cdn3.partnerserving.com/toolbar/pub/62606/6533/download/HomeTab.exe
77.247.179.90200 OK 527 B URL HTTP/1.1 cdn3.partnerserving.com/toolbar/pub/62606/6533/download/HomeTab.exe
IP 77.247.179.90:0
ASN #43350 NForce Entertainment B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (527), with no line terminators
Hash 7a6f4e564a57e2ceb0a37fc791eb93b1
7408bfc3180999b1aa3556d1cca00744d87c98eb
c622f2cc9cf097b2733655e0612dc21510948a850aa7b011b68dab3c18379d43
Analyzer Verdict Alert fortinet Malware
GET /toolbar/pub/62606/6533/download/HomeTab.exe HTTP/1.1
Host: cdn3.partnerserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 527
content-type: text/html; charset=utf-8
date: Tue, 07 Mar 2023 13:58:16 GMT
server: nginx
set-cookie: sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739; path=/; domain=.partnerserving.com; expires=Sun, 25 Mar 2091 17:12:23 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0f2c901fe04f9e3d18e9c3387b076780
3f0115cd05d7857a8119eff0479f5812df155d3d
84518fa2565f7f63933d3c552e1dc07f84c71f4a3df5d2821484c371ef57b924
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "84518FA2565F7F63933D3C552E1DC07F84C71F4A3DF5D2821484C371EF57B924"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2301
Expires: Tue, 07 Mar 2023 14:36:37 GMT
Date: Tue, 07 Mar 2023 13:58:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cf14baed0842431a08367ed54f2346ca
d943be8835b7e4470e3d6fbe09ac39c5464be434
a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13955
Expires: Tue, 07 Mar 2023 17:50:51 GMT
Date: Tue, 07 Mar 2023 13:58:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Mar 2023 13:08:40 GMT
content-type: application/json
age: 2976
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5034bcceb9691ad6244be6045742ab53
51e77cdc92833432cd26b13f28875791a187c63c
540637d0d69c1201dcb2dd813b40e64cd07c5bd7685d46a7bad4d437a4e7aeea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "540637D0D69C1201DCB2DD813B40E64CD07C5BD7685D46A7BAD4D437A4E7AEEA"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16993
Expires: Tue, 07 Mar 2023 18:41:29 GMT
Date: Tue, 07 Mar 2023 13:58:16 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Mar 2023 13:58:16 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: M/9F0r1vPj6byffTxP5P5BXBdtKEcLcd9wnVxney4ohnHHVAY73dOG6g1f50yqnHn2NB17AQih4=
x-amz-request-id: C2G9QW8W0DWDR56D
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Mar 2023 13:35:14 GMT
age: 1382
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
cdn3.partnerserving.com/favicon.ico
77.247.179.90404 Not Found 9 B URL HTTP/1.1 cdn3.partnerserving.com/favicon.ico
IP 77.247.179.90:0
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: cdn3.partnerserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn3.partnerserving.com/toolbar/pub/62606/6533/download/HomeTab.exe
Cookie: sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 07 Mar 2023 13:58:16 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Mar 2023 13:03:41 GMT
age: 3276
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn3.partnerserving.com/toolbar/pub/62606/6533/download/HomeTab.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3ODIwNDY5NiwiaWF0IjoxNjc4MTk3NDk2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydDUyZmVwcXNicGZiNDQ1a3MwNXA2c2IiLCJuYmYiOjE2NzgxOTc0OTYsInRzIjoxNjc4MTk3NDk2MjQ5MTUyfQ.oSFN9468qdCrFxwOYH-1sC54bb0VTDN5T0RVwK0Rhvc&sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739
77.247.179.90302 Found 11 B URL HTTP/1.1 cdn3.partnerserving.com/toolbar/pub/62606/6533/download/HomeTab.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3ODIwNDY5NiwiaWF0IjoxNjc4MTk3NDk2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydDUyZmVwcXNicGZiNDQ1a3MwNXA2c2IiLCJuYmYiOjE2NzgxOTc0OTYsInRzIjoxNjc4MTk3NDk2MjQ5MTUyfQ.oSFN9468qdCrFxwOYH-1sC54bb0VTDN5T0RVwK0Rhvc&sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739
IP 77.247.179.90:0
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /toolbar/pub/62606/6533/download/HomeTab.exe?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3ODIwNDY5NiwiaWF0IjoxNjc4MTk3NDk2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydDUyZmVwcXNicGZiNDQ1a3MwNXA2c2IiLCJuYmYiOjE2NzgxOTc0OTYsInRzIjoxNjc4MTk3NDk2MjQ5MTUyfQ.oSFN9468qdCrFxwOYH-1sC54bb0VTDN5T0RVwK0Rhvc&sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739 HTTP/1.1
Host: cdn3.partnerserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn3.partnerserving.com/toolbar/pub/62606/6533/download/HomeTab.exe
Cookie: sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 07 Mar 2023 13:58:17 GMT
location: http://cynes-gwf.com/zcvisitor/1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
server: nginx
set-cookie: sid=1bc3d3d8-bcf0-11ed-bbfb-d7a3f4cbf739; path=/; domain=.partnerserving.com; expires=Sun, 25 Mar 2091 17:12:24 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bc9a86b8d3035b57b58750f8896202e8
1485042fff689cadbf0c7a540f430993f23d45e3
b06e4961e184d51008f4adb9c8fe571f08b21b4728e5eac0bb4795861e03aa2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B06E4961E184D51008F4ADB9C8FE571F08B21B4728E5EAC0BB4795861E03AA2F"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12071
Expires: Tue, 07 Mar 2023 17:19:28 GMT
Date: Tue, 07 Mar 2023 13:58:17 GMT
Connection: keep-alive
cynes-gwf.com/zcvisitor/1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
54.237.193.255200 1.1 kB URL HTTP/1.1 cynes-gwf.com/zcvisitor/1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
IP 54.237.193.255:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 954234b414ffa1f623e23de186d47c17
61a3799e54e351986f0cc167479df3e6927506b3
d01a9c686a314a58974f8bffd128a9313692a0ea814c4562bf54c290ed7fb849
GET /zcvisitor/1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51 HTTP/1.1
Host: cynes-gwf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://cdn3.partnerserving.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 07 Mar 2023 13:58:17 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: iJhXdnFY
cynes-gwf.com/zcredirect?visitid=1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
54.237.193.255200 784 B URL HTTP/1.1 cynes-gwf.com/zcredirect?visitid=1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP 54.237.193.255:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (349)
Hash 02d0b1e5bf29c2177a3f966f54506515
c618c8cc5c0ec91c1f5dd18c856cc955b45d5812
73f979ce95bb1042fa2d88add0ad9bd826b3a5b3bb234b94d2c3fd06a67629a0
GET /zcredirect?visitid=1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: cynes-gwf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cynes-gwf.com/zcvisitor/1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 07 Mar 2023 13:58:17 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: HRYSuazl
push.services.mozilla.com/
35.161.188.100101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.161.188.100:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nrEeAnOvu1fPExm11/ghjw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 46ogSQ1roIx24pjIgt55iy2FwEU=
cynes-gwf.com/favicon.ico
54.237.193.255404 653 B URL HTTP/1.1 cynes-gwf.com/favicon.ico
IP 54.237.193.255:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: cynes-gwf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cynes-gwf.com/zcredirect?visitid=1c17ad0a-bcf0-11ed-9f9b-0afd6cafc2db&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Tue, 07 Mar 2023 13:58:17 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: BBVcUlNp
trk.myaffxyz.com/click?campaign_id=41&pub_id=101&url_id=1
172.67.134.192302 Found 0 B URL HTTP/2 trk.myaffxyz.com/click?campaign_id=41&pub_id=101&url_id=1
IP 172.67.134.192:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?campaign_id=41&pub_id=101&url_id=1 HTTP/1.1
