www.worldnomads.com/Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance
104.18.13.224301 Moved Permanently 0 B URL HTTP/1.1 www.worldnomads.com/Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance
IP 104.18.13.224:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Dec 2022 13:54:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 29 Dec 2022 14:54:14 GMT
Location: https://www.worldnomads.com/Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance
Set-Cookie: __cf_bm=K66p9VT9LVkdLVWIUy9IRPLBRTHn3wZuZ4cj9REtifY-1672322054-0-Aa0WzqTgGgb62Wn8rOLb98Jubt0YZD5u6YYJluvSpYsMVPfEoMyP0+VdyqLRN5AuofnuiUWwWq93g33U2el8Lm4=; path=/; expires=Thu, 29-Dec-22 14:24:14 GMT; domain=.worldnomads.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781306c9debbb4f1-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 259d3eba2ac4ea32f0410a59bd01c18a
ab02cd69e6c04e3842ad1778fb0daa6d0e86fddc
0d6ec941dac6d97a0b24c0cf00a5642a4edda68ae5ec8b3019d1ec05f40d2281
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D6EC941DAC6D97A0B24C0CF00A5642A4EDDA68AE5EC8B3019D1EC05F40D2281"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13223
Expires: Thu, 29 Dec 2022 17:34:37 GMT
Date: Thu, 29 Dec 2022 13:54:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cd2bda30513692aa11a672c6a599935d
a944c3aa26b461063194a4bb95ce427d23a32d03
d975d1eab40c9fe4986ae0675d79e4f982eb9c0e2f503ca72b3bdf0ec9e7dfdc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D975D1EAB40C9FE4986AE0675D79E4F982EB9C0E2F503CA72B3BDF0EC9E7DFDC"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10753
Expires: Thu, 29 Dec 2022 16:53:27 GMT
Date: Thu, 29 Dec 2022 13:54:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 29 Dec 2022 13:46:51 GMT
content-type: application/json
age: 443
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 428881081ad357fb55af33ebf9d12c16
29b7be72f76da07db4a03fb1bc57ffe16d520a22
9adff7f91b147b0d93166bc4ece0dd31fd19fd8b2c269a6a596a1e902f49a1fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9ADFF7F91B147B0D93166BC4ECE0DD31FD19FD8B2C269A6A596A1E902F49A1FE"
Last-Modified: Wed, 28 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8171
Expires: Thu, 29 Dec 2022 16:10:25 GMT
Date: Thu, 29 Dec 2022 13:54:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 297uWfsiuneFTI8mjcqAi7HYIOXyLj1Bq0h5FkAGagANMeoGv0dBk/3l4PBGVF5TcbJ2zoiUL3o=
x-amz-request-id: QK9TM7HVSMX9AAQE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 29 Dec 2022 12:56:36 GMT
age: 3458
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 9dbaa64e94962fa24b574494780f62fa
ef39af2bf3af1d64498f53db4d3a02b3c90cd812
f9bd5d78ebe37c0364bdea7ded87edac004708497842ed075b67982307bc6528
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5303
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:15 GMT
Etag: "63ac5e66-116"
Last-Modified: Thu, 29 Dec 2022 12:25:52 GMT
Server: ECS (amb/6BB6)
X-Cache: HIT
Content-Length: 278
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Dec 2022 13:54:15 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 29 Dec 2022 13:08:08 GMT
age: 2767
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0a08dc71eb7ba3512abb4d29505eb034
e66404bda80b355bae30b0d4db3daa193a6e4276
357891f99263d30eaded85985217d9627cd60369ee8d01a7eacdb2d0f2d8b2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5451
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:15 GMT
Last-Modified: Thu, 29 Dec 2022 12:23:24 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.160.51.228101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.160.51.228:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fb+5c6DwFqKHQMl7EXBBpw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6NOZlQ1vjbkC6wRSiZVUhVMX7N4=
www.worldnomads.com/Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance
104.18.13.224302 Found 367 B URL HTTP/2 www.worldnomads.com/Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance
IP 104.18.13.224:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 74086c791f5385954fdd30ff6cf55b2b
d746939bbb6c5ba249c295144345b46662745caa
066841da838d8f68869d3464191df52e3a359da8e04fed4d49abe1e7520f1033
GET /Turnstile/AffiliateLink?partnerCode=trvlcllcting&source=link&utm_source=trvlcllcting&utm_content=link&path=https://www.worldnomads.com/adventure-travel-insurance HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 29 Dec 2022 13:54:16 GMT
content-type: text/html; charset=utf-8
content-length: 367
location: https://www.worldnomads.com/adventure-travel-insurance?affiliate=trvlcllcting&subId=link&affiliateTrackingId=b66db1a83dda4d5982e673ca203c2e92&utm_source=trvlcllcting&utm_medium=affiliate&utm_campaign=Affiliate&utm_content=link
cache-control: private
content-security-policy: object-src 'none'; script-src 'nonce-2zkIYVRvJow5oFGXibW5Z7Ms' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none';
x-frame-options: SAMEORIGIN
access-control-allow-origin: *
access-control-allow-headers: Content-Type
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
cf-cache-status: DYNAMIC
set-cookie: AWSALB=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; Expires=Thu, 05 Jan 2023 13:54:16 GMT; Path=/
AWSALBCORS=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; Expires=Thu, 05 Jan 2023 13:54:16 GMT; Path=/; SameSite=None
CultureCode=; path=/; secure
CustomUserSessionId=95a0b950-199b-4d39-bcae-620e9206f93c; expires=Thu, 29-Dec-2022 14:14:16 GMT; path=/; secure; HttpOnly
affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; domain=worldnomads.com; expires=Mon, 27-Feb-2023 13:54:16 GMT; path=/; secure
PartnerCode=trvlcllcting; domain=worldnomads.com; expires=Mon, 27-Feb-2023 13:54:16 GMT; path=/; secure
affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; domain=worldnomads.com; expires=Mon, 27-Feb-2023 13:54:16 GMT; path=/; secure
affiliate_subid=link; domain=worldnomads.com; expires=Mon, 27-Feb-2023 13:54:16 GMT; path=/; secure
PartnerSource=link; domain=worldnomads.com; expires=Mon, 27-Feb-2023 13:54:16 GMT; path=/; secure
__cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; path=/; expires=Thu, 29-Dec-22 14:24:16 GMT; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
__cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; path=/; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 781306cc0e1e0b61-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13446
Expires: Thu, 29 Dec 2022 17:38:23 GMT
Date: Thu, 29 Dec 2022 13:54:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2783127a63c78cb5ac02e1a31631bfca
a26af5a37bbb43d4258282640749ced026ba9560
cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13446
Expires: Thu, 29 Dec 2022 17:38:23 GMT
Date: Thu, 29 Dec 2022 13:54:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d5cced3-ee4c-4804-80dc-584edd53c321.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d5cced3-ee4c-4804-80dc-584edd53c321.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffc1e01c2625e4cc8daff9cdb97e6419
d19e66f29d5109434382cd32bf9b2241e78cfad7
52c79fd4a79b7892ddd90a2294d200e5fdfce733d57e8416d248e1316405f627
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d5cced3-ee4c-4804-80dc-584edd53c321.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7413
x-amzn-requestid: d6a53b1a-bd52-4fd5-939d-82e00b6481b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0yuLFKCoAMFwcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64c0-2152131e1043802c428082bb;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sDMe0v5BC-1UzhCCMUov8D6VlwJH8k_vXD6Q2URln-5GRp15nLho9w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 21:46:17 GMT
age: 58080
etag: "d19e66f29d5109434382cd32bf9b2241e78cfad7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26073be1-1851-4348-a892-ee39e3b6f635.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26073be1-1851-4348-a892-ee39e3b6f635.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9f3c92ff3db8e0ec87e86aa28346ea5
c4cc987d54675d9285b43954ab8f010e5a258d9e
94be9c845c6373424c519720e61e2a1397f7390028d43dcdbf536686a7740b6b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26073be1-1851-4348-a892-ee39e3b6f635.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9569
x-amzn-requestid: 13baa87a-0f57-48c7-940a-de8e06d60278
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkUiwFYmIAMFUuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4ce11-3cb3500473c3c28d694fd5ad;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 09jrhYwsh26t_Un3nHuTLOZMwln0vn-6fqUYvoelIAhuF6WIIwQ6jQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 21:41:53 GMT
age: 58344
etag: "c4cc987d54675d9285b43954ab8f010e5a258d9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4adb7268aa0a520dcee9f1d936d16dd
9364105419c6662123999ed11912de21ad32f6ba
6d593122db8b8514db4d3d0d0e6d037f57d39e5aab9a9f493fed359eb4b73b2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e77cad2-6b0d-46d1-a2e4-ce29f7cc173e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8505
x-amzn-requestid: de8ce29e-7947-4c4f-95f5-14efae45cfda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4p9MGW9IAMFqdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acf054-5cf23dcf7bdbd784373222a9;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 01:41:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kEM8R4PYVJN8BQXhr9w-osn4-pAjeVnOtinJu1yfvjc5sTEL6LqTeQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 01:51:39 GMT
age: 43358
etag: "9364105419c6662123999ed11912de21ad32f6ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46059ea9-17d4-4278-9387-8af033f275e1.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46059ea9-17d4-4278-9387-8af033f275e1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e100e2dc00534d3c6e4a4eccabd256d4
bb36fdbdd2ff78b5eac4becf508470d6f0a3512f
991a44a7aa774e41289f4b3ea2f13d0af69c86756d25763e81c274a9b3420e9a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46059ea9-17d4-4278-9387-8af033f275e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5687
x-amzn-requestid: 8fe763e5-63f9-4149-b494-4fe1298610f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4CXwGfTIAMFdlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acb0fe-5958069220e442433e1941ce;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 21:11:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MM0AxcUhyYGa6e8s4W_jU0ihtU8pu2geeyxouqllG8ZdZ8PcxPUdJg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 03:55:16 GMT
age: 35941
etag: "bb36fdbdd2ff78b5eac4becf508470d6f0a3512f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f065733-5f7b-4113-9f70-8e9738de50f7.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f065733-5f7b-4113-9f70-8e9738de50f7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db302f2c47edbbb185af9e4a96741d52
c616108fda3390ebd7f67926ba3e35a73b47135c
cc9e4fdb361624bb32511b195d4a1677e241502ba013b8f8a114ebb4956019ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f065733-5f7b-4113-9f70-8e9738de50f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6955
x-amzn-requestid: 59f34964-3642-4190-9edb-c2a1de006606
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhyXGHe0oAMFfSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3ca93-4acf45f93b24aebd33be5de1;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L4fg8oLUw2_pKOZNCh2YZi3_asUguQHaCtpPeCrUIYyVoAiwQlNqGg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Dec 2022 21:42:23 GMT
age: 58314
etag: "c616108fda3390ebd7f67926ba3e35a73b47135c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa04c7a62-2098-4ad1-ad79-eeb854075102.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa04c7a62-2098-4ad1-ad79-eeb854075102.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c45a2734abffd117a633d39d4fbff29
8c3c2b8d34ba6291307ddd43b625032118fa71e2
76aa0dc08d7f5755d7666f0e82e8d5ced9c84443e24048c5c6100825ed4fb963
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa04c7a62-2098-4ad1-ad79-eeb854075102.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6930
x-amzn-requestid: 261b7f75-c250-4443-b542-d46c8d75e164
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dyRonE1uIAMFwvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa6303-407e0c403bec2b4831067f40;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 03:14:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XZBmn_T0jP9yvtlHPtOsPNR2cfBLnYoUJVYhp7vI37B6xzFpkSEwEQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 07:35:10 GMT
age: 22747
etag: "8c3c2b8d34ba6291307ddd43b625032118fa71e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.worldnomads.com/adventure-travel-insurance?affiliate=trvlcllcting&subId=link&affiliateTrackingId=b66db1a83dda4d5982e673ca203c2e92&utm_source=trvlcllcting&utm_medium=affiliate&utm_campaign=Affiliate&utm_content=link
104.18.13.224302 Found 145 B URL HTTP/2 www.worldnomads.com/adventure-travel-insurance?affiliate=trvlcllcting&subId=link&affiliateTrackingId=b66db1a83dda4d5982e673ca203c2e92&utm_source=trvlcllcting&utm_medium=affiliate&utm_campaign=Affiliate&utm_content=link
IP 104.18.13.224:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 24ab6feb1f5d40c816505acbc0a9596f
12c9a00de6b6087f767bf5cc38ebaa7b182063b6
d8d9bf12446f181f558f5bd21e5266c24338322d940e4f1eb9bda44782b62864
GET /adventure-travel-insurance?affiliate=trvlcllcting&subId=link&affiliateTrackingId=b66db1a83dda4d5982e673ca203c2e92&utm_source=trvlcllcting&utm_medium=affiliate&utm_campaign=Affiliate&utm_content=link HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AWSALB=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; CultureCode=; CustomUserSessionId=95a0b950-199b-4d39-bcae-620e9206f93c; affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 302 Found
date: Thu, 29 Dec 2022 13:54:17 GMT
content-type: text/html; charset=utf-8
content-length: 145
