symbols&KW1=Online%20Text%20Manipulation%20Tools&KW2=Custom%20Font%20Design&KW3=Font%20Management&KW4=Custom%20Logo%20Design&searchbox=0&domainname=0&backfill=0
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
irene-eux.com/zcvisitor/8b6df922-3f05-11ed-a417-12ecc116c129/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4cc67840-d110-11ec-b6b7-0a918cbcbb97
200 996 B URL HTTP/1.1 irene-eux.com/zcvisitor/8b6df922-3f05-11ed-a417-12ecc116c129/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4cc67840-d110-11ec-b6b7-0a918cbcbb97
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72f5f82b4277ad81d0020f7067afcf35
0d9dc48346f990e5ee384f96b36513cdc0608715
e883170af927b4c07d7c817dc0d9d0c5a8c0962206a48a60fc9cac5fc1521cef
GET /zcvisitor/8b6df922-3f05-11ed-a417-12ecc116c129/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4cc67840-d110-11ec-b6b7-0a918cbcbb97 HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.saladosjogos.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: xyxHoeDY
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12621
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 08:14:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12621
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 08:14:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12621
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 08:14:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c58fdf09a7d552be0c8666522a29de7
60c873f097c85376797fed366804119f7e9c445e
24569f084d3fd428526503bde8b3da64152911934cd5e0e9140c06d954e4bcd9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9314
x-amzn-requestid: 0639452b-7f17-4513-aeb1-20b465ed3e93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HzCIAMF-vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-52afa1da17c4557c5e8c3564;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4mjt2-5F0Chu1G7jShI6rXfTuBMd6JOYxFMtla-EgL7i82SThJnp5w==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:38:41 GMT
age: 38137
etag: "60c873f097c85376797fed366804119f7e9c445e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee83d08d024d127fad5918e1ffacb78b
8ad289a77705358ab660b6123e9d90de991b6c13
aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 38009
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52d10f53-5e95-4bc8-aa34-09983b7221cd.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52d10f53-5e95-4bc8-aa34-09983b7221cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c4a66beda24621e812a929933c52025d
e951f6b11e473b68d2fdd95b822cef120d37b1eb
28efb1495fdb363cea9ccc6c38f84b2731dbd44dd4dbbe42996fa6fab74e1ce6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52d10f53-5e95-4bc8-aa34-09983b7221cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6721
x-amzn-requestid: ea4416a4-ffbe-4006-bb09-aa0a70763ab2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xTGNOoAMFXeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-6634cd372bd677227f755769;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TlEcmqE03c_aVOwGbXRCTsU5MOTiUF4C93U3zcIVqzg6NCGJJGup7A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:10 GMT
age: 36308
etag: "e951f6b11e473b68d2fdd95b822cef120d37b1eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b255b252ceed088d6f505e7e9acfcb55
a6b1c3e0d506ac1c66405e061e9910fafb176a7d
b796a98834c7ecf220d13bfba61e81a9b90d472d2aa725ff66888cbddad731e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae0951d3-44e9-49d3-9232-f4151ef59735.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6157
x-amzn-requestid: a51846e4-4e25-455f-885b-acf2567f2e1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDlObH7XIAMFw6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63314f28-4e6a68a74edb1ad850e17dac;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 07:05:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2g98EnyiFhkZTsqis2_ASfjM-YTJmcUJ-Mwcl1dWlruzrWDuojPA0w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 07:24:38 GMT
age: 2980
etag: "a6b1c3e0d506ac1c66405e061e9910fafb176a7d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff14e2acf-9d43-48bc-ab80-1dc73fa7dfc8.webp
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff14e2acf-9d43-48bc-ab80-1dc73fa7dfc8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c301dff6ddda16fd64692c19173cfa8c
2afdfb716192540a61327137706462c53588bf23
fd0f33a778fec87dbfa323ffa6b24ca5f94aa16d102e62683ad54b759208058b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff14e2acf-9d43-48bc-ab80-1dc73fa7dfc8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5377
x-amzn-requestid: 28ddd5cd-c299-4b36-98be-b6dbeaadc1ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI4KRGo7oAMFUiQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336d74-27ebe6e974ee5b7d06227fca;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _yH8kTWHHDU-LcnNz0fjoHkPhf6dRP7p7QydoE3DNu4fJhDpEkxPrg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:50:17 GMT
age: 37441
etag: "2afdfb716192540a61327137706462c53588bf23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6139c878a7d2bd32c61fc8287996eb5b
9c4692ea64832895fbd107d91f879728b6a440c7
3839df92f0a10c1433d5b576df50c9f7953912ae4f425012262f08ee8a59ce2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ffa6dde-b51e-43f8-bfcb-3f442d674928.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8500
x-amzn-requestid: af82c8d6-950c-4933-87e3-7bbb15cb1ac8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HOaoAMFoPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-77e0ecc522de575e40f429b3;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: rD5LsVDLQkaomG1nCGZGihbdlWKMCjUYNC2kRyAjJesJEOEBSj8Q3A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:47:03 GMT
age: 37635
etag: "9c4692ea64832895fbd107d91f879728b6a440c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
irene-eux.com/zcredirect?visitid=8b6df922-3f05-11ed-a417-12ecc116c129&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 302 B URL HTTP/1.1 irene-eux.com/zcredirect?visitid=8b6df922-3f05-11ed-a417-12ecc116c129&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c8225fb70e6fd398838c6df18b748afa
1c7d3049c01c295eefe46f3ea5864529b08456c6
8e42f8a15c9ea42879922c667d8d41492083017d2cc2e2938fe0008448f7465e
GET /zcredirect?visitid=8b6df922-3f05-11ed-a417-12ecc116c129&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcvisitor/8b6df922-3f05-11ed-a417-12ecc116c129/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4cc67840-d110-11ec-b6b7-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: xdooPevm
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 645790b707590586aee170d19e60c35e
a8a22dbe6e1338ea829882507be262022a674afb
d0fb8485f72db7200733b92b58d46406f57af7e33d4feb8df235350a7db8f7f5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 08:14:18 GMT
Last-Modified: Wed, 28 Sep 2022 06:47:33 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tcW_53EFbjGTzRlpNW-so_udh4HPyQC4QImQFAGGCQwEQHKDuWWn3g==
Age: 5205
irene-eux.com/favicon.ico
404 653 B URL HTTP/1.1 irene-eux.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcredirect?visitid=8b6df922-3f05-11ed-a417-12ecc116c129&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: xdooPevm
affnetmed.go2cloud.org/aff_c?offer_id=73&aff_id=1096
302 Found 404 B URL HTTP/1.1 affnetmed.go2cloud.org/aff_c?offer_id=73&aff_id=1096
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2778cda6c916cb01245ed9218273c7dc
d01683c0de151fcd5ac6e9c9e09579d7f47f349a
7975c5a51e34587d9545d8436641788e345117fcc150d5b4d6990d8719b37f9d
GET /aff_c?offer_id=73&aff_id=1096 HTTP/1.1
Host: affnetmed.go2cloud.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://irene-eux.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 404
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: /aff_r?offer_id=73&aff_id=1096&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_73=ENC03aadc91c553209e4e78aae884bd93fdb44bf7a5a6b85e4266b8ee1bdd85b3c1730260679619c37dddab7388b0fab15e545f8b6ff2ad5695367170df01e5462d0034f5a93ef914bf54bdefe36c43e7a94efa91b12343ca6cd2987aa30581b8367c9c9d83beb889344bceb06f9e303ee2be16fb798d5b73814442977d7ee4cf1395d82a18069b45f30d602b7947fd249709d5b5002360295d2c50a8e17dc70a62191fa89452; expires=Fri, 28 Oct 2022 08:14:18 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Fri, 22 Aug 2025 18:54:18 GMT; path=/; SameSite=None; Secure
Tracking_id: 102e9686ca3d0777c303b686942783
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 0896f79d965b8be1337af9eef6a27ea4
Access-Control-Allow-Headers: Tune-SDK-Version
affnetmed.go2cloud.org/aff_r?offer_id=73&aff_id=1096&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156
200 OK 244 B URL HTTP/1.1 affnetmed.go2cloud.org/aff_r?offer_id=73&aff_id=1096&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash de4b153fa7226ef16a01f1b8824be815
942841cb2a0ad8f1ab7c05aeb9ebe1b2eb40438b
4a8d963acd066df74f62e1d21d085577c3937544cad21761b1f7a4196af209f2
GET /aff_r?offer_id=73&aff_id=1096&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156 HTTP/1.1
Host: affnetmed.go2cloud.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://irene-eux.com/
Connection: keep-alive
Cookie: enc_aff_session_73=ENC03aadc91c553209e4e78aae884bd93fdb44bf7a5a6b85e4266b8ee1bdd85b3c1730260679619c37dddab7388b0fab15e545f8b6ff2ad5695367170df01e5462d0034f5a93ef914bf54bdefe36c43e7a94efa91b12343ca6cd2987aa30581b8367c9c9d83beb889344bceb06f9e303ee2be16fb798d5b73814442977d7ee4cf1395d82a18069b45f30d602b7947fd249709d5b5002360295d2c50a8e17dc70a62191fa89452; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-Request-Id: c4f00177ac4d00b097729c86f0e17c75
Access-Control-Allow-Headers: Tune-SDK-Version
Content-Encoding: gzip
affnetmed.go2cloud.org/aff_r?offer_id=73&aff_id=1096&redirect_pass=1&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156
302 Found 298 B URL HTTP/1.1 affnetmed.go2cloud.org/aff_r?offer_id=73&aff_id=1096&redirect_pass=1&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 04fdfd70a870be6a98325bc664fea62b
8c355523c5f88f611051c6e38443b9a92cdf816a
c363fbac57d0af69f2b40ccc9a0dc584b761f832d9bca49987046a2802bd6589
GET /aff_r?offer_id=73&aff_id=1096&redirect_pass=1&url=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096&urlauth=513229657938039775912287429156 HTTP/1.1