Host: trk.myaffxyz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hawkaffinity.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 07 Mar 2023 13:58:18 GMT
content-length: 0
location: https://www.booking.com/index.html?aid=7928989&label=101
referer:
referrer-policy: no-referrer
x-rt: 2
set-cookie: sess_5fd1fdae2a7d5332e673c72a=61a7203574efcd03ad79e16b; expires=Tue, 14 Mar 2023 13:58:18 GMT; path=/; HttpOnly
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gjl%2BABkisWpwZHUU4qKlZSSCJzKOy1lznEpL3iFu0nzlAHrxvd%2B7%2FlLyEMov6YbIeLOFNEhlCAjJPi6nkLMWNQvRSGLJdiYCx20j%2Bac5eNFvUABsaf2eUad%2FtrwlQIY8PcjB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a435a3e0b75fab8-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a5ffd15937290b01c6440b1c62e0521
cfc46cb33cd50e11dedfbfe641713413bc0b6749
1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9665
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 13:58:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a5ffd15937290b01c6440b1c62e0521
cfc46cb33cd50e11dedfbfe641713413bc0b6749
1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9665
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 13:58:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a5ffd15937290b01c6440b1c62e0521
cfc46cb33cd50e11dedfbfe641713413bc0b6749
1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9665
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 13:58:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a5ffd15937290b01c6440b1c62e0521
cfc46cb33cd50e11dedfbfe641713413bc0b6749
1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9665
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 13:58:18 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a5ffd15937290b01c6440b1c62e0521
cfc46cb33cd50e11dedfbfe641713413bc0b6749
1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2"
Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9665
Expires: Tue, 07 Mar 2023 16:39:23 GMT
Date: Tue, 07 Mar 2023 13:58:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28063b72ccbc658caa4705a87e7a4e12
35a9f5d55ffadd16548d61c99d59e426dd11ce21
a9a2c8104c6c8454eff30437c96b672e230b073623f33a67614fe4fa3ba0645d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e9d3719-c918-44cb-8546-6929c5bebc79.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7235
x-amzn-requestid: 17b741c5-3911-46a5-b22d-17ef50381ad4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWO15EPHIAMFx-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640591bf-58dbdf76597432b9505f5805;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:09:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: IYw6V_NejqrqRl4UmaUhYInv69UZcaqm8ytploOryAw3Gz4jyJNbdQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 07:18:15 GMT
age: 24003
etag: "35a9f5d55ffadd16548d61c99d59e426dd11ce21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4a8d319b1ada8f22e8a1874033aba2c
3afc8111b03b662e88e61f4991a20a90d7d4f973
fca961af0737a3f0caa3a8d5762a309b871f54d0c8bd0e6ab4efdee4cf2fa462
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac192c39-be71-4b23-af6f-d0922c402521.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6282
x-amzn-requestid: 7f17d7b2-eff8-4e36-a0b6-661862d08620
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYOHQGtNIAMFp8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065d61-18f0b0196b949829744dae4c;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 18MDurmgerNTDpqnJEoxM5SUxCRIIpv7QKiUF1qESIQ7S_myX7CIKA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d15b6a95f7c8298444f59a99d8027cec.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 21:59:56 GMT
age: 57502
etag: "3afc8111b03b662e88e61f4991a20a90d7d4f973"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c229e9be4ad878528d3be67e4c05e7b1
03da37d1ac086a0fe3c6415cc297a6a38659db46
13927a535230f45e8fe13412b7d5a3a63f253aca91ac8e4f0c78f1dab289d4d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3389a930-6e96-43f6-92b6-997fabeb27da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7507
x-amzn-requestid: b14d1930-331a-4c89-8f32-13fd0107655a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BK_C1GAsIAMFqoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64011211-67b4ba2644683bba365394d5;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 21:16:01 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Wp1rR0UWjbTknA1X_yAiAe51-osWvi2_Snv6NNgi-q9xod1I9W6Qcw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 58b8655e3ea662bad02cac6b9d4c88ba.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Mar 2023 04:06:35 GMT
age: 35503
etag: "03da37d1ac086a0fe3c6415cc297a6a38659db46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d9e542d11eb3e8eaf08c83e0d72ea74
3113bde9c7ab14701fc4dbc39eec955b30d70150
c677d4b6fc6cf9c120e4f1844cf4605aeb6c7902fdde34ae21258fbb64d0f79b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F854c41b2-cfb4-4762-9ada-143a1a51438c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8512
x-amzn-requestid: 9f7f00c0-dfb4-4b72-a4be-1a5f3c6f2401
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYNhZHU4oAMFTsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065c6f-5b1f26a475702ce913902e66;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 11j839pvpLCc9CuKArWhRNy_WgpH8Gf5wWGj50n1z8REpfhTqnPfFQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:11:18 GMT
etag: "3113bde9c7ab14701fc4dbc39eec955b30d70150"
content-type: image/jpeg
age: 56820
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ec4f2da6f73f59d9a2493697cbaec8c
3513d0fa932a2cf6ec0cf948cfd6e9c67e450824
cbe6ab8f36271592c0febfa90fe92c88d96dce40197e66cb7c06470bf99eccde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4d400fe-c6a9-4998-bd0c-22271ed5bede.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9515
x-amzn-requestid: b2c70ebf-087b-4adf-bc0d-d657586581cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A_J1hHdLoAMFQKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fc5689-632acdce4082512541dc8c1a;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 07:06:49 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 9IQZWv-0fN7tGMmzg02TvepIAwFovvh_QLoCzFyGokcjHvj1YYEYhA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:46:44 GMT
age: 54694
etag: "3513d0fa932a2cf6ec0cf948cfd6e9c67e450824"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e3c14e5-22bb-45cb-88ea-f02e2c9a3090.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e3c14e5-22bb-45cb-88ea-f02e2c9a3090.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6edb15b0628347e7e7064affe077331
c64ec1ad9bbbed800c3560cbdbe1631fbe5f9e26
56c482b858cef1eb56a47dc54b298c31c2dd85cacdc748cea30b3d74a3cda99b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e3c14e5-22bb-45cb-88ea-f02e2c9a3090.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3359
x-amzn-requestid: c884d077-cb85-41c5-adcb-2baac3350d4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BYOuYHNJIAMFUig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64065e5b-74ab80fe0f96e85957d1a0f3;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 21:42:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: GRGivQ_U_5e7EnFMlr0hq-lyRJBfR55XHGsDTM_nOOBWq-qq1zobTQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 22:32:24 GMT
age: 55554
etag: "c64ec1ad9bbbed800c3560cbdbe1631fbe5f9e26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js
54.230.111.69200 OK 95 B URL HTTP/2 cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js
IP 54.230.111.69:0
File type ASCII text, with no line terminators
Hash 335be8900580e9c3875dba57334294ae
a86597d2ddfa410df13bceca86fdf9a2291fe798
8a882fd19a15567e53a5c3c08d22cdab714fa87734ed92d854c4e8fdf3940b1f
GET /static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 95
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:38 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 19 Feb 2023 00:36:39 GMT