cache-control: public, max-age=691200
expires: Fri, 06 Jan 2023 13:54:17 GMT
location: /travel-insurance/activities
pragma: no-cache
x-aspnet-version: 4.0.30319
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-generator: Orchard
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block;
access-control-allow-origin: *
access-control-max-age: 2592000
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-security-policy: default-src 'self' blob: *.brightcove.com *.crazyegg.com *.brightcove.net https: data: 'unsafe-inline' 'unsafe-eval'
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 781306d4cd8e0b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/wn-logos/wn-logo-keep-traveling.png
104.18.13.224200 OK 6.2 kB URL HTTP/2 media.worldnomads.com/wn-logos/wn-logo-keep-traveling.png
IP 104.18.13.224:0
File type PNG image data, 325 x 86, 8-bit/color RGBA, non-interlaced\012- data
Hash f95a55f3f11ed8af45674fe61304a027
055e07b8a97c92189fec52bb04b70e97cbe1a18d
ef9db17024c4c2cb9eb9f39ea86c872c8695d9a5beef256e0ac6d83a9258018d
GET /wn-logos/wn-logo-keep-traveling.png HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:17 GMT
content-type: image/png
content-length: 6190
x-amz-id-2: 0VLPuG6KQSmxrsC2uKKbOIt2n8qx6t78BOBheMHqUP6UwUEhlDPzaSpv6g1zTV4YLDU+/l+Iv28=
x-amz-request-id: S6K3GQT03DMZABE1
last-modified: Wed, 22 Jan 2020 23:08:31 GMT
etag: "f95a55f3f11ed8af45674fe61304a027"
cf-cache-status: HIT
age: 5556
expires: Fri, 06 Jan 2023 13:54:17 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306de3d7c0b61-OSL
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
143.204.55.80200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP 143.204.55.80:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
date: Thu, 29 Dec 2022 04:46:05 GMT
last-modified: Mon, 30 May 2022 14:38:02 GMT
etag: "5add60196e5f96a414fb4b9586764e5d"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UdIPP5TvPqgzgbJHTc6XIFpqclEdhuKhGXfS5nQ0qrwL7s1D2r0ybA==
age: 32894
X-Firefox-Spdy: h2
www.worldnomads.com/Themes/NomadsFoundation/scripts/wng.googleAnalytics.wnSpecificCustomDimensionsOrMetrics.js
104.18.13.224200 OK 1.2 kB URL HTTP/2 www.worldnomads.com/Themes/NomadsFoundation/scripts/wng.googleAnalytics.wnSpecificCustomDimensionsOrMetrics.js
IP 104.18.13.224:0
File type C source, ASCII text, with CRLF line terminators
Hash 27dd812ff621b26876784fdda8bdfedc
1d0fc494d7ce57dd9236e0920befbb81765ab3b8
5ce1eacd55535b174a359f13d1efeaf9aa582a07009242f64838ebb3719fb20d
GET /Themes/NomadsFoundation/scripts/wng.googleAnalytics.wnSpecificCustomDimensionsOrMetrics.js HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/travel-insurance/activities
Cookie: AWSALB=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; CultureCode=; CustomUserSessionId=95a0b950-199b-4d39-bcae-620e9206f93c; affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:17 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
etag: W/"dc99d59f810d91:0"
last-modified: Fri, 16 Dec 2022 02:44:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-generator: Orchard
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block;
access-control-allow-origin: *
access-control-max-age: 2592000
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-security-policy: default-src 'self' blob: *.brightcove.com *.crazyegg.com *.brightcove.net https: data: 'unsafe-inline' 'unsafe-eval'
cf-cache-status: HIT
age: 209200
expires: Sat, 28 Jan 2023 13:54:17 GMT
server: cloudflare
cf-ray: 781306de2d640b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
104.18.13.224200 OK 178 kB URL HTTP/2 brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
IP 104.18.13.224:0
File type Unicode text, UTF-8 text, with very long lines (43811)
Size 178 kB (177547 bytes)
Hash 6d3446e5d98d6b27a5392e2ddc901968
876a2a4036d550da8ac9d68b2de5fbb378daf7d2
122b0de703829f4042f1282c6419c64083ae8e2071fa25ed71a05dcdb829aef4
GET /source/wng-wn-styles-1.79.8.min.css HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: text/css
x-amz-id-2: eLN5JU8eFH/QQ/dkDeB/B1ee/M7WhxrglwttIOXwQmFGfses/ERdzAzPBcbfkCBx/NtooaNkiXs=
x-amz-request-id: E7MR6F3MQ6XF05QC
last-modified: Thu, 15 Sep 2022 00:28:11 GMT
etag: W/"66855c108fe554467dbdcf31f2e1c115"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306de2d690b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a76f9a6cacbb107da9d8d0b989936128
35f6bf4cf5d983f4f8edcb3e0db58cee5f2b552e
0a0ab2ab5964131b0bca0c63cc6ce85704e5d61b30c00555dbec6f399af6fedd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
components.worldnomads.com/v0.44.2/scripts/bundle.js
104.18.13.224200 OK 26 kB URL HTTP/2 components.worldnomads.com/v0.44.2/scripts/bundle.js
IP 104.18.13.224:0
File type C source, ASCII text, with very long lines (30909)
Hash cd87eb8039eca5c8ebf9124625120475
bab3e1aaef7ccee91bb6a1bbcce069289e9d9fb1
061a11ee0d782bf6cd618b417e26e03d7498afc7e5fddea242baefd00af3dee2
GET /v0.44.2/scripts/bundle.js HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: application/javascript
x-amz-id-2: eALZlYoqPM5hmTEE5PnlVqh4E0opiSlcboArTGkzI5NCq/0DVSsDhN+eO6oo/o5duz3Pr/CGDx4=
x-amz-request-id: S6K1CPDS60M6XV3S
last-modified: Wed, 09 Sep 2020 08:17:16 GMT
etag: W/"6c979c1f9d47f247108d23ba15e13e52"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306de3d7a0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2/assets/sprite.flag-icon.svg
104.18.13.224200 OK 168 kB URL HTTP/2 components.worldnomads.com/v0.44.2/assets/sprite.flag-icon.svg
IP 104.18.13.224:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (65536), with no line terminators
Size 168 kB (167953 bytes)
Hash 2566dddf13cb970d724ebaf127dc288f
31af7d0ce0a53302033feb835104001c647b2270
fb74815ef2f742868065ae422fbb8ef673811834c8c918b92618156219e24287
GET /v0.44.2/assets/sprite.flag-icon.svg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://components.worldnomads.com/v0.44.2/styles/friendly.css
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/svg+xml
x-amz-id-2: ed0KOxUmY3AzInzzu7MIsUVepV9Rl7Ikmbvnr1l6fzHi6l9bZtcF5JeppJsWMjo5+pihpPavoUU=
x-amz-request-id: 4P7NJMN9CY8ZDD17
last-modified: Wed, 09 Sep 2020 08:17:16 GMT
etag: W/"f92fd531432fb68a3a37eb30399f216f"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: HIT
age: 5558
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306e09fb60b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.swiftypecdn.com/install/v2/st.js
151.101.0.143200 OK 112 kB URL HTTP/1.1 s.swiftypecdn.com/install/v2/st.js
IP 151.101.0.143:0
File type ASCII text, with very long lines (32746)
Size 112 kB (112283 bytes)
Hash 9b8a5b1ad293d51f0d136ce585c717ff
94490a0f46259812b90148e036cddbe81e2fa221
83de990c7c4292122625e77f645a328ac2eee0c508cc8caec5b92855138b2a1b
GET /install/v2/st.js HTTP/1.1
Host: s.swiftypecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 112283
Content-Type: text/javascript
Cache-Control: max-age=300, public, max-age=300, public
ETag: "637fb88e-1b69b"
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Thu, 29 Dec 2022 13:54:18 GMT
Via: 1.1 varnish
Age: 8
X-Served-By: cache-bma1654-BMA
X-Cache: HIT
X-Cache-Hits: 2
X-Timer: S1672322058.493740,VS0,VE0
Vary: Accept-Encoding
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-insurance.jpg
104.18.13.224200 OK 17 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-insurance.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x209, components 3\012- data
Hash ddd59a65e028bc08dc75d05f5d39041f
8fb5ca48768eea5ec142c2ab21c1f783ae3d29a2
2c91ee43aae4dfdac7266d7e1992a455f6b3cfd10b0cabd52e08fb3f40793a53
GET /v0.44.2//assets/nav/wn-navpromo-insurance.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 16747
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "ddd59a65e028bc08dc75d05f5d39041f"
last-modified: Wed, 09 Sep 2020 08:17:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: 5WcnEspDXOb5xlkbmSqlTLTN9J529XlkWOgqrf0YysCT+eTB8CWozs+0TFD8WZ/eWRizi2PH2+I=
x-amz-request-id: 4P7W6CPJQCMDK7TY
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e09fba0b61-OSL
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-explore.jpg
104.18.13.224200 OK 15 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-explore.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x209, components 3\012- data
Hash 8018e0ee2463221ac3759e9650284954
aba86b373dcd2996d588b2b262b9352efb172940
8a756a537ec96ef536e945a336fe2355812ba0c9c2e5420f926949dccb1cb1ae
GET /v0.44.2//assets/nav/wn-navpromo-explore.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 14563
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "8018e0ee2463221ac3759e9650284954"
last-modified: Wed, 09 Sep 2020 08:17:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: unHGwdRgCxHAdsLy71djMDmZVw2YrZoNR4S6FlV/v/Lqq0+AJfdh7ugefjwUP9IdmXX5DvID2SY=
x-amz-request-id: DK226J5CYTE6ZFTH
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e09fc00b61-OSL
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-responsible.jpg
104.18.13.224200 OK 16 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-responsible.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x209, components 3\012- data
Hash 744c8cbe150df4a580609cd13b0d0841
a0059eeb4353ead825b2f7a5fab6f4d95e072d9c
a0947d8a3b2aa7c3874ad2a7a2190d12cd087e6f3b19922a3f77418fd89fdae1
GET /v0.44.2//assets/nav/wn-navpromo-responsible.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 15677
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "744c8cbe150df4a580609cd13b0d0841"
last-modified: Wed, 09 Sep 2020 08:17:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: QtmZ1He0q5fV8PYx7QmMQXmYrPpLvf9b4fBrrsTiWfJ/IGHmjyFZEd4ICwB0hEwJ5zw6lGTlkaM=
x-amz-request-id: DK2E6YYT02GB883J
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e0afc70b61-OSL
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-stories.jpg
104.18.13.224200 OK 14 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-stories.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x209, components 3\012- data
Hash d3de73a71da1cb3333c2a11bc14fd793
c8f40a45df3e9b2afe7ed8e6682c56aa7b665c95
5fd0f7cfc9c18047c1181882fb97516ad15f16e5a507e7e1351b0f675489bc9e
GET /v0.44.2//assets/nav/wn-navpromo-stories.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 14546
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "d3de73a71da1cb3333c2a11bc14fd793"
last-modified: Wed, 09 Sep 2020 08:17:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: Hf0EgL6Kez0qbHSl3tVlIO11z0yPJAfhi/FMzxo7KoDg9fdwprdtBkE1QUn90bztE3Zg8VUQm3A=
x-amz-request-id: BY1RV436DSJGWPMG
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e0afc20b61-OSL
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-safety.jpg
104.18.13.224200 OK 13 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-safety.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x209, components 3\012- data
Hash a1cb042593f2c4306b6cf7e39fcb46f6
5d1aa8cb2f0d7fe526935a932e41baf3ccb8ff52
b4189d4c3509ed82f2a8c8870b49503ef289814d580e19f202dd5032acc91a2f
GET /v0.44.2//assets/nav/wn-navpromo-safety.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 13207
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "a1cb042593f2c4306b6cf7e39fcb46f6"
last-modified: Wed, 09 Sep 2020 08:17:16 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: SFcnsFGmYkcgujd339tO3Z0wTrrjiw/+z0KwBaBzx7CxYFDcgx5Z1T5xYTSVVjGMxTnJT5X1kOI=
x-amz-request-id: 4P7MPT9VZW29Z99Y
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e09fbc0b61-OSL
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-create.jpg
104.18.13.224200 OK 12 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-create.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 320x209, components 3\012- data
Hash 7542baeebbbe8c8ff8db40317c3d8281
023e9685a40b80e718ba698fafb390688acfd618
4a1039cc3fb2abe6d47c2bd04b84923ccfb8f422103b52b84a5ff917966710da
GET /v0.44.2//assets/nav/wn-navpromo-create.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 12230
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "7542baeebbbe8c8ff8db40317c3d8281"
last-modified: Wed, 09 Sep 2020 08:17:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: 7AA1d0cCkDD88Fu7Un9z8xIXMFko14KUEC+fpvaIIJxU80x+oxxbGXHuatZvrfGXTcSMSkj7LSM=
x-amz-request-id: DFWD4S2SRA05YY1N
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e0afc40b61-OSL
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-help.jpg
104.18.13.224200 OK 13 kB URL HTTP/2 components.worldnomads.com/v0.44.2//assets/nav/wn-navpromo-help.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 320x209, components 3\012- data
Hash 42063a2a26e6b614e2e1d8cafb6ece98
3b4bbdbeea9fd442d1765bd628a717cadef0bd81
f4337797b62410616b9cb794be24017acb568e4079fd1f24e3128b3cb82cbb1d
GET /v0.44.2//assets/nav/wn-navpromo-help.jpg HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: image/jpeg
content-length: 12949
cf-bgj: h2pri
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
etag: "42063a2a26e6b614e2e1d8cafb6ece98"
last-modified: Wed, 09 Sep 2020 08:17:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
x-amz-id-2: zMiaFfz5mCo557YtqeWCM9Wh2rkjDf0ghBuGdmW6AL+YHP+jA1LkPTv4cmTW47ps/URC3jpASBg=
x-amz-request-id: DFW6AYJ26FR5JXD3
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
server: cloudflare
cf-ray: 781306e0afcc0b61-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 664a693a6adb15f7236b4f64df3aead4
b775e15578ebe11cf320db332c7f675a03fe1989
62b56a01829de09dd6ff63154f69be3bd9beb86bf6bb18b21a2ada8b6ff09d22
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=109121
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:18 GMT
Etag: "63aca34b-117"
Expires: Fri, 30 Dec 2022 20:12:59 GMT
Last-Modified: Wed, 28 Dec 2022 20:12:59 GMT
Server: nginx
Content-Length: 279
brand.worldnomads.com/source/fonts/proximanova/proximanova-regular.woff2