Host: affnetmed.go2cloud.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: enc_aff_session_73=ENC03aadc91c553209e4e78aae884bd93fdb44bf7a5a6b85e4266b8ee1bdd85b3c1730260679619c37dddab7388b0fab15e545f8b6ff2ad5695367170df01e5462d0034f5a93ef914bf54bdefe36c43e7a94efa91b12343ca6cd2987aa30581b8367c9c9d83beb889344bceb06f9e303ee2be16fb798d5b73814442977d7ee4cf1395d82a18069b45f30d602b7947fd249709d5b5002360295d2c50a8e17dc70a62191fa89452; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 298
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://omio.sjv.io/c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096
Pragma: no-cache
Access-Control-Allow-Origin: *
X-Request-Id: 1d13a09c500ab7411a0391e4c0f49791
Access-Control-Allow-Headers: Tune-SDK-Version
ocsp.sectigo.com/
200 OK 471 B IP
Hash eede6906715497987cd854e496f8f46b
51ef16e33817276b1ad89f0838ea4c177e89889d
cc02dd132e4931034073c543681814137acf97e0003cd521f89b23982d11b735
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 00:48:24 GMT
Expires: Wed, 05 Oct 2022 00:48:23 GMT
Etag: "51ef16e33817276b1ad89f0838ea4c177e89889d"
Cache-Control: max-age=577444,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b0656d846b500-OSL
omio.sjv.io/c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096
302 Found 235 B URL HTTP/2 omio.sjv.io/c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096
IP
File type HTML document, ASCII text
Hash e9d63f99f1f217a2ab6553f7651a46fb
3e396c0730c8818fa38fb785d0ff9e3ffc14b9aa
df3733ce7d9f4c5ff02fd9fbc624b010eb3d931bc2b40d1a50471106c4dc2b71
GET /c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096 HTTP/1.1
Host: omio.sjv.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 28 Sep 2022 08:14:18 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
location: https://www.ojrq.net/p/?return=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096%26level%3D1&cid=7385&tpsync=yes
content-type: text/html; charset=utf-8
content-length: 235
date: Wed, 28 Sep 2022 08:14:18 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7c0b08090a20d29b34e6cae897cf5723
db00bd977f1a748b881f342e3defea61479a0ba9
5efc65566fdec089478a80ebc8e63fea6e778a19aa8c36566f3578f02a896921
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 17:55:43 GMT
Expires: Tue, 04 Oct 2022 17:55:42 GMT
Etag: "db00bd977f1a748b881f342e3defea61479a0ba9"
Cache-Control: max-age=552683,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b06583c14fab4-OSL
www.ojrq.net/p/?return=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096%26level%3D1&cid=7385&tpsync=yes
302 Found 0 B URL HTTP/2 www.ojrq.net/p/?return=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096%26level%3D1&cid=7385&tpsync=yes
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/?return=https%3A%2F%2Fomio.sjv.io%2Fc%2F1987239%2F614667%2F7385%3FsubId1%3D102e9686ca3d0777c303b686942783%26subId2%3D1096%7D%26Sharedid%3D1096%26level%3D1&cid=7385&tpsync=yes HTTP/1.1
Host: www.ojrq.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: 0
Connection: keep-alive
Cookie: brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 28 Sep 2022 08:14:18 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
set-cookie: brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e; Domain=.ojrq.net; Path=/; Secure; Max-Age=62208000; Expires=Tue, 17 Sep 2024 08:14:18 GMT; HttpOnly; SameSite=None
location: https://omio.sjv.io/c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096&level=1&brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e&brwsrsig=R4d3BWxJIwrNzRAWLZ1Alx6f3Ab3lw
content-length: 0
date: Wed, 28 Sep 2022 08:14:18 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash eede6906715497987cd854e496f8f46b
51ef16e33817276b1ad89f0838ea4c177e89889d
cc02dd132e4931034073c543681814137acf97e0003cd521f89b23982d11b735
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 00:48:24 GMT
Expires: Wed, 05 Oct 2022 00:48:23 GMT
Etag: "51ef16e33817276b1ad89f0838ea4c177e89889d"
Cache-Control: max-age=577444,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b06578922b500-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7c0b08090a20d29b34e6cae897cf5723
db00bd977f1a748b881f342e3defea61479a0ba9
5efc65566fdec089478a80ebc8e63fea6e778a19aa8c36566f3578f02a896921
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:14:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 17:55:43 GMT
Expires: Tue, 04 Oct 2022 17:55:42 GMT
Etag: "db00bd977f1a748b881f342e3defea61479a0ba9"
Cache-Control: max-age=552683,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b06579f080b55-OSL
omio.sjv.io/c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096&level=1&brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e&brwsrsig=R4d3BWxJIwrNzRAWLZ1Alx6f3Ab3lw
301 Moved Permanently 0 B URL HTTP/2 omio.sjv.io/c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096&level=1&brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e&brwsrsig=R4d3BWxJIwrNzRAWLZ1Alx6f3Ab3lw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/1987239/614667/7385?subId1=102e9686ca3d0777c303b686942783&subId2=1096}&Sharedid=1096&level=1&brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e&brwsrsig=R4d3BWxJIwrNzRAWLZ1Alx6f3Ab3lw HTTP/1.1
Host: omio.sjv.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 28 Sep 2022 08:14:19 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
set-cookie: brwsr=6279bafe-3f03-11ed-815c-e90fbb888e4e; Domain=.sjv.io; Path=/; Secure; Max-Age=62208000; Expires=Tue, 17 Sep 2024 08:14:19 GMT; HttpOnly; SameSite=None
irld=Lwmi3P%3AUqKSvmRRGwVUS0STXX2rpRItXNHXjBX8aWOpWZ-WBE; Path=/; Secure; Max-Age=15552000; Expires=Mon, 27 Mar 2023 08:14:19 GMT; HttpOnly; SameSite=None
location: https://www.omio.com/?clickid=3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0&irgwc=1&utm_campaign=1987239&utm_source=affiliate_ir_Affnet%20Marketing%20Media%20PVt.%20Ltd.&irmptype=mediapartner&ircid=7385&iradname=Discounting%20Tracking%20Link
content-length: 0
date: Wed, 28 Sep 2022 08:14:19 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 600 B IP
Hash ed0ba08f74e3e066104a83ea5cdec35b
0c5692a0eb011f37749f8b305bf32ef18f6b3436
b8c302d0acf22720973f23f5da4d9f0fc6f394cbb82868b91664bfc4e8771cac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3700
Cache-Control: max-age=133236
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:19 GMT
Etag: "6333595b-117"
Expires: Thu, 29 Sep 2022 21:14:55 GMT
Last-Modified: Tue, 27 Sep 2022 20:13:15 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash cb617f29349a1d53d0a1f6ef886d55fa
2164569843bfd3a73810f92b766d1074c360a31c
59e15a80929945ee67c7a20fbb2d5a5c8db20ae998717b75a4326325ccd50c17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3700
Cache-Control: max-age=133236
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:19 GMT
Etag: "6333595b-117"
Expires: Thu, 29 Sep 2022 21:14:55 GMT
Last-Modified: Tue, 27 Sep 2022 20:13:15 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
rtcollector.goeuro.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 rtcollector.goeuro.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: rtcollector.goeuro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.omio.com/
Origin: https://www.omio.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:19 GMT
content-length: 0
access-control-allow-origin: https://www.omio.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=LPl46Sr21nPUD.ZFApdEpU.MdR5hUOoHl_q8.Oxp94Y-1664352859-0-AWSQozs62os4jl9f/o6cfxrW9e8mHF7FFnJN9HMo0PtEjRPU1+Oj43ECk7l0r6o/vCSxTKMU18Sf1Pr/sy8Guys=; path=/; expires=Wed, 28-Sep-22 08:44:19 GMT; domain=.goeuro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 751b065de81eb4f3-OSL
X-Firefox-Spdy: h2
rtcollector.goeuro.com/com.snowplowanalytics.snowplow/tp2
200 OK 486 B URL HTTP/2 rtcollector.goeuro.com/com.snowplowanalytics.snowplow/tp2
IP
Hash fc5ad418f498fe962871ab4cdb4631fc
3197e8c6e2bceb221889044888385f140be60a9f
b31a722f2606661159ea5156d9535a65770ad24e5ba7ad89b587131ff0c85808
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: rtcollector.goeuro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 6808
Origin: https://www.omio.com
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:19 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.omio.com
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
set-cookie: sp=b43f2aed-1316-475b-8bfe-ef53ab7b0c6f; Expires=Thu, 28 Sep 2023 08:14:19 GMT; Domain=omio.com; Path=/; Secure; SameSite=None
__cf_bm=2oJNLj65B5SiYxhVtmcUGo4OqmTa8Gc88GzgnC6169Q-1664352859-0-AayXt2j70SEoGiEBuLDTqj8Mtv1A/MJzH2JmIuZGaQQHTS2dh2vmuS/5FA2/Q1gNbsRefxB2XT00Zlw46HVg50w=; path=/; expires=Wed, 28-Sep-22 08:44:19 GMT; domain=.goeuro.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 751b065e4b380b41-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-KMGTTC
200 OK 112 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KMGTTC
IP
File type ASCII text, with very long lines (51807)
Size 112 kB (111545 bytes)
Hash 42d4b98dd35055a803a708db92eba99b
2b1964b2312f4868461616560ac063f07bda98a7
5b680736e887a7422fcd95930d7dfe530db6232d53121db50a4d1fd4a901c5c7
GET /gtm.js?id=GTM-KMGTTC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 28 Sep 2022 08:14:20 GMT
expires: Wed, 28 Sep 2022 08:14:20 GMT
cache-control: private, max-age=900
last-modified: Wed, 28 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 111545
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.goeuro.cz/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.cz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=186f4041169146478729b5762d451389-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=CQ8smiJp15OqjUBIIOZ3zDkeR3yyxE6RfKxFxFT1udg-1664352860-0-ASFS6KSh3yLcpjJ7sn3IYhBILiseu6QYlzy2a/kDZ4KNVWQYJcwZ3jGD0kKvjr12TMkwYqdEby3R08+DXWZwl84=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.cz; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0662ecc2b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.de/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=09b3f671f5234ade828e6f4c0d4f5bdd-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=x7PxKuiCGuNwojf6nyYEvGu.Ro1vgJWZlc1oIbbK2W0-1664352860-0-AXM/80PpiiO6yU4c+3/9bDvxL0afZjjMKAdO4AMaKFxDXFKpD/efFnlOWYX5G/SH/VFB0aE4bSrTZOttn0TibwA=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.de; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0662ef29b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b2839f976b6a7907ebf0f3085c18273