expires: Tue, 21 Mar 2023 00:36:39 GMT
cache-control: max-age=2592000
etag: "5cadd1c2-5f"
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TbLucbGbgjXE2k8rG67YSaHmj-1Xzw8acEAAMFla85KgUCV5P7lnDg==
age: 1430500
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js
104.19.187.97200 OK 11 kB URL HTTP/2 cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js
IP 104.19.187.97:0
File type ASCII text, with very long lines (65028)
Hash 3500294b786307cce674525ca352d91e
eb9c2bae6632839690311a5cad6b85ca88dd90a5
518d0082d06d8dafecd487cc67e3386ba98ddaaa4ac437feb1b7a27b67c76e73
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/x-javascript
content-length: 10921
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: NQApS3hjB8zmdFJco1LZHg==
last-modified: Mon, 27 Feb 2023 11:33:51 GMT
etag: 0x8DB18B680241895
x-ms-request-id: 6477d009-801e-00a2-2c9f-4a157a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 8628
expires: Wed, 08 Mar 2023 13:58:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a42b8670b69-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
104.19.187.97200 OK 8.5 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP 104.19.187.97:0
File type ASCII text, with very long lines (25777)
Hash 13081dd5dd55a749c5358a48322153b4
700023a405076bc7b241fe0baef36ad107736ff6
1bae34b83af831d00139abcd02bd05b950d4a594fe5e59ac5bc64317aa88512a
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/javascript
content-length: 8460
content-encoding: gzip
content-md5: Ewgd1d1Vp0nFNYpIMiFTtA==
last-modified: Thu, 02 Mar 2023 20:31:12 GMT
etag: 0x8DB1B5D10AED08B
x-ms-request-id: fa531f66-201e-0068-45ee-4d86b7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 78467
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a42f8ba0b69-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json
104.19.187.97200 OK 2.1 kB URL HTTP/2 cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json
IP 104.19.187.97:0
File type JSON data\012- , ASCII text, with very long lines (8047), with no line terminators
Hash f93153fda041418973a1751a307e0968
43c3cb41b2a271fa5032d3fcec67286bc85bbe53
f53f3c8fea03348e1c00631dd836586d1e42dc406b3cb5bdf14c8086cc5a8106
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/x-javascript
content-length: 2122
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: +TFT/aBBQYlzoXUaMH4JaA==
last-modified: Mon, 27 Feb 2023 11:33:51 GMT
etag: 0x8DB18B68039723D
x-ms-request-id: 7bc00737-101e-00a7-4a9f-4ae105000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 8627
expires: Wed, 08 Mar 2023 13:58:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a4359180b69-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/otBannerSdk.js
104.19.187.97200 OK 76 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/otBannerSdk.js
IP 104.19.187.97:0
File type ASCII text, with very long lines (65455)
Hash 523e98a35ea92fd6e6d32d6728a8c98e
e0951a7bfa0700679aa41a03394286723e697d93
a746202b022948dfc0461cf24b3be5b01d0c08b924b23545f3cba6e2d15b41a9
GET /scripttemplates/6.22.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/javascript
content-length: 75930
content-encoding: gzip
content-md5: Uj6Yo16pL9bm0y1nKKjJjg==
last-modified: Thu, 19 Aug 2021 02:39:18 GMT
etag: 0x8D962BA8ADAEF03
x-ms-request-id: 18163f5d-b01e-0083-086c-c4784b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 43314
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a4449fa0b69-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/77946762-1e41-44bb-9c76-9c2e81167e6d/en-us.json
104.19.187.97200 OK 18 kB URL HTTP/2 cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/77946762-1e41-44bb-9c76-9c2e81167e6d/en-us.json
IP 104.19.187.97:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash eeeadac9f5a135c79c45e59f6a15a447
c27bc4278c3fc0e5f8dcace76b76a9022fc5d401
96eac481d4bed22659e69cf8ed606336c4bb51b3da4382aee650cebe8a6a16f2
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/77946762-1e41-44bb-9c76-9c2e81167e6d/en-us.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/x-javascript
content-length: 18507
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: 7urayfWhNcecReWfahWkRw==
last-modified: Mon, 27 Feb 2023 11:34:15 GMT
etag: 0x8DB18B68E426104
x-ms-request-id: 8116b8aa-201e-0027-0c9f-4a42af000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 8523
expires: Wed, 08 Mar 2023 13:58:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a44ba610b69-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otFlat.json
104.19.187.97200 OK 3.0 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otFlat.json
IP 104.19.187.97:0
File type JSON data\012- , ASCII text, with very long lines (10843)
Hash 792fef665863081a7642f10bc7b22b49
f30de5899ad8675a26c5a1688c543e7044bce0ab
af415b02ce1afa491d86bd1fafa2416302d69906ded37715ca425b6778cd7d9c
GET /scripttemplates/6.22.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/json
content-length: 2950
content-encoding: gzip
content-md5: eS/vZlhjCBp2QvELx7IrSQ==
last-modified: Thu, 19 Aug 2021 02:39:10 GMT
etag: 0x8D962BA867F281F
x-ms-request-id: 1ab7d2f4-a01e-003d-026c-c46dc0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 31247
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a44ea9d0b69-OSL
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/513.75e7f786.chunk.css
54.230.111.69200 OK 714 B URL HTTP/2 cf.bstatic.com/psb/capla/static/css/513.75e7f786.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (600)
Hash 9646d566d863bf8858bb120001e00df9
2cf81c65fc9e9003213dbd7c67be287419983765
27f6fa9431e1b155845f98ee098a95dab2d94f280259983ca4cb7611ba3f2251
GET /psb/capla/static/css/513.75e7f786.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 714
server: nginx
date: Wed, 22 Feb 2023 02:26:35 GMT
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Tue, 31 Jan 2023 10:39:41 GMT
x-amz-expiration: expiry-date="Thu, 23 Mar 2023 10:15:47 GMT", rule-id=""
expires: Fri, 24 Mar 2023 02:26:35 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "9646d566d863bf8858bb120001e00df9"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YxDTe7Y0cdNjVuhz-JjaC8y9ut7lsn0n-mr3JZL2CLqfJntGwyx7mg==
age: 1164705
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/736.efc019bd.chunk.css
54.230.111.69200 OK 851 B URL HTTP/2 cf.bstatic.com/psb/capla/static/css/736.efc019bd.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (737)
Hash 8c5c3443c3df14446e77dee5cad05769
0effbb1c48b73b93121ffa4d63bdf1af2a0bb8c4
daaafa4e355363ce4a9b42257a10160d18d17a22f38f159990e289fe07ace87d
GET /psb/capla/static/css/736.efc019bd.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 851
server: nginx
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 17 Nov 2022 11:13:07 GMT
x-amz-expiration: expiry-date="Fri, 17 Mar 2023 11:13:07 GMT", rule-id=""
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Tue, 14 Feb 2023 02:43:15 GMT
expires: Thu, 16 Mar 2023 02:42:40 GMT
cache-control: max-age=2592000
etag: "8c5c3443c3df14446e77dee5cad05769"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FHs0qF7iocEs98QLyofKsIVDXyhpUdUwBxtZinGwqitdu47JLs1HEw==
age: 1854940
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/c253238e9a1cc9e8fe7f142462ea4345a2c72799.css
54.230.111.69200 OK 1.9 kB URL HTTP/2 cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/c253238e9a1cc9e8fe7f142462ea4345a2c72799.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (7719), with no line terminators
Hash e036b327538f73f1291f12083d82183e
44d8bd5a065dc13f0cd0474b6452aba4918219da
d9dfd6d92c426088f57076297a1f84363d83c8b6e56c699c99c354b34628b253
GET /static/css/incentives_cloudfront_sd.iq_ltr/c253238e9a1cc9e8fe7f142462ea4345a2c72799.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Thu, 16 Feb 2023 14:43:14 GMT