104.18.13.224200 OK 15 kB URL HTTP/2 brand.worldnomads.com/source/fonts/proximanova/proximanova-regular.woff2
IP 104.18.13.224:0
File type Web Open Font Format (Version 2), TrueType, length 15372, version 0.0\012- data
Hash b56d3a40e32e14460827bd42309a2fed
fa98b98e5c8e6d0e46bfa8e26af1194f3996d7e5
b1c7b29bc0449c071fe96d182426d66bb03c2b200493b2c6f21cfd5d55960323
GET /source/fonts/proximanova/proximanova-regular.woff2 HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://components.worldnomads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: font/woff2
content-length: 15372
x-amz-id-2: L7la2i2+hTKsrsw7oXSHtqwZUn+qUvDSWrD/7JVpIRWMWOX8lkp1aLIqEfCI0UpNhQZTRKxxZqg=
x-amz-request-id: K16328PDJ7KYJ01Q
last-modified: Wed, 29 Jun 2022 05:48:07 GMT
etag: "b56d3a40e32e14460827bd42309a2fed"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
access-control-allow-origin: https://www.worldnomads.com
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
set-cookie: __cf_bm=4EUwYDS38fMWm_LFQY9hYeYGgw1lGY_CNvc5mw5Aerc-1672322058-0-AZcAhgu4zEIvD/H1ZLZzZzfwyHHqDhvTk6VUfOIjcbGCmYIVSkmOdAyzPEfDtq2bF686kFlL0G9dx90QFu/tWLI=; path=/; expires=Thu, 29-Dec-22 14:24:18 GMT; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
__cfruid=a1059c97596e0b224e106f0eb8891dc4088187d6-1672322058; path=/; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 781306e0cfe40b61-OSL
X-Firefox-Spdy: h2
brand.worldnomads.com/source/fonts/proximanova/proximanova-bold.woff2
104.18.13.224200 OK 15 kB URL HTTP/2 brand.worldnomads.com/source/fonts/proximanova/proximanova-bold.woff2
IP 104.18.13.224:0
File type Web Open Font Format (Version 2), TrueType, length 15168, version 0.0\012- data
Hash 9596bf2002258297bbc668edb556d657
cf59cbe7edc9b4965b571601494721634565cdd8
b7504b6f34f4d000ea9c09804626924914051d15707d53f7dd9e82bcbe92e80d
GET /source/fonts/proximanova/proximanova-bold.woff2 HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://components.worldnomads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: font/woff2
content-length: 15168
x-amz-id-2: I9IyDi2TOpUHQfAc45vPPtRKsGjqx6NgNnfg0FLA/vMmCNIa13mtfCJICbGZTzupmXJfJ+qxDWE=
x-amz-request-id: ZSB6K9HM1NNZ1H04
last-modified: Tue, 31 May 2022 05:55:41 GMT
etag: "9596bf2002258297bbc668edb556d657"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
access-control-allow-origin: https://www.worldnomads.com
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
set-cookie: __cf_bm=5rWjyjdNmIyDfbtqOt3jMmq3zrV1S1Bbinl1DZFsuk0-1672322058-0-AYP2UHiYF+rVU11T6ahlUZ9hxvV0lC97waKdZgKyeBLm25n7H8YL0DDaG2nvhkJvVLLLcGtPo6BFclOzj8DvZDQ=; path=/; expires=Thu, 29-Dec-22 14:24:18 GMT; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
__cfruid=a1059c97596e0b224e106f0eb8891dc4088187d6-1672322058; path=/; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 781306e0cfea0b61-OSL
X-Firefox-Spdy: h2
brand.worldnomads.com/source/fonts/wn-icomoon-03-08-21.woff?rgswm9
104.18.13.224200 OK 44 kB URL HTTP/2 brand.worldnomads.com/source/fonts/wn-icomoon-03-08-21.woff?rgswm9
IP 104.18.13.224:0
File type Web Open Font Format, TrueType, length 44336, version 1.0\012- data
Hash e87b24621fdfde005d04f0f59b3510b8
d1a968a82ff13bfd1f93600f875d903dba6bb562
b2fb95a0b2289fa53d9a49a277fdcb126247c1c5f1ac5eaaa914691e8f791960
GET /source/fonts/wn-icomoon-03-08-21.woff?rgswm9 HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://brand.worldnomads.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: font/woff
content-length: 44336
x-amz-id-2: pYRAyx0X4clKwsuzKvDd1+bUUHKFOzZsBbj2tHtunttNZHOT89oNIRb1WD2p1wACVgWuUI9VPJU=
x-amz-request-id: D85PS36JDTJ4FJ8R
last-modified: Thu, 15 Sep 2022 00:28:06 GMT
etag: "e87b24621fdfde005d04f0f59b3510b8"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
access-control-allow-origin: https://www.worldnomads.com
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
set-cookie: __cf_bm=l5pZ95DAoXUhH9z1kH7nmcKt57jAM57wLrBh4NsnKJE-1672322058-0-AYgEO5RynjoY3QaE1GT/BJq5/hxIBBdQXoOXXp2Hrmo00DmMfB7hhywXwewm/GA5G1zk+51t/Hky06DvDXYgInk=; path=/; expires=Thu, 29-Dec-22 14:24:18 GMT; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
__cfruid=a1059c97596e0b224e106f0eb8891dc4088187d6-1672322058; path=/; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 781306e0effc0b61-OSL
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/index.html?templateId=539ad0ffdec7e10e686debd7&businessunitId=4d4156f800006400050e7c4f
143.204.55.80200 OK 3.5 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/index.html?templateId=539ad0ffdec7e10e686debd7&businessunitId=4d4156f800006400050e7c4f
IP 143.204.55.80:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12715)
Hash aa8b1a01ee0848aee02ab9c7adb7cbb7
ff27a1bf40f099b499b60d788466761af42baf59
44724c3f8b05e72ed2a4e49dc04f19e1f5b163221d0cc8ca3daec022c6fae8dc
GET /trustboxes/539ad0ffdec7e10e686debd7/index.html?templateId=539ad0ffdec7e10e686debd7&businessunitId=4d4156f800006400050e7c4f HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 3460
last-modified: Tue, 04 Oct 2022 10:33:45 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Thu, 29 Dec 2022 03:38:28 GMT
cache-control: max-age=86400
etag: "aa8b1a01ee0848aee02ab9c7adb7cbb7"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gAlYdnapyZiBc6KGTuxwmnYTtyCVkRf6dVav0P0vUQhwHFrxd2qaJw==
age: 36951
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/main.js
143.204.55.80200 OK 29 kB URL HTTP/2 widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/main.js
IP 143.204.55.80:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (64279), with no line terminators
Hash 54238d7747519d1c9aef59452f0b4117
a51875fd076a3feba642a6009015547ea5a67b15
c0feeae2cf1dcc782f55e3bd4d87b16b20c5bb2ee56bd259d5b3ab13e64d03b4
GET /trustboxes/539ad0ffdec7e10e686debd7/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/index.html?templateId=539ad0ffdec7e10e686debd7&businessunitId=4d4156f800006400050e7c4f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 29003
date: Thu, 29 Dec 2022 02:41:33 GMT
last-modified: Tue, 04 Oct 2022 10:33:47 GMT
etag: "54238d7747519d1c9aef59452f0b4117"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q9uvP1GvNP9nakBDibCW15cK_Pl_yL_LGJSnSBfPv-YRWMmwyVCsqA==
age: 40367
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 93e35e9fde8fe234b24fce4b22b282c1
a0a60a838313be67d148ced120c7475ae6f9aaec
0ad7950ab144e63fc4dcbd61544c9ab642646afbd9f0d0936993c58fc2d96c10
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 13:54:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 04:04:03 GMT
Expires: Thu, 05 Jan 2023 04:04:02 GMT
Etag: "a0a60a838313be67d148ced120c7475ae6f9aaec"
Cache-Control: max-age=568783,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 781306e1bc62b50b-OSL
widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=350px&styleWidth=100%25&theme=light&stars=4%2C5&reviewLanguages=en&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4d4156f800006400050e7c4f&widgetId=539ad0ffdec7e10e686debd7
143.204.55.80204 No Content 0 B URL HTTP/2 widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=350px&styleWidth=100%25&theme=light&stars=4%2C5&reviewLanguages=en&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4d4156f800006400050e7c4f&widgetId=539ad0ffdec7e10e686debd7
IP 143.204.55.80:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats/TrustboxImpression?locale=en-US&styleHeight=350px&styleWidth=100%25&theme=light&stars=4%2C5&reviewLanguages=en&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&language=en-US&platform=Linux%20x86_64&nosettings=1&businessUnitId=4d4156f800006400050e7c4f&widgetId=539ad0ffdec7e10e686debd7 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/index.html?templateId=539ad0ffdec7e10e686debd7&businessunitId=4d4156f800006400050e7c4f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
cache-control: no-store,no-cache
date: Thu, 29 Dec 2022 13:54:19 GMT
pragma: no-cache
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ue2FwnuJLp8kRtyyVoOvoB0Q7EzNbTPeP_oayTzHwcwbnUu6wedXWg==
X-Firefox-Spdy: h2
www.mczbf.com/tags/397643057330/tag.js
54.230.111.19200 OK 16 kB URL HTTP/1.1 www.mczbf.com/tags/397643057330/tag.js
IP 54.230.111.19:0
File type ASCII text, with very long lines (48091)
Hash 21569b538eac44795b05a7eb9c6e5aa6
5374b70f0e10167fac2805fa686b5fda01102eab
13397ff47938975d9dd961205b3acd94f5c6bb1932c05bd90d98842b63c87d1a
GET /tags/397643057330/tag.js HTTP/1.1
Host: www.mczbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 29 Dec 2022 13:46:11 GMT
X-Request-ID: 27d6aca8-877f-11ed-a732-271e70369a4c
Server: nginx
Cache-Control: max-age=1800
Content-Encoding: gzip
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lJVXkQo9koBRdlVZvFItK0Zqsqr5c7UgWvgYfHmsjFZ1HmFaWgQP-Q==
Age: 488
brand.worldnomads.com/source/js/js-head.min.js?20220915
104.18.13.224200 OK 34 kB URL HTTP/2 brand.worldnomads.com/source/js/js-head.min.js?20220915
IP 104.18.13.224:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash ea7baae904d1c78ef42444edd57a6d3b
56cf786a56f71973c3f66d0d02d861df6e2c601e
235dc8fd8aabebd9a97766562d1455e5608cb48e3e4c2a7801aa2f03f60a461b
GET /source/js/js-head.min.js?20220915 HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: application/javascript
x-amz-id-2: nnNQaKFohkdHpYjsdONk8HX2xIra1ECYm/SYISRLToaLDQtCKkuEdW6XhcpnIoXcA/seEG2hhTc=
x-amz-request-id: 7973J9X1X8XA04QN
last-modified: Thu, 18 Jul 2019 05:25:49 GMT
etag: W/"d23455f3404ced9050e39e5c1d6b15ea"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306de2d670b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/539ad0ffdec7e10e686debd7?businessUnitId=4d4156f800006400050e7c4f&locale=en-US&reviewLanguages=en&reviewStars=4%2C5&reviewsPerPage=6
143.204.55.80200 OK 2.2 kB URL HTTP/2 widget.trustpilot.com/trustbox-data/539ad0ffdec7e10e686debd7?businessUnitId=4d4156f800006400050e7c4f&locale=en-US&reviewLanguages=en&reviewStars=4%2C5&reviewsPerPage=6
IP 143.204.55.80:0
Hash 5f4de294847de6000a3cd83ee7d300a9
c78a95367af106502cf7b424c1026efbda4276f8
59dd2fdfcc43ade4b4b2ca618d08f6f59b68591a6ffc36a89df20574d931f057
GET /trustbox-data/539ad0ffdec7e10e686debd7?businessUnitId=4d4156f800006400050e7c4f&locale=en-US&reviewLanguages=en&reviewStars=4%2C5&reviewsPerPage=6 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/539ad0ffdec7e10e686debd7/index.html?templateId=539ad0ffdec7e10e686debd7&businessunitId=4d4156f800006400050e7c4f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
server: Kestrel
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Thu, 29 Dec 2022 13:29:14 GMT
etag: "789cf7c89546f9e0c3d5492eb59004ef"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9meqaNST4SE-OnP34MPXpxNTLTEOUHT1nHhDOAlI3HrWMG9mSOA0rg==
age: 1504
X-Firefox-Spdy: h2
media.worldnomads.com/TravelInsuranceImages/wn-ti-ea-avatar-aureilie.jpg
104.18.13.224200 OK 14 kB URL HTTP/2 media.worldnomads.com/TravelInsuranceImages/wn-ti-ea-avatar-aureilie.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Hash f42650a63d790877db06f714a7374fcf
f5a5c37e85fd68a6ca0cc0a682fc783bfb50af27
b09e150cb3f3ff2a0ac051c39a61aed7d25b883c4ba63605e2bdbd7ddd5b125b
GET /TravelInsuranceImages/wn-ti-ea-avatar-aureilie.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 14404
cf-bgj: h2pri
etag: "f42650a63d790877db06f714a7374fcf"
last-modified: Mon, 27 Aug 2018 05:38:35 GMT
x-amz-id-2: KjTtgic6nBkrT9QnCbz6arna7QP0ZH0v0svTNVo7hSAcg7+RmRoZo4nDmiKQqhk7a7RTis0EgJk=
x-amz-request-id: ZCMTSA9C8TGSX8W4
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306de3d800b61-OSL
X-Firefox-Spdy: h2
s.swiftypecdn.com/install/v2/config/5sSGyBXQths94y5qfJkK.json
151.101.0.143200 OK 4.1 kB URL HTTP/1.1 s.swiftypecdn.com/install/v2/config/5sSGyBXQths94y5qfJkK.json
IP 151.101.0.143:0
File type JSON data\012- , ASCII text, with very long lines (18995), with no line terminators
Hash c904e63404107edc64ce31a5e5769410
2e3ea4b7e92d0f7a5dbffa90767ae338f2064da6
00dd2fee6b39a0f217c83a3a323d00969723d9e2b2d40bb3868582df994595d7
GET /install/v2/config/5sSGyBXQths94y5qfJkK.json HTTP/1.1
Host: s.swiftypecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 4115
Content-Type: application/json; charset=utf-8
Status: 200 OK
Access-Control-Allow-Methods: GET, POST
Access-Control-Expose-Headers:
Access-Control-Max-Age: 7200
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
X-Swiftype-Backend-Region: dal
X-Swiftype-Backend-Datacenter: dal12
X-Swiftype-Backend-Node: app-website02b.dal12
ETag: W/"a51e7faab0866dac13b3c5e92395c822"
Last-Modified: Fri, 23 Aug 2019 03:49:59 GMT
Cache-Control: max-age=300, public
X-Request-Id: 1ea0a7b45f93ab94649cbf47905f874c
X-Runtime: 0.214459
X-Rack-Cache: pass
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Thu, 29 Dec 2022 13:54:19 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1628-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1672322059.977323,VS0,VE425
Vary: Accept-Encoding, Origin
www.mczbf.com/397643057330/pageInfo
54.230.111.19200 OK 68 B URL HTTP/1.1 www.mczbf.com/397643057330/pageInfo
IP 54.230.111.19:0
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /397643057330/pageInfo HTTP/1.1
Host: www.mczbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://www.worldnomads.com
Content-Length: 226
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 68
Connection: keep-alive
Date: Thu, 29 Dec 2022 13:54:19 GMT
X-Request-ID: 4a87a2e5-8780-11ed-b1c3-e749db612daf
Server: nginx
Access-Control-Allow-Origin: *
Cache-Control: no-store
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LjGB_GOXJEf17YpgRRq9jIYoodDtHyj0dq0FBe9Uz8W-QzoqQNbyGQ==
tags.tiqcdn.com/utag/nibtravel/main/dev/utag.js
23.38.200.249200 OK 7.4 kB URL HTTP/2 tags.tiqcdn.com/utag/nibtravel/main/dev/utag.js
IP 23.38.200.249:0
File type HTML document, ASCII text, with very long lines (1276)