79c6dcd09c651f4a4ebd34da65e305f58afffaf6
ce4d317706ce839766c55fedd1f7172fdc8970d3413a55089a24e1580a10f6cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 324
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:20 GMT
Last-Modified: Wed, 28 Sep 2022 08:08:56 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 278
www.goeuro.at/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=552f72dbcd9d4e2495b8942e835ba5f7-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=498Cf1EINlbAden196KtXZr38A92VAi73vU7_5pbGuo-1664352860-0-AbvFk1dCxn3fbiJ0lTUKudHhx6+RtdieK2QoZCIorte7lFwg3eKF+aiPAWkzHBNGGosAF6Vt/TMjibao62d3tyM=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.at; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06633e80b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.es/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.es
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=6e0dc623343a44329e5214f0d3db582d-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=EHRuHZt4lyfXGt4lTGDYkUIf67fZOBTxktO5gGyPzIE-1664352860-0-AT/3mzV/GBomwF850UZ1Za6PC9YS83E569mrqYt8NR2uahIMzTRm3TO3AJtwwBqnHI3Lg/zT2X/9Fws/BIJBXOs=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.es; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06637d99b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.fr/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=d7ab9ec6fc3a443793d8ee11574dfb94-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=3xJTvmdFL3wAbiVMDBiGxlhvSSpIWVjQRQ3wDmoMUGw-1664352860-0-AVRB5PWKNapcR4dqBq/R2Res1sx9yJWL4vUuzKZR2zqBp424lasNTpi0cEYHm9uLXApE//4XbEecELYcFX+5g9g=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.fr; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06639a5cb503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.it/masapidro/
200 OK 273 B IP
Hash 8ba700e4d9d629bac8f05bf605e78173
de5519cb02b239fb24e38852b0e34eb4eaa35284
e56ef48be892e7a888fb33219a040cb4993e586c51615185735a5f2d48d7a1f8
GET /masapidro/ HTTP/1.1
Host: www.goeuro.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=af502f27577b4d0f9332187c97c5e340-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=QXIjJ6_qGCUpTRlp7sLZVe0dNhQvRQxMVF2r13i1eM4-1664352860-0-Ac9+89dQd0SJSbt8VWVCHEI338xclUv47aDziX6bUd5ah5VCMSxU9w2RxKNjG1dCnZQLKrJ3rVYalaeUfWXLhNg=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.it; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0663b8dab4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ec1483aed5ae38c88ea59806b4017dc7
ca649fad14be8bb1d48ef45e8ff2e4e4ba6fb5bf
92bcca2b36662b5a3fbd81b55b82474cbc15961a7e337a94d5e138ab35da8489
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:20 GMT
Server: ECS (amb/6B87)
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash c4c3c9a76476e91abfb81887007ea3ac
c388e253bba871f3a444f28bab5ba2c1bb1f7ca4
738719fc2439b8cce8c672c7c79a178b155de40ae4370ce847752bc475a93b21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:20 GMT
Server: ECS (amb/6BAB)
Content-Length: 278
www.goeuro.nl/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:20 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=8adcc79a4d094a8c8c13fc5d2ffb32ff-v3;path=/;Expires=Thu, 28-Sep-23 08:14:20 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=o9Et65tAUW6i_ylBBwuhe1UM2iloaHLmM7YOnH8SBV8-1664352860-0-AUApgwcaUJcicB8jPbutvVBKnnbCBnHzxHNJsGBGyBFgPVwbw6Y7hFkB0JK7mlBmpEOnb/Ws9PUUv++hdV3RX4E=; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; domain=.goeuro.nl; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:20 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06640f660b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 23bd65fd463e6d751dec5c5bbd7284c7
13d3de4170ed76ed1178f836d26388b9e35dea48
2e5d45a1acb1b4354bcf9a33a6355437552143234778fc68dfab1994379e0b36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 324
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:20 GMT
Last-Modified: Wed, 28 Sep 2022 08:08:56 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 4a334fc15cd93e27c140f710b8eb2f01
b209a9c28d8ce3f3179d3d7c62309c2865f625b0
9b9e08bacc59e0ab93a2d2f9bdbf721e3b4c367543288575e38789d1579f554a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1389
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 07:51:12 GMT
Server: ECS (amb/6B87)
X-Cache: HIT
Content-Length: 279
www.goeuro.com.ar/masapidro/
200 OK 0 B URL HTTP/2 www.goeuro.com.ar/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=01f7f237bb5a47578fbb6668ccbc6782-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=PUJdG5pwzoPP2Wc4UJXVwTa0HrgmWlEXmHFmol5UwwM-1664352861-0-Adr1bcQZXkjp1PWnaKq1Q7S9GRiS1hIRWKf2kS6lEeHixU7U8WWFGwz3fZ+krVCE0e5Lp7PLlw1DLMkgkE22zE4=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.com.ar; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0664ebfeb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.co.uk/masapidro/
200 OK 0 B URL HTTP/2 www.goeuro.co.uk/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=a5de97642ed54dd1acedf25155c4ddfe-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=TKWUvcLSA8bZV9ujgN4Dm9st6kV9XoqSJ6YrCk3thoY-1664352861-0-AYNcnyhSNYGS0Nk7D8B1LeGSs/1PUcM8XQN/OCOHRG21DRM2Tju25TeoOMkbRp956e5Gj+z4xcOtkHoOX7XCbA8=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.co.uk; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06650ee81c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.com.mx/masapidro/
200 OK 0 B URL HTTP/2 www.goeuro.com.mx/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=6029dd0f467849889c850897df2d182b-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=d6BGMY0lQWONBszPt6SOqunPXgopsH7shf7XmyEHoVk-1664352861-0-AQC9mL1U595/gUiiiC7z+LPYDRm72jqWXtTOC50ajs4LRLwMu6JhjP49aR3U1oNUVsdgizYkk5EiVak9Sn8L8A4=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.com.mx; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06650a170b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.pl/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=3d3c07a40a734b9d89d7ca15ac92c4d0-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=pIu9d4w6FnOrSs.JK7hqcGQGUOUlmZkMiAjia4bc1Ro-1664352861-0-ATX/3OcXiPVvUWt90ocaInLRL/yatEg226o9k7ez7fnVk9UzsmRGixYPYga2zNGxG4ZVOTMjqeR7RcyhDMsRzic=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.pl; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06650c30b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.be/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=4f816a80992f417e948ba001209597e3-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=G_Gc6NHvhIkiP_Fczs9.lNjxgocWQxhBX4SV3YlSSvU-1664352861-0-AYBcQPTbBEylWlfmwlT9QMmyiwFVVLafu5Nu0D17R8iGsw64zFan1q22zKbuQNQApvn2NlffwjCFZKpM6MPc6WQ=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.be; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SXKicHcrcv9; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06651a43b523-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.se/masapidro/
200 OK 4.8 kB IP
Hash e71c147702992e5df585f152aeef1c08
90ce6fad93577bb0c45735910fe0458572d22b3f
1ff1d61f2921f9170d72db93259d754b928ad97ff5c31cbe95610b2b0bd4f133
GET /masapidro/ HTTP/1.1
Host: www.goeuro.se
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=765c86f82ca143b895095e3da091c51e-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=C39y4olkvblh9AqCRBk9VY1a.4bu1XPSCRUQ2oe6OrQ-1664352861-0-AeuzkCSyJsM9mVjOR792oguTiOEQEeFMWaiioOrcHQRXR9tP0ZIpXUYYxSNSlFM9FGfprTWt+7z8Qhb+Z7V3tTg=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.se; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06656b38b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.pt/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=5ec1a499337d400b872e4b0e53911801-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=Ca_goeuWhdT8.ofIOWMPsDUNb9NG7o03_KXh5NTUthE-1664352861-0-AdMvbn1uzH+hFU5Df3bvNZlXC/5kHMp3cUS9CQ1DqNg4Cio+ej0FFwNhhbVG05Tponnusc0nrdQcP3lkF0wfT0g=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.pt; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06657fe20afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.es/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.es
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=24da6727c285412cb0214d0108c8bb4f-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=w2.6.6PrPaBc2r4HjWKrmVATIYs5vis5ncBDMwlmgV0-1664352861-0-Ad/aPy1MkvYSX4TT4CjkJJbDfg9PQTL7edTcf/s1C15mquefrPjhJ9a4y55U8LkmDpYqnkiLDLP9B9vXzshnhbk=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.es; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06658b82b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 165e021f9ec4bfef7b8c218674eab36c
62f4b1a67342d3118397708bd162375b74d0529f
cd0abf3e155953469151a31c86d8aadc2f5a318957fe744b1d67ad6c93d8daec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2551
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 07:31:50 GMT
Server: ECS (amb/6B8D)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b7324a1c5e2da0a6abe72001c8b37fe
1538cb7c20c9fd164dd1e610b6fd1227a06e31d3
7247eec98a236f82a0eaf6bdafa8a0c25023c0b8b86832a44cfcdc52aafeafa3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.omio.hu/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=0861fd7c57fc4f709778c0f02d775e3d-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=ID1tTB2PjRSW6jWEtn1.umrdoYnHL7FJdL_gjRqwywI-1664352861-0-AbSlMzGXiSrhcLAy3oDktD99VFWwzAWMh9Obre2AHtKTePvR5Gop/XX7NEjV/pdHwk9dHhk+FDayfO+v5WWM8Qs=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.hu; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06659b95b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
undefined.fls.doubleclick.net/activityi;src=undefined;type=homep0;cat=01_ho0;ord=7658113799495;gtm=2wg9q0;auiddc=200129833.1664352858;u12=;~oref=https%3A%2F%2Fwww.omio.com%2F%3Fclickid%3D3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0%26irgwc%3D1%26utm_campaign%3D1987239%26utm_source%3Daffiliate_ir_Affnet%2520Marketing%2520Media%2520PVt.%2520Ltd.%26irmptype%3Dmediapartner%26ircid%3D7385%26iradname%3DDiscounting%2520Tracking%2520Link?