last-modified: Tue, 17 Jan 2023 05:48:22 GMT
etag: W/"63c636a6-1e27"
expires: Sat, 18 Mar 2023 14:43:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gzwS1_O7h_ETHTPFRh5M1ao6qBw6YA3rL_tU9n2dYXZoNuxPYRRUSQ==
age: 1638905
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/45e1448a045ffbbe4ac3c464fb98c5df7c0fe7cd.css
54.230.111.69200 OK 28 kB URL HTTP/2 cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/45e1448a045ffbbe4ac3c464fb98c5df7c0fe7cd.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3f8886ca2b22c7f229dc008acc5b1e0a
4858892c7aad01a212fe771c797de4f7a1c78d43
5ca3b371312c4a2a568e940dc9cfb164d8ef4310bbb2e6e5616bd2b47632d297
GET /static/css/gprof_icons_cloudfront_sd.iq_ltr/45e1448a045ffbbe4ac3c464fb98c5df7c0fe7cd.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Tue, 03 Jan 2023 03:11:28 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Mon, 20 Feb 2023 01:20:17 GMT
expires: Wed, 22 Mar 2023 01:20:17 GMT
cache-control: max-age=2592000
etag: W/"63b39ce0-29a49"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qT3MESXQEkU_V7PJryD-WCF7QLIYtEeXrIaeBgzDQt2Ds3mg8ae0Rw==
age: 1341482
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/665.854869fd.chunk.css
54.230.111.69200 OK 339 B URL HTTP/2 cf.bstatic.com/psb/capla/static/css/665.854869fd.chunk.css
IP 54.230.111.69:0
Hash 66650b99375b83531da04f375e0c4de4
0ec242f2d67b61037d630bf84003a037e73052d8
799ea09887484b315cfa8ae279886c2cda313cf605d938b9e651e082c20ff9e2
GET /psb/capla/static/css/665.854869fd.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 339
server: nginx
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 30 Dec 2022 11:22:36 GMT
x-amz-expiration: expiry-date="Sat, 29 Apr 2023 11:22:36 GMT", rule-id=""
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 11 Feb 2023 03:13:39 GMT
expires: Mon, 13 Mar 2023 03:13:12 GMT
cache-control: max-age=2592000
etag: "66650b99375b83531da04f375e0c4de4"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wwarPiSR3zf8l2RHSwlztdQs4aPCPTYCd8ZSKo7HZMpybdjlg8FF8w==
age: 2112308
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/348.dc09efca.chunk.css
54.230.111.69200 OK 44 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/348.dc09efca.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (1847)
Hash ed1df9bceea4beb746ac396d48299de8
d5fd7ca01c37bcfd32a308b470ef678849e0518d
483d8ddbe9f50097b1aa194fa5fc59706487a916605b7871f5ce78d11750a6fe
GET /psb/capla/static/css/348.dc09efca.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"416b881ef6e331ce315a02e185efe3fa"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:00 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:00 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3_TzQL5NPnp1Z4b9Cr-5_zi-3f0cXGKa1P6hGSBJs3jMn39Jx1Qcjw==
age: 86224
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/514.3e7abeb8.chunk.css
54.230.111.69200 OK 38 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/514.3e7abeb8.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (1334)
Hash e54c11bcc72de12f917dedb9f861d4b2
fb886c08a61332a8b4f44abcec474b4569552b06
dbf0729e38e49e93f9e081c86d166a8858092c1c36530ccd22cf8fc2409d1974
GET /psb/capla/static/css/514.3e7abeb8.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Feb 2023 13:33:36 GMT
x-amz-expiration: expiry-date="Sat, 03 Jun 2023 13:33:36 GMT", rule-id=""
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 05 Mar 2023 14:10:23 GMT
expires: Tue, 04 Apr 2023 14:04:50 GMT
cache-control: max-age=2592000
etag: W/"6f425779ee87e2f0e6f224f94ba87323"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1j57oekWXDEGS9YAoOo9dGyuk8jzq5LC_BgGvvcVu7xDG1NKDwCbDA==
age: 172410
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/534.f6ac9b19.chunk.css
54.230.111.69200 OK 57 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/534.f6ac9b19.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (1896)
Hash f8e449af022ce5a4d1b2ab54135ab034
c8c24fd6a29a3c973a0659b527605ca29916b6db
a3d91893c26c293c4c020df0a8d684fce8fd149757087d7bd617aa1e360eed68
GET /psb/capla/static/css/534.f6ac9b19.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"284305d18ed925580025c383621fdd3d"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:00 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:00 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gxE5NzV1C-naYdMX-YCcLF_NDP9_ccHOjmbbZZfFBiZK-aTQojK9kQ==
age: 86224
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/970.dd5c66db.chunk.css
54.230.111.69200 OK 60 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/970.dd5c66db.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (1847)
Hash 4a33071636bcc431d4c25219e6807aca
9c8f8c6475a9463b5f1b7bc47d326df28a37b742
34e9d888b1e24aa9cfcda7ce724ddaecea7171307f7cd98e21be9fe8cc73b914
GET /psb/capla/static/css/970.dd5c66db.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"70900b49c13c0ad6a4414d8afc5844f9"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:01 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:01 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: R8elQgxBloSNQtm4B3C9x5SswSp8V29634lucMWrt-RPFAGXqw1DNg==
age: 86224
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/579.17f1f9fb.chunk.css
54.230.111.69200 OK 2.4 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/579.17f1f9fb.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (2529)
Hash fe18615f7c3142de14191c57eb2234be
cf66627010e9643a995b17b4a0bbebda97fcc67a
f77e77cf7d1e454d82bf589eed0e705865468955e84421915fe573473dc1885a
GET /psb/capla/static/css/579.17f1f9fb.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"a7be7273517a8082ae2866fa12f084ad"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 12:47:37 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 12:47:37 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VpF9x_2nsDqvzWNggMFNfU1icNoyzR1qDBhjyvlZqjFiHwCSm7jkTA==
age: 343706
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/224.e9ab6600.chunk.css
54.230.111.69200 OK 2.3 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/224.e9ab6600.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (2057)
Hash b28ced25389e1cc9811672bbc4877f59
a8fedebe412e71b7fb372874aeee49995b5fb187
384020e9a490f2215ccb4420d99ad454679d422cbfa1d5b35a04e34046b2b97c
GET /psb/capla/static/css/224.e9ab6600.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"6526ecd01320f2b7dd3f74cca2265112"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:06:53 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:06:53 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U2gdRMYMxc_N7GdphoOrBze2L3Pby32bgHX8oElBbfzgUFHHScbR9w==
age: 86224
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/186.912c1966.chunk.css
54.230.111.69200 OK 2.5 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/186.912c1966.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (4553)
Hash 75348aae3a42dc51fe2a90d5ff38e40b
ce874f6996f849e008d83a2c3d289be122a67e6a
0d9daa258085ec5a6a3f40764e5ee82a28d799888e6947b3ea58e9f6285abca0
GET /psb/capla/static/css/186.912c1966.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Wed, 15 Feb 2023 06:28:27 GMT
etag: W/"7f7eda23229efd9b329dc87522d3d329"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Wed, 15 Feb 2023 06:01:05 GMT
x-amz-expiration: expiry-date="Thu, 15 Jun 2023 06:01:05 GMT", rule-id=""
expires: Fri, 17 Mar 2023 06:28:27 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6KtvGQo9PLT-bOEZ733eMyDHPIkayAH-7WKsLrc0zDjD3HVjoXT6Qw==
age: 1754993
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png
54.230.111.69200 OK 2.1 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png
IP 54.230.111.69:0
File type PNG image data, 70 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 27e71a5124018e16eae0b8897618623d
d0d54d88b04edfc71f338c19eab9994632bc6ced