Hash a9aa849f7c6aec30e179214911e77900
99406d1edabbdd05766afde647327eda270ae8e2
7b4d1f504bb6ac5b31734e89886cb0f3433d6801c9529aab106d921576de41fe
GET /utag/nibtravel/main/dev/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "ce05e20896540f8ca242b664135b2b7d:1661142797.682413"
last-modified: Mon, 22 Aug 2022 04:33:17 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 29 Dec 2022 13:59:19 GMT
date: Thu, 29 Dec 2022 13:54:19 GMT
content-length: 7391
X-Firefox-Spdy: h2
s.swiftypecdn.com/assets/new_embed-91517c1e71e10890e4017d4c45b2dcd307c1d94998b851abdeefd8780de40d90.css
151.101.0.143200 OK 34 kB URL HTTP/1.1 s.swiftypecdn.com/assets/new_embed-91517c1e71e10890e4017d4c45b2dcd307c1d94998b851abdeefd8780de40d90.css
IP 151.101.0.143:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d7192adc678b648a6f7e566e084148b4
147f273c2cc70565b7e1f9f605cf4a845fb2d0fb
896b75fe0060a75011d62547a221b0c987d0e72ae65fad39c7551eb45f48de72
GET /assets/new_embed-91517c1e71e10890e4017d4c45b2dcd307c1d94998b851abdeefd8780de40d90.css HTTP/1.1
Host: s.swiftypecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 33983
Content-Type: text/css
ETag: "62b9d075-84bf"
Content-Encoding: gzip
Expires: Fri, 29 Dec 2023 11:13:04 GMT
Cache-Control: max-age=31536000, public
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Thu, 29 Dec 2022 13:54:19 GMT
Via: 1.1 varnish
Age: 9675
X-Served-By: cache-bma1654-BMA
X-Cache: HIT
X-Cache-Hits: 65
X-Timer: S1672322059.475175,VS0,VE0
Vary: Accept-Encoding
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=nibtravel/main/202208220432&cb=1672322054086
23.38.200.249200 OK 2 B URL HTTP/2 tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=nibtravel/main/202208220432&cb=1672322054086
IP 23.38.200.249:0
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /utag/tiqapp/utag.v.js?a=nibtravel/main/202208220432&cb=1672322054086 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7bc0ee636b3b83484fc3b9348863bd22:1460653071"
last-modified: Thu, 14 Apr 2016 16:57:51 GMT
server: AkamaiNetStorage
content-length: 2
cache-control: max-age=600
expires: Thu, 29 Dec 2022 14:04:19 GMT
date: Thu, 29 Dec 2022 13:54:19 GMT
X-Firefox-Spdy: h2
users-api.worldnomads.com/token
104.18.13.224401 Unauthorized 72 B URL HTTP/2 users-api.worldnomads.com/token
IP 104.18.13.224:0
File type JSON data\012- , ASCII text, with no line terminators
Hash dccf053b4d0a2094bc341bae1f4cb844
33cb096a8aaa6c08bf3a0f58cfba8a61e2fab449
1503876db8c1d1877cf8d52699aefb1f1023a0ad8c98278782dcb25070df4b6e
POST /token HTTP/1.1
Host: users-api.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://www.worldnomads.com
Content-Length: 87
Connection: keep-alive
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 401 Unauthorized
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: application/json;charset=UTF-8
content-length: 72
cache-control: no-cache
pragma: no-cache
expires: -1
content-security-policy: object-src 'none'; script-src 'nonce-cAeofNcg2xm/H1CWlP9WIHqw' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none';
x-correlation-id: 67527ac6-371c-4f81-9878-df4283510b79
access-control-allow-origin: https://www.worldnomads.com
access-control-allow-credentials: true
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e1f90c0b61-OSL
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-2ZJ01FKX02>m=2oebu0&_p=776258727&cid=1198856536.1672322054&ul=en-us&sr=1280x1024&_s=1&sid=1672322053&sct=1&seg=0&dl=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&dt=Travel%20Insurance%20for%20adventure%20activities&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-2ZJ01FKX02>m=2oebu0&_p=776258727&cid=1198856536.1672322054&ul=en-us&sr=1280x1024&_s=1&sid=1672322053&sct=1&seg=0&dl=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&dt=Travel%20Insurance%20for%20adventure%20activities&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2ZJ01FKX02>m=2oebu0&_p=776258727&cid=1198856536.1672322054&ul=en-us&sr=1280x1024&_s=1&sid=1672322053&sct=1&seg=0&dl=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&dt=Travel%20Insurance%20for%20adventure%20activities&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.worldnomads.com
date: Thu, 29 Dec 2022 13:54:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media.worldnomads.com/TravelInsuranceImages/ContentCards/backpacking_gettyroyaltyfree_268x175.jpg
104.18.13.224200 OK 34 kB URL HTTP/2 media.worldnomads.com/TravelInsuranceImages/ContentCards/backpacking_gettyroyaltyfree_268x175.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=4016, bps=0, PhotometricIntepretation=RGB, description=Travelers carrying backpacks are traveling to the train station in Chiang Mai province of Thailand., manufacturer=NIKON CORPORATION, model=NIKON D750, orientation=upper-left, width=6016], baseline, precision 8, 268x175, components 3\012- data
Hash 7d9d795566303589847106037b1a4826
487170e5fe9054f0dae74cdcf75b35609cc63082
fe673a080934eed01f2d34d6f2ce3d50c113afed1df398faf50b034ed07a501c
GET /TravelInsuranceImages/ContentCards/backpacking_gettyroyaltyfree_268x175.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 33755
cf-bgj: h2pri
etag: "7d9d795566303589847106037b1a4826"
last-modified: Mon, 03 Feb 2020 06:55:33 GMT
x-amz-id-2: NiOjDdORziQ5JwBrNmzwDcDzyjfSyNb15P2jwwLn2JNqkVaXoEuKyT6w4vMLDKObihz8fTtLtDs=
x-amz-request-id: 7XAHNC5CM47E6KMF
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e229490b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/travelinsurance/activities/wn-ti-activities-volunteer-2-Content-Card-Thumb-750x490.jpg
104.18.13.224200 OK 122 kB URL HTTP/2 media.worldnomads.com/travelinsurance/activities/wn-ti-activities-volunteer-2-Content-Card-Thumb-750x490.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:02:18 10:38:08], baseline, precision 8, 750x490, components 3\012- data
Size 122 kB (122474 bytes)
Hash db2643ce95f2a2c81d5701bb6d27d8a0
554294aba5e5f24b2017bf7fb7ac52c90e512eaa
b4a95720cd9f62a9bd88bd5cf1932e059d2c7927c028f0b3c7b3d8efef393ce5
GET /travelinsurance/activities/wn-ti-activities-volunteer-2-Content-Card-Thumb-750x490.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 122474
cf-bgj: h2pri
etag: "db2643ce95f2a2c81d5701bb6d27d8a0"
last-modified: Tue, 18 Feb 2020 18:40:25 GMT
x-amz-id-2: 5q5mvNL7er/+CpgxFNOh3zlUrWBi5O5N8Oy7ekASmqnoIT5j3b26Jv2c4Edf6XAarad6hYsVSMQ=
x-amz-request-id: WBAFRHTD0RQT0ZDW
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e2294c0b61-OSL
X-Firefox-Spdy: h2
brand.worldnomads.com/source/js/js-main-1.75.6.min.js
104.18.13.224200 OK 148 kB URL HTTP/2 brand.worldnomads.com/source/js/js-main-1.75.6.min.js
IP 104.18.13.224:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (147864 bytes)
Hash dedd58dc950ee05b16329748a26cbce3
d55bee556ae585b48434cde55e4a8895c2acd306
39d0f6c16aba91b9626c3ed3bdf225eb6c0d65a93097bd624c917fff8c398f92
GET /source/js/js-main-1.75.6.min.js HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: application/javascript
x-amz-id-2: O8OEICtya8Zg82FB1KQdhek6J3Qcmp6cYe34zTk2jUGlGRuDsArO7PhxrFM3KJRBeqhOmGtCxFM=
x-amz-request-id: HH2Y00P04CAR47J8
last-modified: Thu, 23 Jan 2020 00:41:22 GMT
etag: W/"61e96b9a29a746084478bd7fc94d5d2d"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306de2d6e0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
media.worldnomads.com/travelinsurance/activities/wn-ti-road-trip-thumb.jpg
104.18.13.224200 OK 230 kB URL HTTP/2 media.worldnomads.com/travelinsurance/activities/wn-ti-road-trip-thumb.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=2832, bps=0, PhotometricIntepretation=RGB, manufacturer=SONY, model=ILCE-7SM2, width=4240], baseline, precision 8, 786x525, components 3\012- data
Size 230 kB (229880 bytes)
Hash 3c646407396f155a0db07f7b9a1c8fd2
a59bd4170af9fd36f88a839b615dba3b33201107
8a55a031f872560f6b7d587447eb72e9612ccaded039e5464d22267c7dc97f96
GET /travelinsurance/activities/wn-ti-road-trip-thumb.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 229880
cf-bgj: h2pri
etag: "3c646407396f155a0db07f7b9a1c8fd2"
last-modified: Thu, 13 May 2021 19:14:21 GMT
x-amz-id-2: QUhxkL5sgDS9RPNhYq40SPSGdg1A2k3MNSpggHEpJ1u8nJZl/SJvjSK+ugx/tZ/C92T9AOyopFI=
x-amz-request-id: WBA7NCZCYK18AFBW
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e229430b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-TI-activities-kajak-card-1.jpg
104.18.13.224200 OK 73 kB URL HTTP/2 media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-TI-activities-kajak-card-1.jpg
IP 104.18.13.224:0
File type JPEG image data, baseline, precision 8, 768x502, components 3\012- data
Hash d28c33d8049d91078558d5593da011ee
2ab255faa674ca294f86de46cdd19ff5de2989e3
efc749618ca3046454772e8fc416f3a49be72d01ff203a48c20b27b6acdf12e2
GET /TravelInsuranceImages/ContentCards/wn-TI-activities-kajak-card-1.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 73364
cf-bgj: h2pri
etag: "d28c33d8049d91078558d5593da011ee"
last-modified: Mon, 27 Aug 2018 05:38:31 GMT
x-amz-id-2: I7XBOk+p06k3j38V3R9UC3pTO7vOeevYJNbvP4I+VxNsCFa8HxYvk4stuMR0u/vu+Hv5eIKcgg4=
x-amz-request-id: 2ZVPVSA5J5T5K5ME
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e2192b0b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-ti-card-hike.jpg
104.18.13.224200 OK 60 kB URL HTTP/2 media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-ti-card-hike.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x502, components 3\012- data
Hash b5fd73993dd63e0c8cbe0e59bc200289
4076371f50361aed53409d416042c0bd37a56dff
6659f65d631d0e645f42fec55f614b51aeb991b0ed671ec2db882340b41f53bc
GET /TravelInsuranceImages/ContentCards/wn-ti-card-hike.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 60513
cf-bgj: h2pri
etag: "b5fd73993dd63e0c8cbe0e59bc200289"
last-modified: Mon, 27 Aug 2018 05:38:32 GMT
x-amz-id-2: tE+3D0NOWgEMpHKrgdI1Jq91e7iKG6+GtcxvuedLO0k5B1zmsCBeANSH3hZxgwLdNTX8i0RyqlU=
x-amz-request-id: ZRQFY8FTNJ73S55Q
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e2294d0b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/travelinsurance/wn-ti-activities-sailing-CONTENT-CARD.jpg
104.18.13.224200 OK 118 kB URL HTTP/2 media.worldnomads.com/travelinsurance/wn-ti-activities-sailing-CONTENT-CARD.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=3744, bps=0, compression=none, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, width=5616], baseline, precision 8, 750x490, components 3\012- data
Size 118 kB (118095 bytes)
Hash 175400cc4d1cb45ab5b99f82410c1a27
d48b238939e86820c6c7f089c10fad5d377d638b
19910e77e38a4906da1b702148d77f4f314e0a2f814c3d136658bb7e9629e5a0
GET /travelinsurance/wn-ti-activities-sailing-CONTENT-CARD.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 118095
cf-bgj: h2pri
etag: "175400cc4d1cb45ab5b99f82410c1a27"
last-modified: Thu, 23 Dec 2021 22:56:50 GMT
x-amz-id-2: HjphxHJXLGgiUAO9/gnQ/P3KnI+PdXzEZopmIH8btOGILjRomXNiCfRVAdtFq3EHXiahHpjbicI=
x-amz-request-id: RYAMXK8KS0BVC0DP
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e209180b61-OSL
X-Firefox-Spdy: h2
www.worldnomads.com/Themes/NomadsFoundation/scripts/wng.googleAnalytics.js
104.18.13.224200 OK 182 kB URL HTTP/2 www.worldnomads.com/Themes/NomadsFoundation/scripts/wng.googleAnalytics.js
IP 104.18.13.224:0
File type ASCII text, with CRLF line terminators
Size 182 kB (181884 bytes)
Hash 943a467862ef61138bd0ab8116122536
d542ecc3c27408d3e60a4808d4e2fda581b5aef8
0a27e4c04316f7bb2f5cf75ac4e762c4f8175eabbf38108a44ff82ce82298349
GET /Themes/NomadsFoundation/scripts/wng.googleAnalytics.js HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/travel-insurance/activities
Cookie: AWSALB=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; CultureCode=; CustomUserSessionId=95a0b950-199b-4d39-bcae-620e9206f93c; affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:17 GMT
content-type: application/javascript
cache-control: public, max-age=2592000
etag: W/"5cd9452eef10d91:0"
last-modified: Fri, 16 Dec 2022 01:39:04 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-generator: Orchard
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block;
access-control-allow-origin: *
access-control-max-age: 2592000
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-security-policy: default-src 'self' blob: *.brightcove.com *.crazyegg.com *.brightcove.net https: data: 'unsafe-inline' 'unsafe-eval'
cf-cache-status: HIT
age: 209200
expires: Sat, 28 Jan 2023 13:54:17 GMT
server: cloudflare
cf-ray: 781306de2d610b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-ti-card-bicycle.jpg
104.18.13.224200 OK 90 kB URL HTTP/2 media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-ti-card-bicycle.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 768x502, components 3\012- data
Hash f818306354a4a871cf91124337327c65
ef294a94bad0edda7b896b0a0a30db659fad3b86
3fd312306f18f628e0e334bf566bf6bcf16b1a0371b0da91141dd9fd860cb7ed
GET /TravelInsuranceImages/ContentCards/wn-ti-card-bicycle.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 89495
cf-bgj: h2pri
etag: "f818306354a4a871cf91124337327c65"
last-modified: Mon, 27 Aug 2018 05:38:32 GMT
x-amz-id-2: n129WbGI2D0CyAp//4EuY9G2lE9j/oyCUrJ5uHOYL+wBhG19Hdk5gkjX1c2M8hv30rJgcXNE2ME=
x-amz-request-id: WBA6DDT59YAKM7JR
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e219380b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/travelinsurance/whats-covered/wn-ti-whats-covered-content-card-vacation-rentals.jpg
104.18.13.224200 OK 208 kB URL HTTP/2 media.worldnomads.com/travelinsurance/whats-covered/wn-ti-whats-covered-content-card-vacation-rentals.jpg
IP 104.18.13.224:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, height=4480, bps=0, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, width=6720], baseline, precision 8, 735x490, components 3\012- data
Size 208 kB (208277 bytes)