200 OK 464 B URL HTTP/2 undefined.fls.doubleclick.net/activityi;src=undefined;type=homep0;cat=01_ho0;ord=7658113799495;gtm=2wg9q0;auiddc=200129833.1664352858;u12=;~oref=https%3A%2F%2Fwww.omio.com%2F%3Fclickid%3D3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0%26irgwc%3D1%26utm_campaign%3D1987239%26utm_source%3Daffiliate_ir_Affnet%2520Marketing%2520Media%2520PVt.%2520Ltd.%26irmptype%3Dmediapartner%26ircid%3D7385%26iradname%3DDiscounting%2520Tracking%2520Link?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (615), with no line terminators
Hash 50953ee6d4cc584f447d5ee98fdffb7b
611eb54039b423fa8e0f1b2009424f7174a206fd
3aaa9debfa4698896481b3900d27ce17785f181cab33aa129915f0d065b7dc64
GET /activityi;src=undefined;type=homep0;cat=01_ho0;ord=7658113799495;gtm=2wg9q0;auiddc=200129833.1664352858;u12=;~oref=https%3A%2F%2Fwww.omio.com%2F%3Fclickid%3D3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0%26irgwc%3D1%26utm_campaign%3D1987239%26utm_source%3Daffiliate_ir_Affnet%2520Marketing%2520Media%2520PVt.%2520Ltd.%26irmptype%3Dmediapartner%26ircid%3D7385%26iradname%3DDiscounting%2520Tracking%2520Link? HTTP/1.1
Host: undefined.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 08:14:21 GMT
expires: Wed, 28 Sep 2022 08:14:21 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 464
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Sep-2022 08:29:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 0a12fc60329228d7cb6efd07abbe6640
a3091109ce9c979c87c7e278e87a75c40b56f76f
731797c75a1b53a9c7f8433932efac029bfb0681fd3af28ef3a9c0c8cbd1ef4b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "731797C75A1B53A9C7F8433932EFAC029BFB0681FD3AF28EF3A9C0C8CBD1EF4B"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13762
Expires: Wed, 28 Sep 2022 12:03:43 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash cd4edbd71cc27eef2b21c4d2043fd01b
75e73357460d2e4d5b39c1df1bc34990641e781f
76238623452633247124aa91f2e5dc79e9f7ca295a6cceff37caea5c31fc4afa
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76238623452633247124AA91F2E5DC79E9F7CA295A6CCEFF37CAEA5C31FC4AFA"
Last-Modified: Sun, 25 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13829
Expires: Wed, 28 Sep 2022 12:04:50 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash e99fab14cbaf78b40fa157fcfeee207a
9593f5005d456c9c009b0d61b22e2e7fb4ba5b57
2cce028427f9e372de55ee7a029e41c1a1af50d0291435dc8c3975535a5b46b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6BAB)
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash 14776fe43cb2aded761317ad1abf7c31
1f1979aa662f621d952632a99bf4be03cf8754f9
926489aa6c5e0d29a74b29c54109df1a2ab47ac24b29eba30c191b3615acd98d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6BB1)
Content-Length: 279
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash a9790c67ff6d105c462325048293e1e2
74b7eb3d7aab543abf4f792fd39523d948bd37a8
1823a9ea3790f119bc208fc761d91e6dcb7d9f86183eae952046b6412dae12a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "1823A9EA3790F119BC208FC761D91E6DCB7D9F86183EAE952046B6412DAE12A5"
Last-Modified: Wed, 28 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17585
Expires: Wed, 28 Sep 2022 13:07:26 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash f317e401deccad911b7de704f87f8156
61a50b8b13b211610adcdbec0d406575e68af727
5e33a75599c7d9bc428488a9c4d0f95a5ce392dd05f029bbff4181eb52a70198
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6B8E)
Content-Length: 280
www.omio.co.uk/masapidro/
200 OK 0 B URL HTTP/2 www.omio.co.uk/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=af85ec2543a246e8b151786c4bc42891-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=PG8LtwT1OgudBImZdBRmvuzXeoDOxhCmzSCGtER4Ekg-1664352861-0-AZB761l1LvM79O0YG0WZydlndt4ENfwSD5T6rOGztcHMuKb7QyD58ztP8yHtmTPUMDchIv3zGmPmXM2dvsQgvg4=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.co.uk; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0666ed2fb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.ch/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.goeuro.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=85f580f1ebe1447f9d5722f52217d0ff-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=ELIVIkOgkBS6Z2s_8.pUNxn00p5mR7Hn84l5_NYJBb0-1664352861-0-Aa/aPgvjlbUHvKEaxCURPXUIwgQoAM59GpmrnMkwtrrGlWpTx6PDPyPExK/X9Q0PEuzAAjBcNK36rrcKEsxoMwE=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.ch; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06670d74b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.ie/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.ie
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=c7e6d023e8714c548a2ff7cd7ed64420-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=fZ3gMw5Oy9Ws6WDRj3Jr0xWLgZ6RVpm2A967Of.8HVE-1664352861-0-Ae7DTj+zt5iCCH1O+278Ydae65fDxb3pd/H8fEbhpPIJMJZNpPoG+PIbH3jNVFXast3ga7KhJOzDkOKQgCSrXLI=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.ie; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b066709b1b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash e9e802cb2afc258cce308f806206e43b
dd2017d14d066812096d4a340bbeda145a0207c4
6ff0a2d8648110c768edabc5f9e6ce256543341f12b6a18c8e0c3b406c27b33b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "6FF0A2D8648110C768EDABC5F9E6CE256543341F12B6A18C8E0C3B406C27B33B"
Last-Modified: Sun, 25 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14790
Expires: Wed, 28 Sep 2022 12:20:51 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 560b5ee34ec5f15b0a9388e8d3ec6642
c865ef86b857287317367fe83af5f1769d38bfa6
fb667f7aca2ab21e492addbfa5f6a59a92f1054801129ae7a81eeaf85088edfc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6BAB)
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash aad58967a6e3d7822d300fde13ccaf85
31e858a7871196219124bcb9b04a67b997b70791
d483dd2396bff7f03b6e81d0fd9f8d10dd510a0a02f02226f4d524e34c980887
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 27
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 08:13:54 GMT
Server: ECS (amb/6B87)
X-Cache: HIT
Content-Length: 279
www.omio.com.ua/masapidro/
200 OK 0 B URL HTTP/2 www.omio.com.ua/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=c34458f2a92b4fc0ad086ba8d7bb6d8c-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=psDuO0fCbzxINGOGZZeK00d35qKNQhqFpejKP0eIs24-1664352861-0-AfP0hmS+J8wB7qqY6rPyiB+fcCrbAuNdfRfa7UXlqnn6Bi6Ox3KxcC6XUJ/JpvCZZ6zozBfnSDlk9V/wvM1/UHk=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.com.ua; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06671d6ab505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash ce5ca59d9c4161221732a4c7a09e9c89
aeb1306f48a67af70464fc261d59d9c8a3a1286b
9c65b4c1ff22f6cd66f151787caa3c36d8edd35c3be1634ab6ef14baf5cfbf22
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "9C65B4C1FF22F6CD66F151787CAA3C36D8EDD35C3BE1634AB6EF14BAF5CFBF22"
Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14844
Expires: Wed, 28 Sep 2022 12:21:45 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9fadf673738f339bdd0fdc11980fc776
1bad4924a3f826bfe827a67ae82c0f42e7bef44c
2a0c4087c0f171915f1ba1f3094becb719e96befc7b97357b55452d0d806fba5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2A0C4087C0F171915F1BA1F3094BECB719E96BEFC7B97357B55452D0D806FBA5"
Last-Modified: Tue, 27 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Wed, 28 Sep 2022 11:09:14 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.com.ar/masapidro/
200 OK 0 B URL HTTP/2 www.omio.com.ar/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=3fac915550a04dcfbfdd5e8602f7a73d-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=V63N81lFzgqbPfvZWoJodnv5RyIX2NawcI1MJpWwg_A-1664352861-0-AdzaDZwg/oT0HmpQCrl51B73hNWrJMGzzRy/3upPQG5+pIEdS6KqJbl5KFyvdlRVkKWXh1nmhSG2EZc+44+55cM=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.com.ar; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06677b750b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9febd82289b379123feb29f8fc6967f5
80ffa4dcad354c5677516bb38ba44d20d0da2c01
57a47dc95ef8c442c0171d6e72f51478349c6c4dccd2b16cd12576c7900b7a7a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "57A47DC95EF8C442C0171D6E72F51478349C6C4DCCD2B16CD12576C7900B7A7A"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4090
Expires: Wed, 28 Sep 2022 09:22:31 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash c0d237cd513b9c682d22f62a5dadd0df
36f0dadf933b0d7d979e7cfc22cc8d372e0fefb1
f26176e0b8709505c75f03324f9c6747ecaa050e940b868cdbace832f9ce521e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 325
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 08:08:56 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 279