1d6e86e59ab7235a8343f494c8e8da6cc02c5a98a75d682401340e6d06935f20
GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2146
server: nginx
last-modified: Thu, 12 Mar 2020 10:15:57 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 11 Feb 2023 03:13:37 GMT
expires: Mon, 13 Mar 2023 03:13:12 GMT
cache-control: max-age=2592000
etag: "5e6a0bdd-862"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -NJshOITeauhZ3a4Fxsy2Ry0j6TSOUeqJx-7oLZk1BVkd_gFyFqfNQ==
age: 2112308
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/58c63e4d3e4eb7090033901e75e2c80c0caa437b.css
54.230.111.69200 OK 13 kB URL HTTP/2 cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/58c63e4d3e4eb7090033901e75e2c80c0caa437b.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash f6d80f499e1383c06e3ac5bc10203a10
ed51c86094a47263179745e8f44de8ec5d7341f2
0c0acc257b562ef4313ac8e2310d20459c6fecd1051803855795107d7d514217
GET /static/css/xp-index-sb_cloudfront_sd.iq_ltr/58c63e4d3e4eb7090033901e75e2c80c0caa437b.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Tue, 20 Dec 2022 12:37:08 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Mon, 20 Feb 2023 03:09:59 GMT
expires: Wed, 22 Mar 2023 03:09:31 GMT
cache-control: max-age=2592000
etag: W/"63a1ac74-12da0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KlG1nNI2ai55ZrS4MFVyPOkT6DViEkUlFonoDF9CAHjNq7bIWiodeg==
age: 1334928
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/979.f29a58a5.chunk.css
54.230.111.69200 OK 3.9 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/css/979.f29a58a5.chunk.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (1892)
Hash 2f0712a173a99cee4d98ed6a9cf24283
9f15f372e9974b75c56d35e30039e5ebd047ddbc
32a81797069721bcc05e122fd3442886abb6d9703773ad002df21e002f15d52b
GET /psb/capla/static/css/979.f29a58a5.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"2aa73f789b99806cbecef0ed3fac4583"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:01 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:01 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 26y4ehXSIQHF11xVeVoWIQ5e9ZoKCRv2Y03YZXU4onD60X8bGO5sQg==
age: 86224
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png
54.230.111.69200 OK 2.3 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png
IP 54.230.111.69:0
File type PNG image data, 95 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash d05a0ab9bf394439a1584a2b0d44db5c
183c28023d3ba3358a7a5df1db887582ae5340ed
b23272a9692c4ec3c020935917e9d096490876c976abec1290bd3cc9aae13974
GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2344
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 19 Feb 2023 14:01:41 GMT
expires: Tue, 21 Mar 2023 14:01:41 GMT
cache-control: max-age=2592000
etag: "5cadd1d3-928"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hhAnwuHgeCTbGgCTZmV-gFC6BvwsRMKXJHPNatF7B_Wg-uItPDzLDw==
age: 1382199
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png
54.230.111.69200 OK 73 B URL HTTP/2 cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png
IP 54.230.111.69:0
File type PNG image data, 1 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash ff823944bc0bb9e4bf87f0ad14f687d1
4b68ba281b9ab171611569bf78971df6970efbc1
6153929734ec12ec07072f327c1112301828497e4dd356ca261461b0b7ba9621
GET /static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 73
server: nginx
date: Fri, 17 Feb 2023 05:09:47 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
etag: "5cadd1d3-49"
expires: Sun, 19 Mar 2023 05:09:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NZr_wHppGdGEtk9-1zlovHyehwAOx_zX9t7d6GL-nCF3js9Ll6uOwA==
age: 1586913
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/media/world-map.7d457a5d.png
54.230.111.69200 OK 7.4 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/media/world-map.7d457a5d.png
IP 54.230.111.69:0
File type PNG image data, 520 x 340, 8-bit colormap, non-interlaced\012- data
Hash a2bdd966488047aaa17dcebc5238432b
65c52eeb866eb2acbd183e5fb2dccc5205dbb6bf
cfc71dcddda21b32c0ac5ba5322bd41612224261fecdc38cd20a45b6b502457c
GET /psb/capla/static/media/world-map.7d457a5d.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf.bstatic.com/psb/capla/static/css/527.dda0b29d.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7367
server: nginx
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 02 Sep 2022 09:22:52 GMT
x-amz-expiration: expiry-date="Sat, 31 Dec 2022 09:22:52 GMT", rule-id=""
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Wed, 22 Feb 2023 01:21:49 GMT
expires: Fri, 24 Mar 2023 01:21:49 GMT
cache-control: max-age=2592000
etag: "a2bdd966488047aaa17dcebc5238432b"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rB0WrehRMFPLup1iF66pgnRQbGZxOwPSccOWnO3QWa_7O6jE24qLjg==
age: 1168591
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
188.114.98.234200 OK 115 kB URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP 188.114.98.234:0
Size 115 kB (114620 bytes)
Hash 0782b189e58d8291defeed4c03b5ee2b
5e355764824c6efd2db5c9f1cc3c13fe4537d4d5
aa21e6593f850c8a218f3596b17e7937d5894cfe72aa376b5d5319e2a23ca8aa
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7a435a43ddf3b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/514.f9672dcd.chunk.js
54.230.111.69200 OK 187 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/js/514.f9672dcd.chunk.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65460)
Size 187 kB (187445 bytes)
Hash ebbf080e7d9e635c1d8261634311047d
a1137ccdae319ba4f78c45f9a05d84bb6646c429
6d127d0bdbcc5c64967790e311cc1408f8d2b391cd628093c9f8ad9c05034654
GET /psb/capla/static/js/514.f9672dcd.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"0abfa41a3588e2f07f25480546afd258"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 15:04:56 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 15:04:56 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ejFAmxVZtZdZTuJ0_t9xKDx9mVIR2m_PqHRdXNSsHCn4ipewdokAqA==
age: 343706
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/736.6d693bf6.chunk.js
54.230.111.69200 OK 66 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/js/736.6d693bf6.chunk.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (12429)
Hash 0cefda95f1ae10f2b340ae0c4a6a54b5
54e69800dd4b19555185a5a05914a18d95d9e941
e27d44eb854eada5a9bc71f3a51f754b16c802443895e9e415f627ac247068f5
GET /psb/capla/static/js/736.6d693bf6.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"fa20daff7e278d5f963c8c7242a6699e"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 15:04:56 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 15:04:56 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9mrpzsnwz2Rv4Uz57Po_7D-lpNkpjIqJJWp2ZIKAlw0NgSh0lfxhvQ==
age: 343706
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/74bff00771219bf81578ea669a66844806551734.css
54.230.111.69200 OK 117 kB URL HTTP/2 cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/74bff00771219bf81578ea669a66844806551734.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (117370 bytes)
Hash 19d33ab36bd503921f48ebeeb5ca1768
93628e81d4d2c6e00c53e7a31834b93ded28ef54
e61956e427f1b7c8318224f082f91a0b782d9a0e491f2c4962b934933e7a6021
GET /static/css/main_exps_cloudfront_sd.iq_ltr/74bff00771219bf81578ea669a66844806551734.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 21 Feb 2023 09:06:25 GMT
last-modified: Tue, 21 Feb 2023 08:41:25 GMT
etag: W/"63f483b5-20cbe"
expires: Thu, 23 Mar 2023 09:06:25 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kzpyio1A88Bc1KjuA9_Rik6wm4RygugJu1aUBQupAeapAapzaGW9Pg==
age: 1227114
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/7bfe22d0731067280f1fa787df71be9401c93df3.css
54.230.111.69200 OK 128 kB URL HTTP/2 cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/7bfe22d0731067280f1fa787df71be9401c93df3.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 128 kB (128081 bytes)