Hash a5dce3df2ae7d2fd055ee3d3138b6656
ac5ba1f761da208ace601bf6c5a439d12b08011c
b0cf85b7e23eec495dde77863ba58535d016232057ea94fa2e4976f014c7c676
GET /travelinsurance/whats-covered/wn-ti-whats-covered-content-card-vacation-rentals.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 208277
cf-bgj: h2pri
etag: "a5dce3df2ae7d2fd055ee3d3138b6656"
last-modified: Thu, 26 Aug 2021 00:07:39 GMT
x-amz-id-2: spAAVeGMY1MeKwPEDiMtKx2T8SlswOAF2tSiNILwtjT5tzHQWM3bB+ySbp8tU7BsX+z2ziRBnIU=
x-amz-request-id: WBA0C92BEDPHEKQP
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e2294f0b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/travelinsurance/activities/wn-ti-surfing-content-card-750x490.jpg
104.18.13.224200 OK 34 kB URL HTTP/2 media.worldnomads.com/travelinsurance/activities/wn-ti-surfing-content-card-750x490.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:02:03 11:11:05], baseline, precision 8, 750x490, components 3\012- data
Hash 1a748ba47a717212e2c7364efb0b0b90
26d6bbaf931a07d8a52a3c05a1f74e86a5a49406
1aa6e5db955f1d6a0c323d694359400c913433e51d55f6548cfbb58e7aa841b0
GET /travelinsurance/activities/wn-ti-surfing-content-card-750x490.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 33459
cf-bgj: h2pri
etag: "1a748ba47a717212e2c7364efb0b0b90"
last-modified: Mon, 03 Feb 2020 19:16:02 GMT
x-amz-id-2: tIDvtsjeG3mlKCLUM09VawlAC0Bh5Kg4qLi5l95rp+S+llyT8Fq1zwD6Y7fO3YxYSCxymey9kNA=
x-amz-request-id: KDGP742FWD4PARHV
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e229410b61-OSL
X-Firefox-Spdy: h2
media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-ti-card-snow-01.jpg
104.18.13.224200 OK 83 kB URL HTTP/2 media.worldnomads.com/TravelInsuranceImages/ContentCards/wn-ti-card-snow-01.jpg
IP 104.18.13.224:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 768x502, components 3\012- data
Hash f8ca5b2318a84375f8944033aee3cb87
ed73bf0aba04e0c16190d84590d969719d930bbe
8906923607ca341863d28e5f2d42752d22ffd10c5ebf26a7555ed3dee5e41587
GET /TravelInsuranceImages/ContentCards/wn-ti-card-snow-01.jpg HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/jpeg
content-length: 82612
cf-bgj: h2pri
etag: "f8ca5b2318a84375f8944033aee3cb87"
last-modified: Mon, 27 Aug 2018 05:38:32 GMT
x-amz-id-2: 9OKccKCRqe00IoUDgugjfR2XxBIcwtsjFoyMdUS/8efEeudURsas6aDvT6ZK60PqOnEEcAMg0vU=
x-amz-request-id: WBABZXV97GT0HVRH
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e2192d0b61-OSL
X-Firefox-Spdy: h2
cdn.worldnomads.net/Media/Default/TravelInsuranceImages/PageHero/wn-ti-hero-kayak-1.jpg
172.67.72.177200 OK 99 kB URL HTTP/2 cdn.worldnomads.net/Media/Default/TravelInsuranceImages/PageHero/wn-ti-hero-kayak-1.jpg
IP 172.67.72.177:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x620, components 3\012- data
Hash f6574bf5795f51dbdf666d9d5c463fdf
1b891e245b0a2f95eff75de34dccf9286a60141b
9ead5229725acee074ab68f947d6c9b3f699d42d307c0cf122a49c4d4dd6e4d3
GET /Media/Default/TravelInsuranceImages/PageHero/wn-ti-hero-kayak-1.jpg HTTP/1.1
Host: cdn.worldnomads.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:20 GMT
content-type: image/jpeg
content-length: 98993
cache-control: public, max-age=604800
last-modified: Mon, 09 Oct 2017 23:20:15 GMT
etag: "b1ad252a5541d31:0"
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fTQIAbxV8AAeaBvFeQSsDscivnZuy4slPtXasLnEPCw1mg3yy%2BZc%2BhJXCHeE5B4hv2BDZcmovtV5EPI%2FJqYuAb6BQz%2F7sn3RPezbzTPBYjXCHy6VCekvDhpUaPcGOH%2Fsny2O80U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 781306e22d3bb4f1-OSL
X-Firefox-Spdy: h2
cc.swiftype.com/cc.js?engine_key=qTVbr5nGVduEboVZ88HK&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities
169.48.138.204200 OK 43 B URL HTTP/1.1 cc.swiftype.com/cc.js?engine_key=qTVbr5nGVduEboVZ88HK&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities
IP 169.48.138.204:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cc.js?engine_key=qTVbr5nGVduEboVZ88HK&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities HTTP/1.1
Host: cc.swiftype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 13:54:20 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Thu, 29 Dec 2022 13:54:19 GMT
Cache-Control: no-cache
media.worldnomads.com/favicon.png
104.18.13.224200 OK 1.9 kB URL HTTP/2 media.worldnomads.com/favicon.png
IP 104.18.13.224:0
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash e4a87d8924e2e117a12c2b47583be733
84098298ddbaaf1b270b67bed3bdfb54cd067528
18406c61d4bea80f7b3168fab0663b6baa12b39206230dc8ccf9e14da092c243
GET /favicon.png HTTP/1.1
Host: media.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=3Hp2ONJXVx3bE1sDef88emigDCuqLchzPeGnT3t7Fi8-1672322058-0-ATJZyBdBh92ri2dNXB0m2FcYL7AcP/aIRfLFdTN4kgB9PiP6Xe0ku+aPN06rmd9qWdMWuD0WbOhB/p3EPN3g7MOg6420uZeKXnS2Adnq5s1JUDrlTlt3tRSKgIHxomuyzEaZX5UuOkeA/Av+hQZKGqFFcmTfdVeDaujVA+zjpWRFzizXKde90pYRxPpDqTZ0Eg==; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities; _gcl_au=1.1.802287026.1672322054; _ga_2ZJ01FKX02=GS1.1.1672322053.1.0.1672322053.0.0.0; _ga=GA1.1.1198856536.1672322054; cjConsent=MHxZfDB8Tnww; utag_main=v_id:01855e2977c0004762af3d09f77800050003700900918$_sn:1$_se:1$_ss:1$_st:1672323854082$ses_id:1672322054082%3Bexp-session$_pn:1%3Bexp-session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:20 GMT
content-type: image/png
content-length: 1937
cf-rate-limit-rule-id: 20f8891b5f38489896428959ff8ad399
cf-rate-limit-action: simulate
retry-after: 3600
x-amz-id-2: wnsitYmkKShGPfnmoms5Cdvx0zOB/yOCn5kWqiXxAS2IhQOWOgKcPAqj2ZuWIgdLQyVrAaicuZ8=
x-amz-request-id: H0CNYC69MRBJK4R4
last-modified: Mon, 05 Aug 2019 05:44:18 GMT
etag: "e4a87d8924e2e117a12c2b47583be733"
x-amz-meta-cb-modifiedtime: Thu, 30 Aug 2018 06:12:01 GMT
cf-cache-status: HIT
age: 5548
expires: Fri, 06 Jan 2023 13:54:20 GMT
cache-control: public, max-age=691200
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306ec1b720b61-OSL
X-Firefox-Spdy: h2
s.adroll.com/j/roundtrip.js
143.204.55.75200 OK 17 kB URL HTTP/1.1 s.adroll.com/j/roundtrip.js
IP 143.204.55.75:0
File type ASCII text, with very long lines (1096)
Hash dd7c176b2dac995011433da1438f1145
bb8806ccc48ec3606d8baf4f36da1f21d243e693
1fe8668ae16cf90ec3d112b1d807b56a9dfeabdaa3a8e85a8af4348642703324
GET /j/roundtrip.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 13 Dec 2022 18:04:23 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: HxiQkfNNaq6NdPfpSv2XZDgmW1WMNL2M
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 29 Dec 2022 13:53:41 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"6be3bd3bef30f48b2e3dbb3f77261989"
Vary: Accept-Encoding
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
Age: 40
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EBvAmBS4vTGxtq22Mutl6LW9UwqaWPY1OTgkfmpla6xXdFCboSVHBg==
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e76097d882602a55bfbe7e860ffb925e
ceab0e3feb8806519de9d5478729a4262df813a3
0c3c9088356c9c003a44328ea144896484f01ded9ab359ce49feecee09c1d231
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5360
Cache-Control: max-age=162695
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Etag: "63ad5fa3-1d7"
Expires: Sat, 31 Dec 2022 11:05:55 GMT
Last-Modified: Thu, 29 Dec 2022 09:36:35 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0cd4160787e99315a372ee1f26de398c
a83328d83b89e321dd90b7803afb1aef40552840
59bc9ec6df549bfdc0abe4b4d9a08cca190ef7f0fd54d844986eebf4d28bbfa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5194
Cache-Control: max-age=125842
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Etag: "63acd054-1d7"
Expires: Sat, 31 Dec 2022 00:51:42 GMT
Last-Modified: Wed, 28 Dec 2022 23:25:08 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 29 Dec 2022 12:41:11 GMT
expires: Thu, 29 Dec 2022 14:41:11 GMT
cache-control: public, max-age=7200
age: 4389
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
13.107.21.200200 OK 12 kB IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash d925a898de26295fdebfc90203ef46fa
77dd3f5893b76530e08058d50e8f9aef017e80c7
8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11460
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=3970D5A197A26EB01FD1C72896F56F81; domain=.bing.com; expires=Tue, 23-Jan-2024 13:54:20 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B63D5A089694418C8C07F1440B1CC41A Ref B: OSL30EDGE0416 Ref C: 2022-12-29T13:54:20Z
date: Thu, 29 Dec 2022 13:54:20 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash aff94ab908d47a02a12d3a22aa7532ae
1dc1591860c8cf9d2044c2e0738013688844770d
1dbe84578c7cb1c7886469e36ed6ddc11a9d1892e46dcdcd6d6533331e64a1a3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: PH75QR1JGWQEPlPyFEW8aERjj5PlZwioM7q32iwNCs41+RaIVZD9U5YDLhvzbxAUeErZql9rzJkdb6dSi2YrkQ==
priority: u=3,i
content-length: 27298
x-fb-trip-id: 1904183273
date: Thu, 29 Dec 2022 13:54:20 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s.adroll.com/j/pre/T4QNHELMHBCRZNTSTYN63P/FRBOGIJSPZD7TG7PXISDCL/index.js
143.204.55.75200 OK 1.8 kB URL HTTP/1.1 s.adroll.com/j/pre/T4QNHELMHBCRZNTSTYN63P/FRBOGIJSPZD7TG7PXISDCL/index.js
IP 143.204.55.75:0
File type ASCII text, with very long lines (535)
Hash c33d9cac6f1287122c7d6760e6a37a17
92b0dc4820524abd0bf2d649952f41f18ef28e74
a54864b12ab200f1ea491e324899ad983896d23a158914b2df964deb7786d47e
GET /j/pre/T4QNHELMHBCRZNTSTYN63P/FRBOGIJSPZD7TG7PXISDCL/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 11 Dec 2022 09:38:54 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: D_3KuXd4JqKnKrkjA_PyeHivTlYSOBKS
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 29 Dec 2022 13:10:04 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"a7bb70ece1e3f0f3879dcfca4857a770"
Vary: Accept-Encoding
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
Age: 3163
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MutZBNYz1ARmVz_hfLWgyXTJ06SvUO5A13HGDwNWPAIJ_icGWaA6DQ==
brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-tourradar.svg
104.18.13.224200 OK 1.2 kB URL HTTP/2 brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-tourradar.svg
IP 104.18.13.224:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2697), with no line terminators
Hash 7b33698bb9cd37b2120d0e0b61149771
93f3b31c3e24247aa835f5d7215a163e8dff0926
efddb843e835fdf714f83b702138ceef582a8f9cc52b82be6def1db7c52bab13
GET /source/img/trustpartner/wn-trustpartner-tourradar.svg HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/svg+xml
x-amz-id-2: BW45jPxy2JBu2Cb4O2ZXqqTvr2sTrnaKbIdnAYtdOkcKUi5uKp72vRgm3o4OiFFnnbbWs/2P5p0=
x-amz-request-id: PCKGX3MWSCN5E4XC
last-modified: Thu, 15 Sep 2022 00:28:10 GMT
etag: W/"b6b2727ad33280347484c60f7492c728"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306e0bfd60b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.adroll.com/j/exp/T4QNHELMHBCRZNTSTYN63P/index.js
143.204.55.75302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/exp/T4QNHELMHBCRZNTSTYN63P/index.js
IP 143.204.55.75:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/exp/T4QNHELMHBCRZNTSTYN63P/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Wed, 28 Dec 2022 14:09:47 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
Age: 85472
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6s8A6USmYyk10wt324gYSEek9pOLFuOZmVMXYuD0JHJi0ZOUF0_M-A==
googleads.g.doubleclick.net/pagead/viewthroughconversion/1071648801/?random=1672322053693&cv=11&fst=1672322053693&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&auid=802287026.1672322054&rfmt=3&fmt=4
216.58.207.194200 OK 885 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1071648801/?random=1672322053693&cv=11&fst=1672322053693&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&auid=802287026.1672322054&rfmt=3&fmt=4
IP 216.58.207.194:0
File type ASCII text, with very long lines (1903), with no line terminators
Hash 03fe26eef35cf64370321932b8cf5eed
81254ef9767b2985f01c45b7ff347ce149fa3b19
9fff24e04ee412e0060429ff4249523982db80ba67741e6f114a9bcde98787bf
GET /pagead/viewthroughconversion/1071648801/?random=1672322053693&cv=11&fst=1672322053693&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&auid=802287026.1672322054&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 885
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Dec-2022 14:09:20 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
beacon.sojern.com/pixel/p/336607?f_v=v6_js&p_v=1&pc=&sha256_eml=&sha1_eml=&md5_eml=&ccid=&vid=ent&cid=%7C%7C%7C%7C%7C
107.178.244.119200 OK 723 B URL HTTP/2 beacon.sojern.com/pixel/p/336607?f_v=v6_js&p_v=1&pc=&sha256_eml=&sha1_eml=&md5_eml=&ccid=&vid=ent&cid=%7C%7C%7C%7C%7C
IP 107.178.244.119:0
Hash c02ae28b8607ac652e7526a6ac6229b9
6405b7dccf9343a62f04e5c5d3b0c12cddfcac22
4343c0c801470d7e5088115d8cf297c503801af6f2009e27badab003d1e4d4a1
GET /pixel/p/336607?f_v=v6_js&p_v=1&pc=&sha256_eml=&sha1_eml=&md5_eml=&ccid=&vid=ent&cid=%7C%7C%7C%7C%7C HTTP/1.1
Host: beacon.sojern.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript
p3p: policyref="/w3c/p3p.xml", CP="ADMa OUR IND DSP NON LAW"
set-cookie: cid=bc62b449-beca-1d8c-ca2f-1e0ce0889097#1672876800000; Path=/; Domain=sojern.com; Max-Age=31536000; Secure; SameSite=None
vary: Accept-Encoding
date: Thu, 29 Dec 2022 13:54:20 GMT
content-length: 723
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0cd4160787e99315a372ee1f26de398c
a83328d83b89e321dd90b7803afb1aef40552840
59bc9ec6df549bfdc0abe4b4d9a08cca190ef7f0fd54d844986eebf4d28bbfa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5909
Cache-Control: max-age=126557
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Etag: "63acd054-1d7"
Expires: Sat, 31 Dec 2022 01:03:37 GMT
Last-Modified: Wed, 28 Dec 2022 23:25:08 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash ba8d92aa751b7807d8f1ecfae5c07472
c286977321f3e30b401480c19de38fc70f4ba3cb