www.omio.it/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=1b463f31d76b49e086b6cdfede232b6b-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=ydmQ1GchZ4RywT0YHOGiEehNi_Mx3Ry5KU6llKxTaZ0-1664352861-0-AetB1tM4Ig/9TNtOkZELi+P8M9YPKu+OFDF+xLRbmc9EJjS4vlWfwbHgmWyz8hM+iJhDGwdivxCZfTpLQ3Sc7uY=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.it; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0667ad66b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.at/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.at
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=70a067c2b72d4cf991f2176bd91d7b07-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=N942DNlNpCzCl4fLkzF1oMry1GGeQ39dXngSU6kirXU-1664352861-0-ARUuqzrGdq5uIpFVRbbePku2wBqCnTQ7DaFqMzaanonzwEX9NXd03QDN6dsFgYHa167YqDfaSlihaKeshfAZ9nU=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.at; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0667af7f0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.fr/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=200917288d3f4ab989c10fc5e47c5c22-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=5T9MlrbdoSh7FiNHxke_RJlfY7QgRuMKllNHm03uZl4-1664352861-0-ASXB0QOdxmZCJrJPVlX4ycYtO8kytpPArrrR+/fop7348g1WLyDvZh2tRTr3vITcnVvjtESCRjh2ZfYtHnJF6Rk=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.fr; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0667a805b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ff74ef93260c2cece80f854c01748195
0bbe2d534403b006142ca0f4432b538a505b3265
7604e58631d6c9952980c8e9295fe14dace8f2b368e66ee756b30cf3d8c27cc9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7604E58631D6C9952980C8E9295FE14DACE8F2B368E66EE756B30CF3D8C27CC9"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14843
Expires: Wed, 28 Sep 2022 12:21:44 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.nl/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=e373253df1d04771b4af3167906e8172-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=9xiRzLXakf2ggQH5qyFJ.4E2pBx31d6nUv8pNq1nIZM-1664352861-0-Ae9gho3kkgQgxdS5+ABpBT+F0MjeSz38g40WX/9wdjf/3+WuWzkg3vGLwzAHaCQYT/jxd+ZVLv0Ir/gA3wP6bbI=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.nl; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0667bd26b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b2839f976b6a7907ebf0f3085c18273
79c6dcd09c651f4a4ebd34da65e305f58afffaf6
ce4d317706ce839766c55fedd1f7172fdc8970d3413a55089a24e1580a10f6cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6BB1)
Content-Length: 278
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 3af6a6b0cc3be394cb1702aecea1a1d9
c2a2447a204d7c6d4d79d9401b699a37a14183f2
1db3d3af4579929b46749c245dcde3947e8384556bdd951b330d00eaebd3d9f2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1DB3D3AF4579929B46749C245DCDE3947E8384556BDD951B330D00EAEBD3D9F2"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10455
Expires: Wed, 28 Sep 2022 11:08:36 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.pt/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.pt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=1e8062fb2b8a4223a913745b9fce8766-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=gRYaqt_DWLVfWcj3AMVj32CFEG0k__kxiDVqwPQIyVA-1664352861-0-AZTKlSHv/0xcUqXX1Bcxa8O1LfMqbv833Gp+819xrRJIzzVSA+UXhzqk1ki9sxY79tAvbEhOtPSP2x0WufDuK08=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.pt; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0667eabe1bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.be/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.be
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=130bd5fc50754926a5231438c956578a-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=JTiES6p1O.uu_q1aZDPc6NA3kCjF1sKqITqL7cJH3wA-1664352861-0-AcL8e04UDaHPQupPAW7Zb0wCzkD6mxlT4IVt32ms8UbScNPxNtZEK3C3m3/NAtSyPODCtJxz3ww87bm9XYAV7qs=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.be; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06680e14b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.com.mx/masapidro/
200 OK 0 B URL HTTP/2 www.omio.com.mx/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=111bec2d0fd34a83be8d497e17b3c911-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=fWEzeAOAOUIw1xXSnYXwdKpX_EjEXieSbK8yosLtzh0-1664352861-0-ARwdr5W1XYT5L5VlyU7T7VO66HJcURgXP68OpNw1PGt08G2PriTcjbvO98/OLtWhb9kItHHp2jDnrSJbiFDeZGQ=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.com.mx; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06680c871c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.se/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.se
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=2780d283f2ae4d0e96f6f7643bcf593f-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=GfhEyg.fW09vWTCh3cZdsIOMafrP.YhOr3U6NYzpau8-1664352861-0-AS7liCNGSPMNsHc7L8VMgT8ZbYpksXAyhyII15yzxZynATE8N14Gymwlqm/JL+k7VH+OljABHa7NwBCMG9yNT2k=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.se; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06680b950b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.com.br/masapidro/
200 OK 0 B URL HTTP/2 www.omio.com.br/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=72872abe30f94d089ce456ea81160912-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=JHIt2oFCxdGFafWNVhkXEVe.r6ughY06siQIz6bun2Y-1664352861-0-ARLJZyjxLa8ECMQxEXmNv5Yio2A4R026O71Z8R2gUji4XH2fq4pg34Cj+VcmZY3PpEyd+0rD+T7mg1L9sNZPWlM=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.com.br; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06681f830b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.no/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=68b997d552974d0eb1887079ab61559d-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=fZoVy5yrFhPsUDDnqhvWPs76Q8jGuWiuXj1xwN3NHh4-1664352861-0-AfnFyUzMW9z4XFB/b4/RWg+xXai+Ps8P6Zc1ajpdz29jRYH231rVugUbcW5+bj4OdxZ+YIQX3rK+Ic6dpPm0JaE=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.no; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06687938b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash c6977efc652619779d321e61b74eabbc
a43472425886d6b3180d1865cb713526784f7c25
8c0cf4534958d2ad1fac5ebf3f18895ed0db16556b65c4f2606b20ca92a00241
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6B8E)
Content-Length: 280
www.omio.cn/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=f46f83ec171842df8586d9db3ad1a317-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-be-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=HqVgfHCqjdl56Wc1TTS6CadLa3nb1iVn7BqQtJEVAh0-1664352861-0-AXRMuZZLEH/Fsw+rpQbN2s1p4olyx/GLCOrvRYZ2POpguLsCaQAP5wQJO4HfIc0c9GedThUMSDbzCSy7BmnVcb4=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.cn; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 751b06682856b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.fi/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.fi
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=18a6d612c4b24b15a48fedea6607aa36-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=XeAelIwMb2aWxP8lUfQuzdYp3oTLjtp6rULeT8k4cEE-1664352861-0-AZlwbB6fZx99KqYvH7GNmP+kfc+TP4PgqcksV6QOH3fgzcwGTgH0UotDCsaYLX29rLc7h6nRxVWz75N4fbnZ7zc=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.fi; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06684b80b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7994f08c2dce23db1f39966052fdc80f
8b664aaaf17e19d99154028a07a2b1b5eefac362
302d4daca9ddbd8b6f358c242bf50c73a4d7de571e488c73473071eba0e6a607
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "302D4DACA9DDBD8B6F358C242BF50C73A4D7DE571E488C73473071EBA0E6A607"
Last-Modified: Tue, 27 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10144
Expires: Wed, 28 Sep 2022 11:03:25 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.by/masapidro/
301 Moved Permanently 278 B IP
Hash c4c3c9a76476e91abfb81887007ea3ac
c388e253bba871f3a444f28bab5ba2c1bb1f7ca4
738719fc2439b8cce8c672c7c79a178b155de40ae4370ce847752bc475a93b21
GET /masapidro/ HTTP/1.1
Host: www.omio.by
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 28 Sep 2022 08:14:21 GMT
location: https://www.omio.ru/
cache-control: max-age=3600
expires: Wed, 28 Sep 2022 09:14:21 GMT
set-cookie: __cf_bm=G2G4g37nmSfrg3E7MHIAbYkpJzG64TdeeMT4cURYmRA-1664352861-0-AZXjteRDgRrrPkFyg597XPyv+mfkLQWfS3icX5cbVZwef1q+g6fjw+PQv75TMX5cfOgrcOYPbcrjh0wAHlPAPrQ=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.by; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b06686c6e0b02-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 63de76ad55790be291ab7fd9e196c858
942462b470e50c886a2fd66699ac095673515a82
bc5f742e7e27a0f779efffb180a71a75817c23cb5a34a719cb34175a4d1186ee