Hash 58765c287c1b8d966c66dc5ec2e8a742
72cb693ab8397aeb3a2d8e31a2f7cdaeb8fd0ae0
64cc1dd68d40190bebe71dd0e0d8234580914c98c49a9cec94b54b644af8badb
GET /static/css/index_cloudfront_sd.iq_ltr/7bfe22d0731067280f1fa787df71be9401c93df3.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 09:11:35 GMT
last-modified: Mon, 06 Mar 2023 08:49:14 GMT
etag: W/"6405a90a-5b1b0"
expires: Wed, 05 Apr 2023 09:11:35 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x0JftgRyPYDJUzdnSJ_poe07fZCD-YWtQey-ooC76YmAATXJDxJ4dw==
age: 103604
X-Firefox-Spdy: h2
t-cf.bstatic.com/design-assets/assets/v3.62.0/images-flags/Us@3x.png
143.204.55.33200 OK 587 B URL HTTP/2 t-cf.bstatic.com/design-assets/assets/v3.62.0/images-flags/Us@3x.png
IP 143.204.55.33:0
File type PNG image data, 71 x 72, 8-bit colormap, non-interlaced\012- data
Hash 32ac7724dfac7a299e05fce296a4a30d
076e9142066e978cab4b20854d92a38ac0de98a2
c1bf08cd6ee48e098dc753447c277e0b530ec8815d6279a28a1381447c35cbe2
GET /design-assets/assets/v3.62.0/images-flags/Us@3x.png HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 587
last-modified: Tue, 14 Feb 2023 12:04:11 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Tue, 07 Mar 2023 12:15:59 GMT
etag: "32ac7724dfac7a299e05fce296a4a30d"
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SnyyEOEkkhoH4yVX5kaH5Z9wt9VdQnxmJNqula3QOxrx7QIRzJkC5Q==
age: 6142
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/raf_cloudfront_sd/7a4c03fc6a54bc62485ce3f720a1bd3bb1dd1551.js
54.230.111.69200 OK 42 kB URL HTTP/2 cf.bstatic.com/static/js/raf_cloudfront_sd/7a4c03fc6a54bc62485ce3f720a1bd3bb1dd1551.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9cbb659859b3fa58a03a3d98d337acc6
1e838aa59dbf41edb42c75de5f347a3473895fb2
e625fe496377af9e978cb8f4061604363badcdbc85861b3884d37485fdaa05be
GET /static/js/raf_cloudfront_sd/7a4c03fc6a54bc62485ce3f720a1bd3bb1dd1551.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 06 Mar 2023 09:11:32 GMT
last-modified: Mon, 06 Mar 2023 08:49:14 GMT
etag: W/"6405a90a-1e5e0"
expires: Wed, 05 Apr 2023 09:11:32 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f0JDmdnSO93rlY34RoE2AKuCJcKPeNf9gurwc4g5KNvLBeSRriTlOg==
age: 103608
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/bui-react.0bd21003.js
54.230.111.69200 OK 244 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/js/bui-react.0bd21003.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 244 kB (243492 bytes)
Hash 09e9b72f8dc67cb1b22992c1e7d32edb
4f370d4426e1eccb85813db52d5c5a6ec52d0ae7
ead91be2c7a54cbbed94c8a85974e7b74dcdb2128e35ec48b2ac7d0920217096
GET /psb/capla/static/js/bui-react.0bd21003.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"14bfc1ef5da49ef681eb1d36c49111c6"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 15:04:57 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 15:04:57 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m6S2rsfxdpouO4CT0-zIHJKr0fXjMSVkEtiLOQqn3ztETkcbVxxTBg==
age: 343706
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
54.230.111.69200 OK 44 kB URL HTTP/2 cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (60582)
Hash 30d544eddef4c94a26599343acf43d02
14b53fa950679a51f2cbc377a5d4087329dc14da
b3ff030f429a9f6af16cb3af8e0544b3894c25417e6c26c059e3f0c93f7f742a
GET /static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 23 Feb 2023 06:05:27 GMT
last-modified: Tue, 28 Jun 2022 13:43:41 GMT
etag: W/"62bb058d-19a42"
expires: Sat, 25 Mar 2023 06:05:27 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tjrN_DB4dCZ8zMLr1noIHCUDr5mODkV1ViU3_8VtpEGnKwps72Snmg==
age: 1065172
X-Firefox-Spdy: h2
account.booking.com/privacy-consents/implicit
54.230.111.51204 No Content 0 B URL HTTP/2 account.booking.com/privacy-consents/implicit
IP 54.230.111.51:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /privacy-consents/implicit HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.booking.com/
Origin: https://www.booking.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
server: envoy
date: Tue, 07 Mar 2023 13:58:21 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiIxMjYxOTNjMy00YmM1LTRiMDgtOTQ2OC1mNmJmMGRlODllNzYiLCJzZXNzaW9ucyI6W119fQ; domain=account.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; secure; HttpOnly
bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; secure; HttpOnly
bkng_sso_auth=CAEQARpWiuIvTmsTVieo/KIU3MJffoezBLZ39K9kFvBZdYIs6E7BTv82w2VyX2cFBJHLBbC/vcQfYoSE9ycFThhsbi9pV0IqGi3lOusxBfuT5DfFoPTwa5XZlNAiEMX6mKQNr6cBTnqTI6mefcQ=; Domain=.booking.com; Path=/; Expires=Tue, 21 Mar 2023 13:58:21 GMT; HttpOnly; Secure
content-security-policy: report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=781a623e09a4038d&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZb8612iO9R_UYhDOKZTX9f9H49t8PnK2N6xuOIDHFf7awnZaxbXlHMo8uAnKDe_qf5A2rNTuTve4; frame-ancestors https://*.booking.com 'self';
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=781a623e09a4038d&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZb8612iO9R_UYhDOKZTX9f9H49t8PnK2N6xuOIDHFf7awnZaxbXlHMo8uAnKDe_qf5A2rNTuTve4; object-src 'none'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-b5dTrw0uk9avwdM' 'report-sample'; base-uri 'none'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; default-src *.bstatic.com bstatic.com 'self';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i8fTc0tX513sA3mUJPZ9GGhJu5q-9xefC2R4rFkvma9uxS7Wvv6alg==
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/d30eef4dc5202875d4c3301b8a0e8ff09f9a0e28.js
54.230.111.69200 OK 16 kB URL HTTP/2 cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/d30eef4dc5202875d4c3301b8a0e8ff09f9a0e28.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (9646), with no line terminators
Hash 7cba5ed9e415f5e1ca8d157c177fa6a9
d25c1f2bd449d0d6f9835d5db1df02911ac9df9f
d9cbfc8f7ca949f0a1f9cb8b07a2f48a0eeacaa5dfe1645a5a947cc45afafe52
GET /static/js/sp-on-maps_cloudfront_sd/d30eef4dc5202875d4c3301b8a0e8ff09f9a0e28.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Thu, 19 May 2022 11:44:13 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 09 Feb 2023 02:49:01 GMT
expires: Sat, 11 Mar 2023 02:49:01 GMT
cache-control: max-age=2592000
etag: W/"62862d8d-25ae"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: apUo6SGYoS3P6ciMeRzR22AJh8LVURbWPyrlgLYZMLPTAqHd_tdW4A==
age: 2286559
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/ff3e645835620a23a979b08b49045ee3c0fd3e06.css
54.230.111.69200 OK 52 kB URL HTTP/2 cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/ff3e645835620a23a979b08b49045ee3c0fd3e06.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3ef294177789b28847cff2199499af9d
456aed61f508763ae76c5a9acbcaa9943a8a6953
63cb594aec3ae9776a7ae9c09d39e1ff85139310cc1b408c8e8ef5a4508b4dfc
GET /static/css/searchresults_cloudfront_sd.iq_ltr/ff3e645835620a23a979b08b49045ee3c0fd3e06.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Wed, 22 Feb 2023 14:51:53 GMT
last-modified: Wed, 22 Feb 2023 14:34:29 GMT
etag: W/"63f627f5-5a088"
expires: Fri, 24 Mar 2023 14:51:53 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lR1GY4dPp9z3cb-tQkG96vYSHeFBfYw_EPcvFZEqyctX09vE6P_glA==
age: 1119988
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/0d5c43b5f0e29d2ec951dc0f4bee9add0827a24e.js
54.230.111.69200 OK 71 kB URL HTTP/2 cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/0d5c43b5f0e29d2ec951dc0f4bee9add0827a24e.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8625e1bcec87811688febf7765c452bb
efe810943b4e282ab7b86433ec7a7c30aba661fc
2e9d0a038230ba4525b69345eb3527dd0fb07b9542aa69c883edea483ba77d47
GET /static/js/atlas_cst_cloudfront_sd/0d5c43b5f0e29d2ec951dc0f4bee9add0827a24e.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 27 Feb 2023 14:04:58 GMT