c31216516a34e59764f4d2b0b747511e232903dfb6f7bb3358a0a3e4231a8cf5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 29 Dec 2022 13:54:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 28 Dec 2022 21:23:27 GMT
Expires: Thu, 29 Dec 2022 21:23:27 GMT
ETag: "c286977321f3e30b401480c19de38fc70f4ba3cb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e76097d882602a55bfbe7e860ffb925e
ceab0e3feb8806519de9d5478729a4262df813a3
0c3c9088356c9c003a44328ea144896484f01ded9ab359ce49feecee09c1d231
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5196
Cache-Control: max-age=162531
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Etag: "63ad5fa3-1d7"
Expires: Sat, 31 Dec 2022 11:03:11 GMT
Last-Modified: Thu, 29 Dec 2022 09:36:35 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash aff94ab908d47a02a12d3a22aa7532ae
1dc1591860c8cf9d2044c2e0738013688844770d
1dbe84578c7cb1c7886469e36ed6ddc11a9d1892e46dcdcd6d6533331e64a1a3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s.adroll.com/j/pre/index.js
143.204.55.75200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/index.js
IP 143.204.55.75:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 15 Jan 2020 23:54:18 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: nQEe8wQ7h0ROt7P4GJfDfstto6x684Hy
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 28 Dec 2022 18:45:54 GMT
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
Age: 68925
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UC1me0chZtX0WB1F5FTV_LgDwSMX61LeNZzP9UIRAA2ku-JOWtzfSQ==
s.adroll.com/j/exp/index.js
143.204.55.75200 OK 28 B URL HTTP/1.1 s.adroll.com/j/exp/index.js
IP 143.204.55.75:0
File type ASCII text, with no line terminators
Hash 5816cced8568d223aa09d889f300692b
95cab5e474d7391762c3da5c7dc50fcf05df529f
f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
GET /j/exp/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 28
Connection: keep-alive
Last-Modified: Fri, 14 Oct 2022 18:57:24 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: 3TnMO1iw0qw17MhnYw4sprJhuU7ahGp7
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 28 Dec 2022 17:56:50 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
Age: 81441
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _0f2_wayjQ7YMhduhcwRmXtdj8cNmR7zbtu0c4_-oPvWFOoT7WJUVA==
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&gjid=784423189&_gid=1066427557.1672322055&_u=YCDAgAABAAAAAEAAI~&z=1242398577
64.233.161.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&gjid=784423189&_gid=1066427557.1672322055&_u=YCDAgAABAAAAAEAAI~&z=1242398577
IP 64.233.161.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&gjid=784423189&_gid=1066427557.1672322055&_u=YCDAgAABAAAAAEAAI~&z=1242398577 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.worldnomads.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 5c99bc2bdc49e510ab1eaaba3318e81f
a26e89bef2ccb2aee1a8638f4164d130bd7c290f
e8879091414885eab109e13ccb0216ec0c103f744ecbec5ed13628cf1803427f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&gjid=1746186666&_gid=1066427557.1672322055&_u=YCDAAEABAAAAAGAAI~&z=140271445
64.233.161.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&gjid=1746186666&_gid=1066427557.1672322055&_u=YCDAAEABAAAAAGAAI~&z=140271445
IP 64.233.161.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&gjid=1746186666&_gid=1066427557.1672322055&_u=YCDAAEABAAAAAGAAI~&z=140271445 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.worldnomads.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=4077651&tm=gtm002&Ver=2&mid=5409af61-92f0-4913-93b1-201cb8765ec0&sid=47dccf10878011ed804633c96be57ffb&vid=47dce040878011edb29e4b50d80e1fa1&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Travel%20Insurance%20for%20adventure%20activities&p=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&r=<=3937&evt=pageLoad&sv=1&rn=967423
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=4077651&tm=gtm002&Ver=2&mid=5409af61-92f0-4913-93b1-201cb8765ec0&sid=47dccf10878011ed804633c96be57ffb&vid=47dce040878011edb29e4b50d80e1fa1&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Travel%20Insurance%20for%20adventure%20activities&p=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&r=<=3937&evt=pageLoad&sv=1&rn=967423
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=4077651&tm=gtm002&Ver=2&mid=5409af61-92f0-4913-93b1-201cb8765ec0&sid=47dccf10878011ed804633c96be57ffb&vid=47dce040878011edb29e4b50d80e1fa1&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Travel%20Insurance%20for%20adventure%20activities&p=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&r=<=3937&evt=pageLoad&sv=1&rn=967423 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0D2EF8B5280F6545187EEA3C29586467; domain=.bing.com; expires=Tue, 23-Jan-2024 13:54:20 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CE03FFE88F0C4A1EB21F510D15A0AE32 Ref B: OSL30EDGE0416 Ref C: 2022-12-29T13:54:20Z
date: Thu, 29 Dec 2022 13:54:20 GMT
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684
216.58.207.226302 Found 462 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684
IP 216.58.207.226:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash aa490e0461bcd8104b64e624f2cc2235
41073c89532424aefdbe1c744613bb49799b075f
9517b9bb51f3ba0831a7a9124d4390eb73b67f159698b72dee4cf85903eabe94
GET /pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684&google_tc=
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 462
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Dec-2022 14:09:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh
216.58.207.226302 Found 305 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh
IP 216.58.207.226:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 64df50a5e48b198efc3149b03889c8da
0e6193ca52a605f3691dc581d27e77b10fb683a3
106f260f236135be5ec80b994a1292856c6dc6391a9a2956d902aa4af352f982
GET /pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh&google_tc=
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 305
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Dec-2022 14:09:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 281e831db193bdbb80e6ff33b3047078
91c685f3d3fa05fe966cd40c01fbf7e8f3a82ca6
d8f34ff19d7fa4165490af8228d1e3ab2a835c5cf02b80d2efe8203ade76e38d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1071648801/?random=1672322053693&cv=11&fst=1672318800000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&fmt=3&is_vtc=1&random=3455196753&rmt_tld=1&ipr=y
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1071648801/?random=1672322053693&cv=11&fst=1672318800000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&fmt=3&is_vtc=1&random=3455196753&rmt_tld=1&ipr=y
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1071648801/?random=1672322053693&cv=11&fst=1672318800000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&fmt=3&is_vtc=1&random=3455196753&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/1071648801/?random=1672322053693&cv=11&fst=1672318800000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&fmt=3&is_vtc=1&random=3455196753&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1071648801/?random=1672322053693&cv=11&fst=1672318800000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&fmt=3&is_vtc=1&random=3455196753&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1071648801/?random=1672322053693&cv=11&fst=1672318800000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&tiba=Travel%20Insurance%20for%20adventure%20activities&fmt=3&is_vtc=1&random=3455196753&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684&google_tc=
216.58.207.226302 Found 371 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684&google_tc=
IP 216.58.207.226:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 773210e604a7fccdd2f36b72a15828df
6618583ea0262ef998fb797bd2e1995fd811a6e2
c5a688ac03af5e713f28e174583965c542ddf71710ba29c72950847897e94c16
GET /pixel?google_cm=true&google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://pixel.sojern.com/idSync/AdX?exchangeProfileId=&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&sjrn_ula=7215486684&google_error=3
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 371
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh&google_tc=
216.58.207.226302 Found 247 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh&google_tc=
IP 216.58.207.226:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 6663c4e96572aa227be6da6b6c13cc8f
f502f1eb980f339b01f00bea96d61c1ed1fddf25
2047fa6b2f448fe92c1ba8527f3e3a549ab8ae35f7a7bd9ce380aba58134d759
GET /pixel?google_hm=vGK0Sb7KHYzKLx4M4IiQlw&google_nid=sojern_adh&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://pixel.sojern.com/idsync/adh?google_error=3
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 247
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=535849116518475&ev=PageView&dl=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&rl=&if=false&ts=1672322054998&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1672322054997.1100750455&it=1672322054940&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=535849116518475&ev=PageView&dl=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&rl=&if=false&ts=1672322054998&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1672322054997.1100750455&it=1672322054940&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=535849116518475&ev=PageView&dl=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&rl=&if=false&ts=1672322054998&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1672322054997.1100750455&it=1672322054940&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 29 Dec 2022 13:54:20 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash dc9abd902f954942b0117c198c871a38
fe74087a8117c6cca014d42a321aef8833957e75
5be7f9a5272269ad4650fe8980f23f7d026de3d9e60d4d120a574ce182e28d6d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&_u=YCDAAEABAAAAAGAAI~&z=1500464169
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&_u=YCDAAEABAAAAAGAAI~&z=1500464169
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&_u=YCDAAEABAAAAAGAAI~&z=1500464169 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&_u=YCDAAEABAAAAAGAAI~&z=1500464169
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&_u=YCDAAEABAAAAAGAAI~&z=1500464169
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-47&cid=1198856536.1672322054&jid=2074147398&_u=YCDAAEABAAAAAGAAI~&z=1500464169 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash 84a08f3e114e275cabf6044f7837f860
ef08da1eeb128197122b07a1331fc0adf6b70cd0
e745e45f1b218776f4dddf6246c11dc55ea5e73adb94a739e209ea8536148680
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 13:54:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 02 Jan 2023 10:46:58 GMT
ETag: "ef08da1eeb128197122b07a1331fc0adf6b70cd0"
Last-Modified: Thu, 29 Dec 2022 10:46:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1509
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781306eddfe2b4fa-OSL
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&_u=YCDAgAABAAAAAEAAI~&z=2131742262
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&_u=YCDAgAABAAAAAEAAI~&z=2131742262
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&_u=YCDAgAABAAAAAEAAI~&z=2131742262 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&_u=YCDAgAABAAAAAEAAI~&z=2131742262
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&_u=YCDAgAABAAAAAEAAI~&z=2131742262
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-177811-32&cid=1198856536.1672322054&jid=104605508&_u=YCDAgAABAAAAAEAAI~&z=2131742262 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/4077651.js
13.107.21.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/4077651.js
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/4077651.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=2F8F0E1218996FD329951C9B19CE6E36; domain=.bing.com; expires=Tue, 23-Jan-2024 13:54:20 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B94EEA627D154BC9BDFF198CFE8A9E5C Ref B: OSL30EDGE0416 Ref C: 2022-12-29T13:54:20Z
date: Thu, 29 Dec 2022 13:54:20 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 5c99bc2bdc49e510ab1eaaba3318e81f
a26e89bef2ccb2aee1a8638f4164d130bd7c290f
e8879091414885eab109e13ccb0216ec0c103f744ecbec5ed13628cf1803427f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/ddm/activity/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID]
142.250.74.134302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID]
IP 142.250.74.134:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID] HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 29-Dec-2022 14:09:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 58f16dc497b3f884e2c830bdf344cd80
322e70c4b62d1482294f69752ae325f8a705f231
91e58e3782d5091a0407a602836e1a853ce9b754f16c2df501c3c4d65ef136d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&ttd_tpi=1
3.33.220.150200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&ttd_tpi=1
IP 3.33.220.150:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:20 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x
37.252.171.53307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x
IP 37.252.171.53:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 29 Dec 2022 13:54:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3D6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x
AN-X-Request-Uuid: d363e7e3-0bb6-4926-84ab-7e87b6f25e11
Set-Cookie: uuid2=4964696525187080759; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 29-Mar-2023 13:54:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash dc9abd902f954942b0117c198c871a38
fe74087a8117c6cca014d42a321aef8833957e75
5be7f9a5272269ad4650fe8980f23f7d026de3d9e60d4d120a574ce182e28d6d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 58f16dc497b3f884e2c830bdf344cd80