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "BC5F742E7E27A0F779EFFFB180A71A75817C23CB5A34A719CB34175A4D1186EE"
Last-Modified: Sun, 25 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4050
Expires: Wed, 28 Sep 2022 09:21:51 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.jp/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=efecb9f034a6431786cd56b6af08a5b8-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=HUB8OeJtqBMD8EVyB8KebuI6cG1fcKdLV1ZHhzD9iaI-1664352861-0-AQXoK8f5pVFsaFlsANrIhlAlxIiMtox1qZu9vq9CyFOQjUUqRd7QNvgjSzdQG/50Y+oV/hPfSiwvWzUX7sM/HgU=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.jp; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0668edd70b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ec1483aed5ae38c88ea59806b4017dc7
ca649fad14be8bb1d48ef45e8ff2e4e4ba6fb5bf
92bcca2b36662b5a3fbd81b55b82474cbc15961a7e337a94d5e138ab35da8489
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6BAB)
Content-Length: 280
www.omio.si/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.si
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=3a20266a9caa4efd9521f1244a08e900-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=EAAV2N3OXZoHJAXCY9IesbyrQ2jGqlfsOiIVzIkIhiI-1664352861-0-AbAiMNunkGCAdKLoK3NJnO+lfvsa/gTez52If9LWR4F/ENXobFk6rd44NczrBPyd2UOPC8LWWZ3g6LehCtWwUPk=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.si; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0668d940b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b7324a1c5e2da0a6abe72001c8b37fe
1538cb7c20c9fd164dd1e610b6fd1227a06e31d3
7247eec98a236f82a0eaf6bdafa8a0c25023c0b8b86832a44cfcdc52aafeafa3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 23bd65fd463e6d751dec5c5bbd7284c7
13d3de4170ed76ed1178f836d26388b9e35dea48
2e5d45a1acb1b4354bcf9a33a6355437552143234778fc68dfab1994379e0b36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2551
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 07:31:50 GMT
Server: ECS (amb/6B8D)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 0a12fc60329228d7cb6efd07abbe6640
a3091109ce9c979c87c7e278e87a75c40b56f76f
731797c75a1b53a9c7f8433932efac029bfb0681fd3af28ef3a9c0c8cbd1ef4b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "731797C75A1B53A9C7F8433932EFAC029BFB0681FD3AF28EF3A9C0C8CBD1EF4B"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13762
Expires: Wed, 28 Sep 2022 12:03:43 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash e99fab14cbaf78b40fa157fcfeee207a
9593f5005d456c9c009b0d61b22e2e7fb4ba5b57
2cce028427f9e372de55ee7a029e41c1a1af50d0291435dc8c3975535a5b46b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.omio.dk/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=0fbb54ee3f834d50a8423524ea6c88a6-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=b9MAcbcYZNfjfjV_0RtjQJkco6ADJCiZfpl7hEss1KA-1664352861-0-Aah7ISamp6bQEwkoOXglpHGA9i7EM7W4U8pIPEJPk4QyE6verAezkqaI1cdX7c2f/LhECPmEDtqCrD5kwFint7s=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.dk; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06695b530b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash a9790c67ff6d105c462325048293e1e2
74b7eb3d7aab543abf4f792fd39523d948bd37a8
1823a9ea3790f119bc208fc761d91e6dcb7d9f86183eae952046b6412dae12a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "1823A9EA3790F119BC208FC761D91E6DCB7D9F86183EAE952046B6412DAE12A5"
Last-Modified: Wed, 28 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17585
Expires: Wed, 28 Sep 2022 13:07:26 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash cd4edbd71cc27eef2b21c4d2043fd01b
75e73357460d2e4d5b39c1df1bc34990641e781f
76238623452633247124aa91f2e5dc79e9f7ca295a6cceff37caea5c31fc4afa
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "76238623452633247124AA91F2E5DC79E9F7CA295A6CCEFF37CAEA5C31FC4AFA"
Last-Modified: Sun, 25 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13829
Expires: Wed, 28 Sep 2022 12:04:50 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.ru/masapidro/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=b6d2eb6717874096bd440d90f76fbbc4-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=8ejIkyrKlGB8qa9BfmGJNQUP_683x.pU_0qpk.7HZYY-1664352861-0-AVusR74jFqjh96XS4ogyWpp+U0ToSnK62+1jlh49F3jRCHNDhhuLUPh7+Fqqy0z4raf+DmzeKmG+qbb91b8pFt4=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.ru; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0669bcf31bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/z/src=undefined;type=homep0;cat=01_ho0;ord=7658113799495;gtm=2wg9q0;auiddc=*;u12=;~oref=https%3A%2F%2Fwww.omio.com%2F%3Fclickid%3D3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0%26irgwc%3D1%26utm_campaign%3D1987239%26utm_source%3Daffiliate_ir_Affnet%2520Marketing%2520Media%2520PVt.%2520Ltd.%26irmptype%3Dmediapartner%26ircid%3D7385%26iradname%3DDiscounting%2520Tracking%2520Link
200 OK 42 B URL HTTP/2 adservice.google.com/ddm/fls/z/src=undefined;type=homep0;cat=01_ho0;ord=7658113799495;gtm=2wg9q0;auiddc=*;u12=;~oref=https%3A%2F%2Fwww.omio.com%2F%3Fclickid%3D3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0%26irgwc%3D1%26utm_campaign%3D1987239%26utm_source%3Daffiliate_ir_Affnet%2520Marketing%2520Media%2520PVt.%2520Ltd.%26irmptype%3Dmediapartner%26ircid%3D7385%26iradname%3DDiscounting%2520Tracking%2520Link
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/z/src=undefined;type=homep0;cat=01_ho0;ord=7658113799495;gtm=2wg9q0;auiddc=*;u12=;~oref=https%3A%2F%2Fwww.omio.com%2F%3Fclickid%3D3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0%26irgwc%3D1%26utm_campaign%3D1987239%26utm_source%3Daffiliate_ir_Affnet%2520Marketing%2520Media%2520PVt.%2520Ltd.%26irmptype%3Dmediapartner%26ircid%3D7385%26iradname%3DDiscounting%2520Tracking%2520Link HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://undefined.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 08:14:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.omio.co.kr/masapidro/
200 OK 0 B URL HTTP/2 www.omio.co.kr/masapidro/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /masapidro/ HTTP/1.1
Host: www.omio.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-length: 0
cache-control: no-cache
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: marketing-sale-pixel-dropper.masapidro.svc.cluster.local:3210/*
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=7a19a77823294cee8ecf98a7d62028cd-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=c2.FIC3ODP1_GLJw3wi10CFwR9m9t1HT9Ns1zaauNco-1664352861-0-AVGlgkXlu+SbGi0jIhg5JF8oRBA/Q+8D5B6aS6Nn210Bhf2/qmMEsJqXjjpHvigD/u1ILjcHCp9e8KSLODSOo+o=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.co.kr; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0669bf2e1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash aad58967a6e3d7822d300fde13ccaf85
31e858a7871196219124bcb9b04a67b997b70791
d483dd2396bff7f03b6e81d0fd9f8d10dd510a0a02f02226f4d524e34c980887
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 27
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 08:13:54 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash e9e802cb2afc258cce308f806206e43b
dd2017d14d066812096d4a340bbeda145a0207c4
6ff0a2d8648110c768edabc5f9e6ce256543341f12b6a18c8e0c3b406c27b33b
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "6FF0A2D8648110C768EDABC5F9E6CE256543341F12B6A18C8E0C3B406C27B33B"
Last-Modified: Sun, 25 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14790
Expires: Wed, 28 Sep 2022 12:20:51 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash ce5ca59d9c4161221732a4c7a09e9c89
aeb1306f48a67af70464fc261d59d9c8a3a1286b
9c65b4c1ff22f6cd66f151787caa3c36d8edd35c3be1634ab6ef14baf5cfbf22
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "9C65B4C1FF22F6CD66F151787CAA3C36D8EDD35C3BE1634AB6EF14BAF5CFBF22"
Last-Modified: Tue, 27 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14844
Expires: Wed, 28 Sep 2022 12:21:45 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9fadf673738f339bdd0fdc11980fc776
1bad4924a3f826bfe827a67ae82c0f42e7bef44c
2a0c4087c0f171915f1ba1f3094becb719e96befc7b97357b55452d0d806fba5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2A0C4087C0F171915F1BA1F3094BECB719E96BEFC7B97357B55452D0D806FBA5"
Last-Modified: Tue, 27 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Wed, 28 Sep 2022 11:09:14 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 3af6a6b0cc3be394cb1702aecea1a1d9
c2a2447a204d7c6d4d79d9401b699a37a14183f2
1db3d3af4579929b46749c245dcde3947e8384556bdd951b330d00eaebd3d9f2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1DB3D3AF4579929B46749C245DCDE3947E8384556BDD951B330D00EAEBD3D9F2"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10455
Expires: Wed, 28 Sep 2022 11:08:36 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ff74ef93260c2cece80f854c01748195