last-modified: Mon, 27 Feb 2023 10:15:23 GMT
etag: W/"63fc82bb-a28e6"
expires: Wed, 29 Mar 2023 14:04:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lshQjU5G0q5U9EVmKPq3y9B8CMwQ9w1BxFSb6Y0Irvaem-Vx9hz8Uw==
age: 690802
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/landingpage_cloudfront_sd/d731e6c6e8c81339337d5fbb6d244a92803397b2.js
54.230.111.69200 OK 67 kB URL HTTP/2 cf.bstatic.com/static/js/landingpage_cloudfront_sd/d731e6c6e8c81339337d5fbb6d244a92803397b2.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (51645)
Hash f67d3e041e6e1402ce4908d79a7680d3
fee96bc87e225a80de46bb7746f63bb455029c3e
c580c6b8c39c903fea311d79b59c4aa8b74ef6c22b678b78fa256a93af272e2f
GET /static/js/landingpage_cloudfront_sd/d731e6c6e8c81339337d5fbb6d244a92803397b2.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 14 Feb 2023 11:22:27 GMT
last-modified: Mon, 13 Feb 2023 06:55:39 GMT
etag: W/"63e9deeb-55b58"
expires: Thu, 16 Mar 2023 11:22:27 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SlH9D4r6SvSO9rHYR0y8daXYs1_8MucmBKLrNNgtlgYZNx_EJDejZA==
age: 1823752
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/searchresults_cloudfront_sd/517de11513b4c41af214e103200c7b67d5436fb3.js
54.230.111.69200 OK 45 kB URL HTTP/2 cf.bstatic.com/static/js/searchresults_cloudfront_sd/517de11513b4c41af214e103200c7b67d5436fb3.js
IP 54.230.111.69:0
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash d8e1cda1c1f3650c01b2348149d791ca
2cd44196bfe76cd7238345210aa3a292e3192178
9dc2445cffd73ede203a37636fa8e1d0f6d114e9d10f8e14e89902142712f5b0
GET /static/js/searchresults_cloudfront_sd/517de11513b4c41af214e103200c7b67d5436fb3.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 06 Mar 2023 09:11:31 GMT
last-modified: Mon, 06 Mar 2023 08:49:14 GMT
etag: W/"6405a90a-30706"
expires: Wed, 05 Apr 2023 09:11:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EHTF5Cx8tnX_KMjgFW62QN4UUjY3b-E2wIDqakXbcGLF3XAjDjh8eQ==
age: 103609
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ef0949d72ccdcc083647d001c8ba940
ebe4e2284d3892b010623597d0945b6b5cd64448
fe1a912baa83e36855bb934de3f2cfdffe77b1224a552533a4a7f2e984a51e52
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: undefined
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: 50be623d744b001a
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: 7928989
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 527
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2FHXLF7muhFHEUCdije0Tk5iU9UKpWB2ZLJaBlwYp5JAMRw1A%2BxkfmXkZEBpt0XtYA6Res2F7QjjtgbiHvpCU%2BJVqvvU87O3zxsU1guOvQvIxL%2FlD7%2FaJIOtHyhZbrHbc4Pn7xZhS5UBuFzeH6hlCxdNce5OStSqMs%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:21 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCrkmsyqc%2FIYSVJJUhz0wlSsUM%2B1zc%2BMJCi4GcMkuLGG%2BLl4uxI8WCMymkt%2FPbFiVEc0QBXRlVaJvz2EZOlM%2Fbr%2FxUmy%2BkAcBRks0K23snWzqNGECLIdxeZJWyWiIZP7YpApDM4gbI06g%2Bjkpk%2BeyTnF6V%2FEs8lCwoI%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eOYLNoBSbOiIoxsrXU3a5T-u2qKv_4b5qfGjEfipC5KpxSyheQ4SdA==
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/index_cloudfront_sd/e0fde052530967d4f5ded675e5511b34b160fae6.js
54.230.111.69200 OK 42 kB URL HTTP/2 cf.bstatic.com/static/js/index_cloudfront_sd/e0fde052530967d4f5ded675e5511b34b160fae6.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (61860), with no line terminators
Hash 986514877689f20cc22bb73bb2ded454
935b73aefe5e65fbf439d3b6af4db198688a4533
e171e140168b089645b586d931fb4d543b15a5db2b5d03764c3ce19b11759bf2
GET /static/js/index_cloudfront_sd/e0fde052530967d4f5ded675e5511b34b160fae6.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 27 Feb 2023 14:00:13 GMT
last-modified: Mon, 27 Feb 2023 13:04:12 GMT
etag: W/"63fcaa4c-f1a4"
expires: Wed, 29 Mar 2023 14:00:13 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xHxPmXblsK3xgyn3mA2YeazrSUrWTDIREzXJHStHVWB6gVd2Rr7uww==
age: 691085
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 25 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash d94c6fe3ba013dc5922504be288042a5
3e1b47aa349debc080abd827b29d8f53d93bea16
821e3c9e62438840b06870563e5c16f5234a2f1a39a6334ae203f59d090813b7
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 1120
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCrkmsyqc%2FIYSVJJUhz0wlSsUM%2B1zc%2BMJCi4GcMkuLGG%2BLl4uxI8WCMymkt%2FPbFiVEc0QBXRlVaJvz2EZOlM%2Fbr%2FxUmy%2BkAcBRks0K23snWzqNGECLIdxeZJWyWiIZP7YpApDM4gbI06g%2Bjkpk%2BeyTnF6V%2FEs8lCwoI%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 25
server: nginx
date: Tue, 07 Mar 2023 13:58:21 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefFNqLjK675rwLeNFF5H7kFqAzV8bZ98lUXRGXyqIQ7JgMjaFx%2B%2FeDJ578gJbn5KgtI%2BXVEK%2BHf9oW9rD%2FQVuJ1qIZfCHC13LrHT%2B4grZTNfo11UOzrK0RPolD9%2FYbY%2FS%2FmZExUqmrtDtMtbgH6MTP6vXXBfcnKzDg%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=8e0a623e3f0d0023&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqssZ86ayEvOuw76lWSuqLy8iqW15iDa-fMw;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uwH1M0e2kxaJuCb3zkWsWKY5H2c0olsPD6Nh2ec_tR_FqxyToLw13g==
X-Firefox-Spdy: h2
account.booking.com/privacy-consents/implicit
54.230.111.51200 OK 86 B URL HTTP/2 account.booking.com/privacy-consents/implicit
IP 54.230.111.51:0
Hash ff8df32ddb79a786f11644c5ec733425
037ee831344b87c24e21d54843abfe74f80774f5
86ee76593348ee07e585818d0bc3a7c519bf87fc637d8e4a7cb87f8c28d46e4e
POST /privacy-consents/implicit HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Content-type: application/json;charset=UTF-8
Content-Length: 36
Origin: https://www.booking.com
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBucFACde3yH9f7QAIiMudpxvIgTYo9LzkGCnSrR8GWu6Mc%2FF9OC7Du3ULMthdqmyNCTIWblpepXne3wfn6pmJ4dYgY0ExFByigRj36VvDjZBY7YyhBxhaMnIZbhhBxXiJKLbH9tNp3KMM759v9IhDEdwhPoI8xPV1g%3D; cors_js=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
server: envoy
date: Tue, 07 Mar 2023 13:58:21 GMT
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; secure; HttpOnly
bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjY1ZDQ2OTUwLWJiMGMtNDJmNy1iNTliLWNlYmVlYTY4YTZiNCJ9fQ; domain=account.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; secure; HttpOnly
bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; Domain=.booking.com; Path=/; Expires=Tue, 21 Mar 2023 13:58:21 GMT; HttpOnly; Secure
content-security-policy: frame-ancestors https://*.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=53f2623e0a1114bc&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZHPTonodp_KimHZLP-kkm31nZp_X7YOBYWt1U6tx6H7mldjk9pLQO1Q0gANnXiCRb4rDoKupq-b4;
content-security-policy-report-only: connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; base-uri 'none'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=53f2623e0a1114bc&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZHPTonodp_KimHZLP-kkm31nZp_X7YOBYWt1U6tx6H7mldjk9pLQO1Q0gANnXiCRb4rDoKupq-b4; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-silvwLapSKU4dQy' 'report-sample'; default-src *.bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DRgbFRztcOfEZAG3AuVrvu4hh4zvj-JDPCIYCeto5nLOVtbJjeQ4jA==
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 42fcc80d879dd35c0bbdd04c1414890b
f1dbf58d1b458f9c50995bb8d84da4a67f2d437b
fb87565b58755d257fcf9af5b4b25e0dcfc682adb630dd2a32bbf56b91d2c325
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 580
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sVk3zz0dHepkAKsNfGnNwG4JfUeKcFzGSuMIBzSjR88q21xTYgCTaLGm4S8BQGkLFxgnq2bvjblF33PV90oT1Jg2woymwwAJzSB6%2BYoD9vk7XeLswuVhfuZKWRi20rgKcuPPusn%2F3GXpKLQoMc%2FIpjEtMpkocJ4XE%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:21 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhDvvyKT5qqm2N409Xv5gaq7o0a9DQXUEWQJW4FT3h5kIvgb4h2ct%2FNTF3HLBQgKOPmjin0UKtfBtqZAiQIEwNkJh1EM6laz0GSoS7kAKWRS2fy%2BLiGNEHvtZAglXiibE5ecnUXqVrNzPsh1vhQVhdd4B6vx4vJthPs%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:21 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=6f6c623ef44a03ac&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqstN3Xm4wf3iizBzBlZXSqln3MuyRn-qbew; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MaO3JEkmF9AUY9NukqSy07Yl2FC_gEkK3iDhSqQ13cr438D94JCCSQ==