322e70c4b62d1482294f69752ae325f8a705f231
91e58e3782d5091a0407a602836e1a853ce9b754f16c2df501c3c4d65ef136d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Dec 2022 13:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash bb93b7cc2dbe32d8cdcb4aaf6fd82108
a55d7c38f19fb07eb0e580368139f63125ca4ebc
eb16822cb8064e5f6c2d4317ff03040750a32214a301d2b994e57a3e72110d1f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 29 Dec 2022 13:54:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 28 Dec 2022 20:35:23 GMT
Expires: Thu, 29 Dec 2022 20:35:23 GMT
ETag: "a55d7c38f19fb07eb0e580368139f63125ca4ebc"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
adservice.google.com/ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/
216.58.207.226302 Found 0 B URL HTTP/2 adservice.google.com/ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/
IP 216.58.207.226:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.no/ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 7b8c84bdb0ba4e9a7e6c11f65129ae1f
4c621df4ff44ed4b9fc80b578290970ddaae27f8
648f0c2b0ea31dc06abf1f19961912d3b8f893ddd8fe8ef856179af445ce18ab
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123218
Date: Thu, 29 Dec 2022 13:54:20 GMT
Etag: "63acc390-1d7"
Expires: Sat, 31 Dec 2022 00:07:58 GMT
Last-Modified: Wed, 28 Dec 2022 22:30:40 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ATrsjsuISrac_DlqyD8UmpTd-SOsA7pOqX8z0Ks6x7P3cA00xwpicw==
Age: 5838
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3D6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x
37.252.171.53302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3D6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x
IP 37.252.171.53:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3D6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Thu, 29 Dec 2022 13:54:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://pixel.sojern.com/idsync/apn?id=0&sjrn_id=6OzKqyEg18Pob95_w5tUuf455U0Oe2ObyqQJOJrnAH7pydycJb02EWA6pR5HBB1x
AN-X-Request-Uuid: 1a25dd61-9a57-47e7-861d-b8019d4e8014
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1003.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
d.adroll.com/consent/check/T4QNHELMHBCRZNTSTYN63P?pv=64896578337.16721&arrfrr=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&_s=17c855efae57e15ccb0057801204b6b4&_b=2
54.194.129.15200 OK 452 B URL HTTP/2 d.adroll.com/consent/check/T4QNHELMHBCRZNTSTYN63P?pv=64896578337.16721&arrfrr=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&_s=17c855efae57e15ccb0057801204b6b4&_b=2
IP 54.194.129.15:0
File type ASCII text, with very long lines (452), with no line terminators
Hash 482443fc7a1b3045342f56b262dc32fe
abc97102da79b57e4738c0bdd6a2e2b1a5b0acbc
3c286f98cd5d652fd7a2dc98e02a13ef43c3ea0a6fb88e5a8107aa09f33af60e
GET /consent/check/T4QNHELMHBCRZNTSTYN63P?pv=64896578337.16721&arrfrr=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&_s=17c855efae57e15ccb0057801204b6b4&_b=2 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:20 GMT
content-type: application/javascript
content-length: 452
server: nginx/1.22.0
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/
142.250.74.34200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/
IP 142.250.74.34:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=9585001;type=sales;cat=world005;qty=1;cost=;u1=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=[OrderID];~oref=https://www.worldnomads.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 29 Dec 2022 13:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.adroll.com/j/consent_tcfv2.js
143.204.55.75200 OK 55 kB URL HTTP/1.1 s.adroll.com/j/consent_tcfv2.js
IP 143.204.55.75:0
File type ASCII text, with very long lines (1672)
Hash 0427787744c74dc049495c567e3e4ee9
9dadc8f72fa7d061d05357b363eeae336d24f499
00594eb0bcf768166232c5627d89d15077135dbc1ca6e1dac070be28e7b4b88e
GET /j/consent_tcfv2.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 19:41:48 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: 44sIT20LqRj70wQHqyIoOw7etYYdjkbK
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 29 Dec 2022 13:52:35 GMT
Cache-Control: max-age=300, must-revalidate
Etag: W/"0a7d0ea8d7d31b07e925fe340acf431b"
Vary: Accept-Encoding
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
Age: 107
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: I3i5XukMj1o6V-Ctmnd0eFbNnMsTgGSkTQ5KnvaT_zlL3dZ1cmzRHg==
s.adroll.com/i/favicon/nextroll-32x32.png
143.204.55.75200 OK 1.6 kB URL HTTP/1.1 s.adroll.com/i/favicon/nextroll-32x32.png
IP 143.204.55.75:0
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash 403a0a7dcf2d617e7ea852bfb9d11945
c4b81037ee9e0fb2543b806193112811459ea199
bcaf0e3f087296133e0a996ee3d289a8d1a690147c93e0ab62019b505e6f9355
GET /i/favicon/nextroll-32x32.png HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1615
Connection: keep-alive
Last-Modified: Mon, 28 Jun 2021 18:19:21 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: eTpwxbAIDHDUN.4tfrROIgU_pzKN9Xh0
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 28 Dec 2022 19:45:40 GMT
Etag: "403a0a7dcf2d617e7ea852bfb9d11945"
Vary: Accept-Encoding
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
Age: 74300
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ot1k8a8Sh-O17Nf9yAJsLpMVb3q8o_drRcRLbv-Uz6JZ2EMhr8jFgQ==
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=32148&tdr=&plh=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&cb=17059377778367158term=value
54.69.84.146200 OK 3.9 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=32148&tdr=&plh=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&cb=17059377778367158term=value
IP 54.69.84.146:0
File type ASCII text, with very long lines (14758), with no line terminators
Hash 3d5c2ce58424d4d8ae28f5a84e98a04f
2ec7b1e5498ef775b40849d4c49cce30139197d0
4598d8be75aedf7291489787c0e866b33c32f701b4f9e44582a0dcf47f533929
GET /spx?dxver=4.0.0&shaid=32148&tdr=&plh=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&cb=17059377778367158term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Thu, 29 Dec 2022 13:54:20 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
app.getsitecontrol.com/api/v1/targeting?ts=1672322055605
54.174.98.56200 OK 117 B URL HTTP/2 app.getsitecontrol.com/api/v1/targeting?ts=1672322055605
IP 54.174.98.56:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1fa83732b28032048dd8fb298c5d390f
034347d9c08783fc2a75c9e9efdf19a2eebde70c
8d1c0af829ae1e0f71b05e8aa5066a9a1619c3b31330b48776452618c86b7640
POST /api/v1/targeting?ts=1672322055605 HTTP/1.1
Host: app.getsitecontrol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 91
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:21 GMT
content-type: application/json
content-length: 117
server: getsitecontrol targeting
cache-control: private:max-age=3600
access-control-allow-origin: *
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type,X-Requested-With
access-control-allow-credentials: false
X-Firefox-Spdy: h2
api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b?t=Travel%20Insurance%20for%20adventure%20activities&u=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&r=
23.253.41.115200 OK 52 kB URL HTTP/1.1 api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b?t=Travel%20Insurance%20for%20adventure%20activities&u=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&r=
IP 23.253.41.115:0
File type ASCII text, with very long lines (52243), with no line terminators
Hash 6a606bc5912bae27ff951403a37a2f3e
5c56efade168b3ad84cb875218c2e8f4b8b4cf27
3cc972537a7f95324f44e849128662c412daca797cd465b7713c3807fc1a7012
GET /anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b?t=Travel%20Insurance%20for%20adventure%20activities&u=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&r= HTTP/1.1
Host: api.autopilothq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private,max-age=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/javascript
Content-Length: 52243
Date: Thu, 29 Dec 2022 13:54:21 GMT
P3P: CP="Intentionally invalid"
Set-Cookie: b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b=63ad9c0d13849d0f205c9a8c; Path=/anywhere; Expires=Fri, 29 Dec 2023 13:54:21 GMT; SameSite=None; Secure; HttpOnly
cda_speedyfox.io=v1; Path=/anywhere; Expires=Fri, 29 Dec 2023 13:54:21 GMT; SameSite=None; Secure; HttpOnly
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
X-Timing: lt=0,fs=39,tfc=42,fpcd=42
Connection: close
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c25280ccf6aeee64e1e15873bf6a19f6
60c8ebf1f4a0e7d829785c993392a0d18a78122c
235962ee8c5ee8e64d243f766fb5a5fbddc1646e4e3a28539beea80e69cc48cd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Dec 2022 13:54:21 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Dec 2022 03:37:47 GMT
Expires: Mon, 02 Jan 2023 03:37:46 GMT
Etag: "60c8ebf1f4a0e7d829785c993392a0d18a78122c"
Cache-Control: max-age=308004,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 781306f40ebbb50b-OSL
35.85.84.151/is
35.85.84.151200 OK 32 B IP 35.85.84.151:0
File type ASCII text, with no line terminators
Hash b0e2ae00c9bd3a02358e5f67453bddf2
a0d34cb36b97a73da580b2e9af769cbd93b96656
b8081e92434145c645440569283913d860f7409b352038596fc612194900996d
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 35.85.84.151
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.worldnomads.com/
Origin: https://www.worldnomads.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 29 Dec 2022 13:54:21 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2ef5bd9a7d8cfc7d849b2ef0b7a69234
2d1825e03d5e1954b2ff242d845a7a769c4e8883
e3bddf423b358765419c805b294159eafe88a6868084b04fe84f21f4fcca8ed7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3BDDF423B358765419C805B294159EAFE88A6868084B04FE84F21F4FCCA8ED7"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9623
Expires: Thu, 29 Dec 2022 16:34:45 GMT
Date: Thu, 29 Dec 2022 13:54:22 GMT
Connection: keep-alive
speedyfox.io/anywhere/cda/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b?sid=63ad9c0d13849d0f205c9a8c
23.253.207.75200 OK 0 B URL HTTP/1.1 speedyfox.io/anywhere/cda/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b?sid=63ad9c0d13849d0f205c9a8c
IP 23.253.207.75:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /anywhere/cda/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b?sid=63ad9c0d13849d0f205c9a8c HTTP/1.1
Host: speedyfox.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
P3P: CP="Intentionally invalid"
Set-Cookie: b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b=63ad9c0d13849d0f205c9a8c; Path=/anywhere; Expires=Fri, 29 Dec 2023 13:54:22 GMT; SameSite=None; Secure; HttpOnly
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Date: Thu, 29 Dec 2022 13:54:22 GMT
Connection: close
Transfer-Encoding: chunked
api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/core.js
23.253.41.115200 OK 45 kB URL HTTP/1.1 api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/core.js
IP 23.253.41.115:0
File type ASCII text, with very long lines (32025)
Hash e2b773327d56fe9d156150a03fa89df1
f87063d79523e4814763c70d543151ffe54bbf5a
f96e6cc875857f25abf20efd821137c93e3261b8d5024f1bc317e761ab0f5604
GET /anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/core.js HTTP/1.1
Host: api.autopilothq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b=63ad9c0d13849d0f205c9a8c; cda_speedyfox.io=v1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: public,no-transform,max-age=604800,s-maxage=604800
Expires: Thu, 05 Jan 2023 13:54:22 GMT
Date: Thu, 29 Dec 2022 13:54:22 GMT
Content-Encoding: gzip
Content-Length: 44702
ETag: e2b773327d56fe9d156150a03fa89df1
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
X-Timing: lt=1,lso-n=1,fs=2
Connection: close
px.steelhousemedia.com/st?ga_tracking_id=UA-177811-32&ga_client_id=1198856536.1672322054&shpt=Travel%20Insurance%20for%20adventure%20activities&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-177811-32%22%2C%22ga_client_id%22%3A%221198856536.1672322054%22%2C%22shpt%22%3A%22Travel%20Insurance%20for%20adventure%20activities%22%2C%22dcm_cid%22%3A%221672322053.1%22%2C%22dcm_gid%22%3A%221066427557.1672322055%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1672322053.1&dcm_gid=1066427557.1672322055&dxver=4.0.0&shaid=32148&plh=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&cb=17059377778367158term%3Dvalue&shadditional=sh_conversion%3DSHBLOCK%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Cappnexus%3Dtrue
35.82.204.11200 OK 1.1 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-177811-32&ga_client_id=1198856536.1672322054&shpt=Travel%20Insurance%20for%20adventure%20activities&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-177811-32%22%2C%22ga_client_id%22%3A%221198856536.1672322054%22%2C%22shpt%22%3A%22Travel%20Insurance%20for%20adventure%20activities%22%2C%22dcm_cid%22%3A%221672322053.1%22%2C%22dcm_gid%22%3A%221066427557.1672322055%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1672322053.1&dcm_gid=1066427557.1672322055&dxver=4.0.0&shaid=32148&plh=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&cb=17059377778367158term%3Dvalue&shadditional=sh_conversion%3DSHBLOCK%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Cappnexus%3Dtrue
IP 35.82.204.11:0
File type ASCII text, with very long lines (2065)
Hash e71571b5000fef1a56894f3ab2e22697
25ad5176e8d34054cf92030b48f54de039b2c184
b4bf37499f6d8ddf12bfd1e7a8770aa59cb546ed89e158ad7a89836dd04b1754