0bbe2d534403b006142ca0f4432b538a505b3265
7604e58631d6c9952980c8e9295fe14dace8f2b368e66ee756b30cf3d8c27cc9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7604E58631D6C9952980C8E9295FE14DACE8F2B368E66EE756B30CF3D8C27CC9"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14843
Expires: Wed, 28 Sep 2022 12:21:44 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash c6977efc652619779d321e61b74eabbc
a43472425886d6b3180d1865cb713526784f7c25
8c0cf4534958d2ad1fac5ebf3f18895ed0db16556b65c4f2606b20ca92a00241
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Last-Modified: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash f317e401deccad911b7de704f87f8156
61a50b8b13b211610adcdbec0d406575e68af727
5e33a75599c7d9bc428488a9c4d0f95a5ce392dd05f029bbff4181eb52a70198
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6B91)
Content-Length: 280
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 63de76ad55790be291ab7fd9e196c858
942462b470e50c886a2fd66699ac095673515a82
bc5f742e7e27a0f779efffb180a71a75817c23cb5a34a719cb34175a4d1186ee
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "BC5F742E7E27A0F779EFFFB180A71A75817C23CB5A34A719CB34175A4D1186EE"
Last-Modified: Sun, 25 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4050
Expires: Wed, 28 Sep 2022 09:21:51 GMT
Date: Wed, 28 Sep 2022 08:14:21 GMT
Connection: keep-alive
www.omio.com.ua/
200 OK 4.6 kB IP
Hash 231a1df43ba2200fee729a1a4722ef62
304c1472049df831cd2587f1afb83f118beace91
ef623588f96845b53016a06676a4c826811ba5981f96fc11346b5645f1a5bfc6
GET / HTTP/1.1
Host: www.omio.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.omio.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:21.654726353 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:21.917659811 +0000 UTC m=+17500.956320281
lps-proxy-total-latency: 262
lps-proxy-upstream: lps-platform
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=b60e0dea1aee44b0a1a3a0c24719fa1a-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
_omio_exp_v2=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; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=G7WCcrZIJWSiBsgUszOpuJ1rI5X9f.znotVt0KV4JDI-1664352861-0-AQfy/V0MGn8Qhwp4gS1VgyD1rr7qME2ePyAms0RfnQV+Wsj1G0LwzZUngUFfCKBAOv+X+QqaKCFkcxKngC8iHHA=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.com.ua; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06691fdbb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 560b5ee34ec5f15b0a9388e8d3ec6642
c865ef86b857287317367fe83af5f1769d38bfa6
fb667f7aca2ab21e492addbfa5f6a59a92f1054801129ae7a81eeaf85088edfc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Server: ECS (amb/6BB1)
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:14:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.omio.ie/
200 OK 10 kB IP
Hash cca3f8c54986bf0b722425b27cf41931
0fed779b01e9b170b739e89c259becbd69f20b32
d337fb4bbcefe73a2f744f1bd1bc6aa1748069da0fc14420cd7282069c4bc067
GET / HTTP/1.1
Host: www.omio.ie
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.omio.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:22 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:21.776324623 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:21.986598516 +0000 UTC m=+17501.025258996
lps-proxy-total-latency: 210
lps-proxy-upstream: lps-platform
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=5b7409da88054370a7e07513234331fc-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
_omio_exp_v2=dGVzdC1kdW1teTpvbixQUC03MTQtSW5zdXJhbmNlLXRvZ2dsZS1sb2FkaW5nLWZlYXR1cmUtZmxhZzpvbixwcmljZS1icmVha2Rvd24tdWk6b24sZm9yY2UtaW5zdXJhbmNlLWRlY2lzaW9uOm9uLG5vLXNlcnZpY2UtZmVlLWxhYmVsLXRvZ2dsZTpvbixQUC0xMDI5LXJvdXRlcy1tYXJrdXA6QSxQUC0xMDI5LWVuYWJsZS1yb3V0ZXMtbWFya3VwOm9uLG16bi1hY2NvbW1vZGF0aW9uLWxpbms6b24sc2hvdy1tdWx0aXBsZS1pbnN1cmFuY2Utb2ZmZXJzOm9uLG16bi1ib3R0b20tbmF0aXZlLWFkczpvbixtem4tbmF0aXZlLWFkczpvbix0Y3Atc2hhcmUtaWNvbi12MTpvbixic3AtdXBzZWxsLXdpdGgtdm91Y2hlci12MTpjdHJsLGVuYWJsZS1ybi1ob21lc2NyZWVuLWlvcy0wOmN0cmwsbXpuLWFjY29tbW9kYXRpb24taG9tZS1zY3JlZW4tYWQtbWlncmF0aW9uOm9uLG16bi1hY2NvbW1vZGF0aW9uLWhvbWUtc2NyZWVuLXdpZGdldC1taWdyYXRpb246Y3RybCxtem4tYWNjb21tb2RhdGlvbi1saW5rLWFwcDpvbixTUEwtMzg2Ni1SVC1wcmljaW5nLXNwbGl0OmN0cmwsbXpuLWFjY29tbW9kYXRpb24taG9tZS1zY3JlZW4td2lkZ2V0LXJlY2VudC1zZWFyY2g6b24sdGNwLXNoYXJlLWljb24tdjI6b24sb21pby1mbGV4LW9uLXRjcDpvbixiYXltYXJkLXV4LWltcHJvdmVtZW50czpvbixtem4tc3JwLXdpZGdldC13ZWI6b24scHJpY2UtYWxlcnQtdWk6Y29udHJvbCxtem4taG9tZS1wYWdlLXRvZ2dsZS1tdWx0aXBsZS1wYXJ0bmVyczpvbixtem4tYWNjb21tb2RhdGlvbi1saW5rLXdlYi10Y3A6b24=; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=i7DSQ8IAykSjnAudD0A3LU6xMdP2Y25w.046uvchF4g-1664352862-0-AdwhCTEEXEpC716pWWh0XzPyLT5/XviZnp+mhagTX7cZq1Dv8YN7ogbh5WUMMY6JGhjhgRwj0ynTr5MX8D3FSww=; path=/; expires=Wed, 28-Sep-22 08:44:22 GMT; domain=.omio.ie; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:22 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0669cd28b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1fa8cb4f4be5057788cd1a2a4d0e76d6
1aec1d67a36867bee8069a144fb1b0d95ff2cb54
5193131db8040ef254554d59109002ec7b8cfc2eab1e872b63e5f65db7cf5105
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5944
x-amzn-requestid: 040b4452-4120-4ae5-9ad2-c5b341abbb13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI34BFdmIAMFmew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cff-103adde82b57535e4f3fb16a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:37:04 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: q03mXCSikJcsTBGqk1Xq7452EiDz4t9PFbp5Qj4xwobiFgqtPwGCBw==
via: 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 23:06:54 GMT
age: 32850
etag: "1aec1d67a36867bee8069a144fb1b0d95ff2cb54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.omio.hu/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.omio.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.omio.com/
Connection: keep-alive
Cookie: __cf_bm=ID1tTB2PjRSW6jWEtn1.umrdoYnHL7FJdL_gjRqwywI-1664352861-0-AbSlMzGXiSrhcLAy3oDktD99VFWwzAWMh9Obre2AHtKTePvR5Gop/XX7NEjV/pdHwk9dHhk+FDayfO+v5WWM8Qs=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:21.429259999 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:21.67178287 +0000 UTC m=+55039.985820927
lps-proxy-total-latency: 242
lps-proxy-upstream: lps-platform
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=318783f63777483fbed4bce43500e5b0-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
_omio_exp_v2=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; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0667bdfeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.com/?clickid=3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0&irgwc=1&utm_campaign=1987239&utm_source=affiliate_ir_Affnet%20Marketing%20Media%20PVt.%20Ltd.&irmptype=mediapartner&ircid=7385&iradname=Discounting%20Tracking%20Link
200 OK 0 B URL HTTP/2 www.omio.com/?clickid=3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0&irgwc=1&utm_campaign=1987239&utm_source=affiliate_ir_Affnet%20Marketing%20Media%20PVt.%20Ltd.&irmptype=mediapartner&ircid=7385&iradname=Discounting%20Tracking%20Link
IP
GET /?clickid=3R5TL-z4zxyNU1AXoSTPUU5XUkDTMS1ND1MORM0&irgwc=1&utm_campaign=1987239&utm_source=affiliate_ir_Affnet%20Marketing%20Media%20PVt.%20Ltd.&irmptype=mediapartner&ircid=7385&iradname=Discounting%20Tracking%20Link HTTP/1.1
Host: www.omio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:19 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:19.108329849 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:19.329796642 +0000 UTC m=+55037.643834699
lps-proxy-total-latency: 221
lps-proxy-upstream: lps-platform
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=957e32b568324ef1a4850b78120d1ebf-v3;path=/;Expires=Thu, 28-Sep-23 08:14:19 GMT;Max-Age=31536000;secure
_omio_exp_v2=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; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCX|YzQCX; path=/; HttpOnly; Secure
__cf_bm=byuRmfcSxjhmF9DFqLk_dCFsAAoubDIh2bWSJtcGaO4-1664352859-0-AU08TFruEd+SIaFtVx9M/qK6AnQM45g3aD6/zfK54TYXlp5bl6m6mQaNBDoIwHD9Xw+WhailSC3fKlPndLLJ4Uah5RZf4SjpfZGV3f6Bz4bW; path=/; expires=Wed, 28-Sep-22 08:44:19 GMT; domain=.omio.com; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9SMd3bUoN1ed; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:19 GMT; HttpOnly
server: cloudflare
cf-ray: 751b06592e22b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.com.br/masapidro/
301 Moved Permanently 0 B URL HTTP/2 www.goeuro.com.br/masapidro/
IP
GET /masapidro/ HTTP/1.1
Host: www.goeuro.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 28 Sep 2022 08:14:21 GMT
location: https://www.omio.com.br/
cache-control: max-age=3600
expires: Wed, 28 Sep 2022 09:14:21 GMT
set-cookie: __cf_bm=QR_fhL4UxtrQFfqHiRReehkU905n0NN.RpTMnjYYSiw-1664352861-0-ARDu1ZXlSPWMyfc3r9k2nnuKYypFl/iPk834q0wZ6QR9vSJ1+8PNHTbNzehE4TIJ+OqAP2+O9G0lnAUJQGRlCuQ=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.com.br; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b06686dd50b31-OSL
X-Firefox-Spdy: h2
www.goeuro.ie/masapidro/
301 Moved Permanently 0 B IP
GET /masapidro/ HTTP/1.1
Host: www.goeuro.ie
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 28 Sep 2022 08:14:21 GMT
location: https://www.omio.ie/
cache-control: max-age=3600
expires: Wed, 28 Sep 2022 09:14:21 GMT
set-cookie: __cf_bm=jVq11QS0.EBQcHx1pQh15P_wKg1koVBp8VzeWTFuUK0-1664352861-0-AYaAappZCiAWQ6z6D8pAoeAuxOeRGBvIQBwLDIDFf47weeJ1Zt/oQQoEY24Qi1FJ4aUKZpIKxHfZTN7chz0oXLA=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.ie; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b06667c0e0b31-OSL
X-Firefox-Spdy: h2
www.goeuro.hu/masapidro/
301 Moved Permanently 0 B IP
GET /masapidro/ HTTP/1.1
Host: www.goeuro.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 28 Sep 2022 08:14:21 GMT
location: https://www.omio.hu/
cache-control: max-age=3600
expires: Wed, 28 Sep 2022 09:14:21 GMT
set-cookie: __cf_bm=gBNLQ.iiLxCYIn7VEivpIPH2GgrOaURFWsGq7tO56nw-1664352861-0-AbvR4Sqv4mktXEkXzU1PDUvyA9zSgTrtOy5CH3FSGTE5fj55pSitnLvl2ahLA4t5Nr8ihOr/4WTawPaWQ39usBg=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.hu; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b066769a90b51-OSL
X-Firefox-Spdy: h2
www.omio.com.br/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.omio.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.omio.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:21 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:21.642218414 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:21.851259067 +0000 UTC m=+17500.889919557
lps-proxy-total-latency: 209
lps-proxy-upstream: lps-platform
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=7e6c83c27fc741eda1fd789b4237e9e9-v3;path=/;Expires=Thu, 28-Sep-23 08:14:21 GMT;Max-Age=31536000;secure
_omio_exp_v2=dGVzdC1kdW1teTpvbixQUC03MTQtSW5zdXJhbmNlLXRvZ2dsZS1sb2FkaW5nLWZlYXR1cmUtZmxhZzpvbixwcmljZS1icmVha2Rvd24tdWk6b24sZm9yY2UtaW5zdXJhbmNlLWRlY2lzaW9uOm9uLG5vLXNlcnZpY2UtZmVlLWxhYmVsLXRvZ2dsZTpvbixQUC0xMDI5LXJvdXRlcy1tYXJrdXA6QixQUC0xMDI5LWVuYWJsZS1yb3V0ZXMtbWFya3VwOm9uLG16bi1hY2NvbW1vZGF0aW9uLWxpbms6b24sc2hvdy1tdWx0aXBsZS1pbnN1cmFuY2Utb2ZmZXJzOm9uLG16bi1ib3R0b20tbmF0aXZlLWFkczpvbixtem4tbmF0aXZlLWFkczpvbix0Y3Atc2hhcmUtaWNvbi12MTpvbixic3AtdXBzZWxsLXdpdGgtdm91Y2hlci12MTpvbixlbmFibGUtcm4taG9tZXNjcmVlbi1pb3MtMDpjdHJsLG16bi1hY2NvbW1vZGF0aW9uLWhvbWUtc2NyZWVuLWFkLW1pZ3JhdGlvbjpvbixtem4tYWNjb21tb2RhdGlvbi1ob21lLXNjcmVlbi13aWRnZXQtbWlncmF0aW9uOmN0cmwsbXpuLWFjY29tbW9kYXRpb24tbGluay1hcHA6b24sU1BMLTM4NjYtUlQtcHJpY2luZy1zcGxpdDpvbixtem4tYWNjb21tb2RhdGlvbi1ob21lLXNjcmVlbi13aWRnZXQtcmVjZW50LXNlYXJjaDpvbix0Y3Atc2hhcmUtaWNvbi12MjpvbixvbWlvLWZsZXgtb24tdGNwOm9uLGJheW1hcmQtdXgtaW1wcm92ZW1lbnRzOmN0cmwsbXpuLXNycC13aWRnZXQtd2ViOm9uLHByaWNlLWFsZXJ0LXVpOm9uLFNQTC0zOTk5LW51bWJlci1vZi1zZWFyY2gtcmVzdWx0czpjdHJsLG16bi1ob21lLXBhZ2UtdG9nZ2xlLW11bHRpcGxlLXBhcnRuZXJzOm9uLG16bi1hY2NvbW1vZGF0aW9uLWxpbmstd2ViLXRjcDpjdHJs; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=ndFvXROW90i4K7u.GY5z8pEwkFdPflfYLiiAZJdy7v0-1664352861-0-AXUHNK4XC4oGvs4Z9koRJQnDN+Hs6wwHYchgSBeY3Mg32eb+lAXz+mG2v8bT/MS3BuFA2xEzcYBIw0XMl5gBifQ=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.com.br; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; HttpOnly
server: cloudflare
cf-ray: 751b0668b8370b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.sk/masapidro/
301 Moved Permanently 0 B IP
GET /masapidro/ HTTP/1.1
Host: www.omio.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 28 Sep 2022 08:14:21 GMT
location: https://www.omio.cz/
cache-control: max-age=3600
expires: Wed, 28 Sep 2022 09:14:21 GMT
set-cookie: __cf_bm=sgL06Ep15w7NJcyUIi5AqiiMN7bISa0Chq4AtU45dTY-1664352861-0-ARsgmbKh5K/F87NF4OC+nolmSCYflZNZgHih2q2ojHx5by6dkLPuBIgrndyH070L+t+rwWSpn82lFH5Nq3/dyiQ=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.omio.sk; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b0668dc121bfe-OSL
X-Firefox-Spdy: h2
www.omio.ru/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.omio.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.omio.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:22 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:21.922430198 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:22.131181196 +0000 UTC m=+16357.431658835
lps-proxy-total-latency: 208
lps-proxy-upstream: lps-platform
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=6711ce3147c44d5cbbce7598225aa110-v3;path=/;Expires=Thu, 28-Sep-23 08:14:22 GMT;Max-Age=31536000;secure
_omio_exp_v2=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; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=uzMPX.y7xZD4yazOGhYABeJsInjULq4wrVr4P6kBL8c-1664352862-0-AVUOIeTmZxdocFcFta6nDU5bfQ61xMShKX5fgm3u7OcVkztmR+Ax91VVJGQo0ilXArKt82HgcBtvd/kU9dAM8K4=; path=/; expires=Wed, 28-Sep-22 08:44:22 GMT; domain=.omio.ru; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:22 GMT; HttpOnly
server: cloudflare
cf-ray: 751b066ace111bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.omio.cz/
200 OK 0 B IP
GET / HTTP/1.1
Host: www.omio.cz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.omio.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:22 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
lps-proxy-request-received: 2022-09-28 08:14:22.01660489 +0000 UTC
lps-proxy-response-prepared: 2022-09-28 08:14:22.23234292 +0000 UTC m=+25951.919207556
lps-proxy-total-latency: 215
lps-proxy-upstream: lps-platform
x-ingressv2: yes
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: _go_client_id=1b2be710d4084ac1b0c7a29947c83dde-v3;path=/;Expires=Thu, 28-Sep-23 08:14:22 GMT;Max-Age=31536000;secure
_omio_exp_v2=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; max-age=86400; path=/
X-Ingress=k8s-prod-nl-1|YzQCY|YzQCY; path=/; HttpOnly; Secure
__cf_bm=WiADPm0u7pRQq1VkzSUkD8kqu3rsWbMewIAS4.J..To-1664352862-0-AfDFybgjeYsBf1V719kjHQJIg9P7o868JYO+muamjtOse1HjQa4O0qZuRJQZ3RLiBrn7rF+10J+N1JNNTH+A5tQ=; path=/; expires=Wed, 28-Sep-22 08:44:22 GMT; domain=.omio.cz; HttpOnly; Secure; SameSite=None
__cflb=0H28uu4Zwq5kfu5J8d1tUYfBcWX35yf9Sh2Pd6SMEBf; SameSite=Lax; path=/; expires=Wed, 28-Sep-22 08:44:22 GMT; HttpOnly
server: cloudflare
cf-ray: 751b066afd38b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn-goeuro.com/static_content/web/content/lps/AppCTA.svg
200 OK 0 B URL HTTP/2 cdn-goeuro.com/static_content/web/content/lps/AppCTA.svg
IP
GET /static_content/web/content/lps/AppCTA.svg HTTP/1.1
Host: cdn-goeuro.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 08:14:19 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsgCXNLViNPrSlv6GmBDedu_JfyCr83v9ua4PEQb3qY1B4hs6vNz346hGT2vW0UUdju-VYtvy_UXL_Ukk-I2ejmzp2Ave4P
x-goog-generation: 1630595816710106
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 57342
x-goog-meta-goog-reserved-file-mtime: 1630595548
x-goog-hash: crc32c=5GUmlg==, md5=M9vmGGIA/mBSVn5E8wJv/A==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 06 Oct 2022 08:14:19 GMT
cache-control: public, max-age=691200
last-modified: Thu, 02 Sep 2021 15:16:56 GMT
etag: W/"33dbe6186200fe6052567e44f3026ffc"
strict-transport-security: max-age=0;
x-frame-options: SAMEORIGIN
x-xss-protection: 1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3390
set-cookie: __cf_bm=ppKpJ8MaD6aSL9lnQOhvXoCslfUsQPVAn66LvVDe7e0-1664352859-0-AXY2pnRAWhmmGcTup+3flo4YJC2M82PBOylyhc/SbACxzb9wSe+jCvJRGeebc1//dkk+0SF5iFbqKBi2S2+B431PIM8J4TcEajd2ZGOsd7Dw; path=/; expires=Wed, 28-Sep-22 08:44:19 GMT; domain=.cdn-goeuro.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b065c9b7d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.goeuro.com.ua/masapidro/
301 Moved Permanently 0 B URL HTTP/2 www.goeuro.com.ua/masapidro/
IP
GET /masapidro/ HTTP/1.1
Host: www.goeuro.com.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.omio.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 28 Sep 2022 08:14:21 GMT
location: https://www.omio.com.ua/
cache-control: max-age=3600
expires: Wed, 28 Sep 2022 09:14:21 GMT
set-cookie: __cf_bm=disoJmg2QuILRNfNFs4qxKnh67WsmxoJzujszZnKTUY-1664352861-0-ARJDtapU9oDGABN5x1YkmsLINO30/MRrQ1a4DUakvefEiX1yajvo90i+N8eHlSU/BDn6+lm//Z+4U/u2PGNJA0E=; path=/; expires=Wed, 28-Sep-22 08:44:21 GMT; domain=.goeuro.com.ua; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 751b066579990b65-OSL
X-Firefox-Spdy: h2
45.33.18.44
104.18.17.237
18.202.12.61
23.36.77.32
93.184.220.29