GET /st?ga_tracking_id=UA-177811-32&ga_client_id=1198856536.1672322054&shpt=Travel%20Insurance%20for%20adventure%20activities&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-177811-32%22%2C%22ga_client_id%22%3A%221198856536.1672322054%22%2C%22shpt%22%3A%22Travel%20Insurance%20for%20adventure%20activities%22%2C%22dcm_cid%22%3A%221672322053.1%22%2C%22dcm_gid%22%3A%221066427557.1672322055%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%7D%7D&dcm_cid=1672322053.1&dcm_gid=1066427557.1672322055&dxver=4.0.0&shaid=32148&plh=https%3A%2F%2Fwww.worldnomads.com%2Ftravel-insurance%2Factivities&cb=17059377778367158term%3Dvalue&shadditional=sh_conversion%3DSHBLOCK%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2Cga4%3Dtrue%2Cappnexus%3Dtrue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 29 Dec 2022 13:54:22 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=4c87df7b-8780-11ed-879b-9940d1bf1a65;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c
23.253.41.115200 OK 0 B URL HTTP/1.1 api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c
IP 23.253.41.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c HTTP/1.1
Host: api.autopilothq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Referer: https://www.worldnomads.com/
Origin: https://www.worldnomads.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Access-Control-Allow-Headers: Null, Accept, Content-Type
Allow: GET, POST, PUT, OPTIONS
Date: Thu, 29 Dec 2022 13:54:22 GMT
Connection: close
Transfer-Encoding: chunked
api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c
23.253.41.115200 OK 0 B URL HTTP/1.1 api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c
IP 23.253.41.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PUT /anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c HTTP/1.1
Host: api.autopilothq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 89
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Content-Length: 0
P3P: CP="Intentionally invalid"
Set-Cookie: b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b=63ad9c0d13849d0f205c9a8c; Path=/anywhere; Expires=Fri, 29 Dec 2023 13:54:23 GMT; SameSite=None; Secure; HttpOnly
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
X-Timing: lt=1,lso-n=1,fs=1
Date: Thu, 29 Dec 2022 13:54:23 GMT
Connection: close
api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c
23.253.41.115200 OK 2 B URL HTTP/1.1 api.autopilothq.com/anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c
IP 23.253.41.115:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
PUT /anywhere/b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b/63ad9c0d13849d0f205c9a8c HTTP/1.1
Host: api.autopilothq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 87
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 2
P3P: CP="Intentionally invalid"
Set-Cookie: b9a25db2517d4efa8e61dc333dc5e37c95071585dc9741f99edb957ce0ba329b=63ad9c0d13849d0f205c9a8c; Path=/anywhere; Expires=Fri, 29 Dec 2023 13:54:23 GMT; SameSite=None; Secure; HttpOnly
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
X-Timing: lt=1,lso-n=1,fs=2
Date: Thu, 29 Dec 2022 13:54:23 GMT
Connection: close
ww.steelhousemedia.com/gs
44.238.130.186200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP 44.238.130.186:0
File type ASCII text, with no line terminators
Hash 30cfacae38ac291ea8ad72576042fd81
5afc6e9eb5402bddedf29ab245cf1ef3e60e799c
7ff67dc93fdd605d4a6d8de16e16c75d3b48374bdc5cadfef9b35ee80cf64ec7
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 29 Dec 2022 13:54:23 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
www.worldnomads.com/travel-insurance/activities
104.18.13.224200 OK 0 B URL HTTP/2 www.worldnomads.com/travel-insurance/activities
IP 104.18.13.224:0
GET /travel-insurance/activities HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AWSALB=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; CultureCode=; CustomUserSessionId=95a0b950-199b-4d39-bcae-620e9206f93c; affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:17 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=691200
vary: Accept-Encoding
x-aspnet-version: 4.0.30319
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-generator: Orchard
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block;
access-control-allow-origin: *
access-control-max-age: 2592000
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-security-policy: default-src 'self' blob: *.brightcove.com *.crazyegg.com *.brightcove.net https: data: 'unsafe-inline' 'unsafe-eval'
cf-cache-status: HIT
age: 14296
expires: Fri, 06 Jan 2023 13:54:17 GMT
server: cloudflare
cf-ray: 781306dd6ca70b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
api.sharedcount.com/v1.0/?apikey=8e4b7187bcfca463ceeca1577105f710bf47edd1&url=https://www.worldnomads.com/travel-insurance/activities
172.67.73.251200 OK 0 B URL HTTP/2 api.sharedcount.com/v1.0/?apikey=8e4b7187bcfca463ceeca1577105f710bf47edd1&url=https://www.worldnomads.com/travel-insurance/activities
IP 172.67.73.251:0
GET /v1.0/?apikey=8e4b7187bcfca463ceeca1577105f710bf47edd1&url=https://www.worldnomads.com/travel-insurance/activities HTTP/1.1
Host: api.sharedcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
x-fetch-date: Thu, 29 Dec 2022 13:54:18 GMT
x-quota-remaining: 43220
x-quota-used: 6780
cache-control: max-age=1800
cf-cache-status: MISS
last-modified: Thu, 29 Dec 2022 13:54:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dsrJYlHKgCe5OP9oIQfBSZ%2F0iQn0rz6EwHJhOQacBhKtdXZO6gsBdTgfho%2B65I%2FYwz5mbIo3t1HapH8DxV%2BRjd9BHMWzuEwwb7ePoCKw9UfxHeAs%2BSpljGP64PH8EMe80hADkz8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 781306e0894cb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.worldnomads.com/cdn-cgi/challenge-platform/h/g/cv/result/781306dd6ca70b61
104.18.13.224200 OK 0 B URL HTTP/2 www.worldnomads.com/cdn-cgi/challenge-platform/h/g/cv/result/781306dd6ca70b61
IP 104.18.13.224:0
POST /cdn-cgi/challenge-platform/h/g/cv/result/781306dd6ca70b61 HTTP/1.1
Host: www.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 359
Origin: https://www.worldnomads.com
Connection: keep-alive
Referer: https://www.worldnomads.com/travel-insurance/activities
Cookie: AWSALB=PX8sNePv1RceP/vkAH0PsqucELHj3xnDsM6mSMfGJFqwv0GzpJ09AeEFGT+Gcb6mHdTaQkfeZp++LBNBJfnbLjbtq/WalZ9abQkBDbmipE27TurRMAdfcpjhN/kT; CultureCode=; CustomUserSessionId=95a0b950-199b-4d39-bcae-620e9206f93c; affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=3Hp2ONJXVx3bE1sDef88emigDCuqLchzPeGnT3t7Fi8-1672322058-0-ATJZyBdBh92ri2dNXB0m2FcYL7AcP/aIRfLFdTN4kgB9PiP6Xe0ku+aPN06rmd9qWdMWuD0WbOhB/p3EPN3g7MOg6420uZeKXnS2Adnq5s1JUDrlTlt3tRSKgIHxomuyzEaZX5UuOkeA/Av+hQZKGqFFcmTfdVeDaujVA+zjpWRFzizXKde90pYRxPpDqTZ0Eg==; path=/; expires=Thu, 29-Dec-22 14:24:18 GMT; domain=.worldnomads.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e4abda0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-intrepid.svg
104.18.13.224200 OK 0 B URL HTTP/2 brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-intrepid.svg
IP 104.18.13.224:0
GET /source/img/trustpartner/wn-trustpartner-intrepid.svg HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/svg+xml
x-amz-id-2: yilpdE8OM0WjOrqdowhil0Oc9YJTglbBhQy9fkXfFz5HX5c1IQhXfxkMbaAK7GlJfoXLbSQlDSo=
x-amz-request-id: 6T378CBM56DJ049P
last-modified: Thu, 15 Sep 2022 00:28:09 GMT
etag: W/"3234c998138b1f96de1c81bc1d65ded6"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306e0afcf0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
st.getsitecontrol.com/main/runtime/runtime.2.10.4.js
138.199.37.227200 OK 0 B URL HTTP/2 st.getsitecontrol.com/main/runtime/runtime.2.10.4.js
IP 138.199.37.227:0
ASN #60068 Datacamp Limited
GET /main/runtime/runtime.2.10.4.js HTTP/1.1
Host: st.getsitecontrol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:20 GMT
content-type: application/javascript; charset=utf-8
server: BunnyCDN-DE1-860
cdn-pullzone: 44631
cdn-uid: e3a1246b-2fdd-4153-9207-6ca707c9379d
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
etag: W/"16fdd443ea613bdedb86943726042799"
last-modified: Mon, 24 Sep 2018 08:05:29 GMT
x-amz-id-2: yxnHocvLaJu1hEZeuMrNBnucoj47xnWwW66OBkTXbrc5aITndBO5+C0gQK6wFzsArkEWNS2l/p4=
x-amz-request-id: HVRT0694JNGFX4YY
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/11/2022 02:14:14
cdn-edgestorageid: 1047
cdn-status: 200
cdn-requestid: 1bfc341917407d9a8413283773d1f644
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-ivhq.svg
104.18.13.224200 OK 0 B URL HTTP/2 brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-ivhq.svg
IP 104.18.13.224:0
GET /source/img/trustpartner/wn-trustpartner-ivhq.svg HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/svg+xml
x-amz-id-2: bzx4oTFc6BwgWlzapwwG4J3R1FKxOkFov/DB+H+OhaGSpIYLrd2drGazO6pV/WeOof9aukbC3Gc=
x-amz-request-id: CKN9M7564SF81BH0
last-modified: Thu, 15 Sep 2022 00:28:09 GMT
etag: W/"9d3f0531496e0defde510f95ac526db5"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306e0bfd70b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-hostelworld.svg
104.18.13.224200 OK 0 B URL HTTP/2 brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-hostelworld.svg
IP 104.18.13.224:0
GET /source/img/trustpartner/wn-trustpartner-hostelworld.svg HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/svg+xml
x-amz-id-2: cPq7FrkKayUiEWxhyGC47fzyRVjfk+xj0QxpdZeCDOCJLPoIYiG/WC/z8zpRn7KMuKz1m7cBZhw=
x-amz-request-id: 66CF8DZ5CGAKX0MF
last-modified: Wed, 20 Jul 2022 01:14:35 GMT
etag: W/"3ad9a695b519b60e4477419e4c2f2e25"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306e0bfd10b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
qqc-api.worldnomads.com/assets/v2.0.0/css/app.25439462.css
104.18.13.224200 OK 0 B URL HTTP/2 qqc-api.worldnomads.com/assets/v2.0.0/css/app.25439462.css
IP 104.18.13.224:0
GET /assets/v2.0.0/css/app.25439462.css HTTP/1.1
Host: qqc-api.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: text/css
x-amzn-requestid: ddc26d92-a616-4281-96cc-01ddd920e5e7
x-amzn-remapped-content-length: 276239
x-amz-apigw-id: d6K-EHvqSwMFcuw=
timestamp: Thu, 29 Dec 2022 12:43:58 GMT
x-amzn-trace-id: Root=1-63ad8b8d-456650411c0b66e4088741ff
last-modified: Thu, 29 Dec 2022 12:43:57 GMT
cf-cache-status: HIT
age: 3052
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306e269a90b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
widgets.getsitecontrol.com/47018/script.js
194.242.11.186200 OK 0 B URL HTTP/2 widgets.getsitecontrol.com/47018/script.js
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
GET /47018/script.js HTTP/1.1
Host: widgets.getsitecontrol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:20 GMT
content-type: text/javascript; charset=utf-8
server: BunnyCDN-NO1-830
cdn-pullzone: 44619
cdn-uid: e3a1246b-2fdd-4153-9207-6ca707c9379d
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=5
content-encoding: br
etag: W/"991adcc2480e6ecd23d20e263c5bd6eb"
last-modified: Mon, 21 Nov 2022 21:49:07 GMT
cdn-cachedat: 11/21/2022 21:51:41
x-amz-id-2: zow2CTlf8uJLRVq9FsicY+y7rVyA7DvQKcu8j0MnkO08z7mhiRsQxPdChIHmVI0fqhpgp/RM7So=
x-amz-request-id: G0859KD6EKN4E8BE
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: afb5841ed082628428e20e240e2b9999
cdn-cache: REVALIDATED
X-Firefox-Spdy: h2
qqc-api.worldnomads.com/getwidget?brand=wn
104.18.13.224200 OK 0 B URL HTTP/2 qqc-api.worldnomads.com/getwidget?brand=wn
IP 104.18.13.224:0
GET /getwidget?brand=wn HTTP/1.1
Host: qqc-api.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:17 GMT
content-type: application/json
x-amzn-requestid: d5373c37-6430-42c0-921e-dfccc468c849
x-amz-apigw-id: d6DGhH7AywMFTtg=
x-amzn-trace-id: Root=1-63ad7ef6-3bc11e423942e1c7288552bd
last-modified: Thu, 29 Dec 2022 11:50:15 GMT
cf-cache-status: HIT
age: 3053
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 781306de4d910b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
components.worldnomads.com/v0.44.2/styles/friendly.css
104.18.13.224200 OK 0 B URL HTTP/2 components.worldnomads.com/v0.44.2/styles/friendly.css
IP 104.18.13.224:0
GET /v0.44.2/styles/friendly.css HTTP/1.1
Host: components.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.worldnomads.com/
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:18 GMT
content-type: text/css
x-amz-id-2: rGbiGb09ydHO6svdoR2CkQJTzjPf6L3rAdN8m1fTfR//6RTWjnP2AuVVN3cyU5gsQRRJzclSDo4=
x-amz-request-id: 34196FJXWN67M0H1
last-modified: Wed, 09 Sep 2020 08:17:16 GMT
etag: W/"f4178a4b15112f09607f6597541a373a"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: HIT
expires: Fri, 06 Jan 2023 13:54:18 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306de3d7b0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-eurail.svg
104.18.13.224200 OK 0 B URL HTTP/2 brand.worldnomads.com/source/img/trustpartner/wn-trustpartner-eurail.svg
IP 104.18.13.224:0
GET /source/img/trustpartner/wn-trustpartner-eurail.svg HTTP/1.1
Host: brand.worldnomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brand.worldnomads.com/source/wng-wn-styles-1.79.8.min.css
Cookie: affiliate_tracker=b66db1a83dda4d5982e673ca203c2e92; PartnerCode=trvlcllcting; affiliate=c0dbc13b-a128-4036-a313-407d397b8aa4; affiliate_subid=link; PartnerSource=link; __cf_bm=Bqwg.7TNn9t8OjL2UgdcG8qYJD3OzOZzSUVpdAMClAw-1672322056-0-AY+uG+EZWok+GADUGCx5Tq+pu8Uem/VsO0w6MEiK8CN43eWJ7kGILNh2JFvdGvG7fRUgy37uaMR0R1CFU68/aCk=; __cfruid=b7425716ae36aaecb3815e86f17d9ff0bff1f2a5-1672322056; firsttouch=www.worldnomads.com%2Ftravel-insurance%2Factivities
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Dec 2022 13:54:19 GMT
content-type: image/svg+xml
x-amz-id-2: 1CEyr1vTEXmZOprPI51pOuFf/EZNbeipwXFyPEheqZcd0eD/fQKh86iAHFiFVABnqFvfF7Xer9I=
x-amz-request-id: NQ7Z9WZGJXM8JEYR
last-modified: Thu, 15 Sep 2022 00:28:09 GMT
etag: W/"438ef76854f0becb66090397c3fe1c31"
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'
vary: Accept-Encoding, Origin
cf-cache-status: REVALIDATED
expires: Fri, 06 Jan 2023 13:54:19 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 781306e0bfd40b61-OSL
content-encoding: br
X-Firefox-Spdy: h2