X-Firefox-Spdy: h2
www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
54.230.111.88200 OK 2.6 kB URL HTTP/2 www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with very long lines (10376), with no line terminators
Hash 8dab02b249002db8ada890af2113182d
314ddfc030021eb457643db7a47fcbfe76b68585
c37aebe6c9b4ebfba45dd51bf2c85f58a1090f18c058462bf33b6fd40db301e5
POST /dml/graphql?aid=7928989&label=101&lang=en-us HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
content-type: application/json
x-booking-context-action-name: index
x-booking-context-aid: 7928989
x-booking-csrf-token: eyJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJjb250ZXh0LWVucmljaG1lbnQtYXBpIiwic3ViIjoiY3NyZi10b2tlbiIsImlhdCI6MTY3ODE5NzQ5OSwiZXhwIjoxNjc4MjgzODk5fQ.CV5S2YSCemdOg2MPBnOx6OxTigKFddHsyfxx7qqbM6pj8Zm-ac5YXyKDu4QF--QdM4zPaNcnx2wvHedmNuqHBQ
x-booking-et-serialized-state: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
x-booking-experiment-state: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
x-booking-pageview-id: 50be623d744b001a
x-booking-site-type-id: 1
x-booking-timeout-ms: 800
x-booking-topic: capla_browser_b-index-lp-web-mfe
x-envoy-expected-rq-timeout-ms: 800
Origin: https://www.booking.com
Content-Length: 3756
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPefFNqLjK675rwLeNFF5H7kFqAzV8bZ98lUXRGXyqIQ7JgMjaFx%2B%2FeDJ578gJbn5KgtI%2BXVEK%2BHf9oW9rD%2FQVuJ1qIZfCHC13LrHT%2B4grZTNfo11UOzrK0RPolD9%2FYbY%2FS%2FmZExUqmrtDtMtbgH6MTP6vXXBfcnKzDg%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 2648
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
set-cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; domain=booking.com; path=/; expires=Wed, 06-Mar-2024 13:58:21 GMT
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sVk3zz0dHepkAKsNfGnNwGC99xwLQbuTx3%2FZBY6TZVL%2BFIXUnDFijFNLb%2FcB3vTWKOg533c8C%2BuqV5ANmB9X0JOpshzcMLxZLo9M6DvprqJN5zrCVnhA9T6NyvBGA8FF6ER1AEAq3IUAySXYixhJXtmwPUgydhSxc%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vhBoTyruVR1dGhubl-euNj0vwYSeMwWtl1tH6naCckn5GjaQwyBXnQ==
X-Firefox-Spdy: h2
www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=YTTHbXeeVeCFZAcbRbROfLVT|1,cCHObIPPQFFNcUJBNXFaUVWNdKNKNKWe|3,cCHObEfEITNPfbeQMITaSdFaLbFDXFZMIcCcCcCC|5,cCHObTULHfAFFQZcVIZdRJcCcCcCC|2&ets=NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|1,cCHObECVVDDORMTfFbRZFJGO|1,cCHObECVVDDORMTfFbRZFJGO|2,cCHObECVVDDORMTfFbRZFJGO|4,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,cCHObTRVEFDEXNBBTZBYSGSYO|5,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|3,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|2,cCHObVZMYCVKKMadMUPORIPBLAUFRURURHe|7,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|1,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|2,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|3&etgwv=
54.230.111.88200 OK 35 B URL HTTP/2 www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=YTTHbXeeVeCFZAcbRbROfLVT|1,cCHObIPPQFFNcUJBNXFaUVWNdKNKNKWe|3,cCHObEfEITNPfbeQMITaSdFaLbFDXFZMIcCcCcCC|5,cCHObTULHfAFFQZcVIZdRJcCcCcCC|2&ets=NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|1,cCHObECVVDDORMTfFbRZFJGO|1,cCHObECVVDDORMTfFbRZFJGO|2,cCHObECVVDDORMTfFbRZFJGO|4,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,cCHObTRVEFDEXNBBTZBYSGSYO|5,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|3,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|2,cCHObVZMYCVKKMadMUPORIPBLAUFRURURHe|7,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|1,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|2,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|3&etgwv=
IP 54.230.111.88:0
Hash 79a611524d7c43a354c589264cc2376e
2e25649d9a8a208302be0502b47a0e44b07bc7c1
c7a9af81f3467d3c95760df18d0853bda8c191f612fb2e8b2b5c4ed941fbaf1a
GET /js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=YTTHbXeeVeCFZAcbRbROfLVT|1,cCHObIPPQFFNcUJBNXFaUVWNdKNKNKWe|3,cCHObEfEITNPfbeQMITaSdFaLbFDXFZMIcCcCcCC|5,cCHObTULHfAFFQZcVIZdRJcCcCcCC|2&ets=NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|1,cCHObECVVDDORMTfFbRZFJGO|1,cCHObECVVDDORMTfFbRZFJGO|2,cCHObECVVDDORMTfFbRZFJGO|4,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,cCHObTRVEFDEXNBBTZBYSGSYO|5,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|3,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|2,cCHObVZMYCVKKMadMUPORIPBLAUFRURURHe|7,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|1,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|2,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|3&etgwv= HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
X-Booking-Info:
X-Booking-Client-Info:
X-Booking-Pageview-Id: 50be623d744b001a
X-Booking-SiteType-Id: 1
X-Booking-Language-Code: en-us
X-Booking-AID: 7928989
X-Booking-Session-Id: d56241c9df88499dc8be1424c7e9980d
X-Booking-ET-Serialized-State: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sVk3zz0dHepkAKsNfGnNwGC99xwLQbuTx3%2FZBY6TZVL%2BFIXUnDFijFNLb%2FcB3vTWKOg533c8C%2BuqV5ANmB9X0JOpshzcMLxZLo9M6DvprqJN5zrCVnhA9T6NyvBGA8FF6ER1AEAq3IUAySXYixhJXtmwPUgydhSxc%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=4c41623ff0d40022&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejIW9IkCGAg5Texl4Mmld79PzlNRgjEUyag; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m2fhdbjmcQifoRnnuiC3qHPsR-ZqIrzZ87bbS22iAR9gRjpdjDWisQ==
X-Firefox-Spdy: h2
www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
54.230.111.88200 OK 1.2 kB URL HTTP/2 www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
IP 54.230.111.88:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5219), with no line terminators
Hash 1c808ba21aeefde2c4130a250c38a6fa
248077383bf4539fb2d0d1de7e1da75bed029e0c
2e6e4c80297282153cab337597be2248cd035ce5732944690d35b81fabb249f1
POST /dml/graphql?aid=7928989&label=101&lang=en-us HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
content-type: application/json
x-booking-context-action-name: index
x-booking-context-aid: 7928989
x-booking-csrf-token: eyJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJjb250ZXh0LWVucmljaG1lbnQtYXBpIiwic3ViIjoiY3NyZi10b2tlbiIsImlhdCI6MTY3ODE5NzQ5OSwiZXhwIjoxNjc4MjgzODk5fQ.CV5S2YSCemdOg2MPBnOx6OxTigKFddHsyfxx7qqbM6pj8Zm-ac5YXyKDu4QF--QdM4zPaNcnx2wvHedmNuqHBQ
x-booking-et-serialized-state: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
x-booking-experiment-state: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
x-booking-pageview-id: 50be623d744b001a
x-booking-site-type-id: 1
x-booking-timeout-ms: 800
x-booking-topic: capla_browser_b-index-lp-web-mfe
x-envoy-expected-rq-timeout-ms: 800
Origin: https://www.booking.com
Content-Length: 3791
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhDvvyKT5qqm2N409Xv5gaq7o0a9DQXUEWQJW4FT3h5kIvgb4h2ct%2FNTF3HLBQgKOPmjin0UKtfBtqZAiQIEwNkJh1EM6laz0GSoS7kAKWRS2fy%2BLiGNEHvtZAglXiibE5ecnUXqVrNzPsh1vhQVhdd4B6vx4vJthPs%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 1248
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
set-cookie: _pxhd=Ocne5unmwMpfrsBctGresxft0altD-P42pkW0ruc7cUPBdkIHrqmHdi0VzjwyZyS3c8QX79rNtHQDDN6UqHg7g%3D%3D%3AVnHAKtDEw8OC0A0ioC7Y6%2FwKe5OjrlNUwk3Fz1m8wZgO1h9FH4YetGsxGjZ6wxt2pKXEXqFTBCoQiOSqSa1vKawrNf75F4y0MvO9TofOYuo%3D; domain=booking.com; path=/; expires=Wed, 06-Mar-2024 13:58:22 GMT
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzk%2FH4ZnjJfvaBjnG2EvNQsO%2FPyqN3R7mf3spa69GtJz4Aj1TlRY8%2BCIBcuyixFbehhw7y6G2ZsCgK9kSUBeOnjMal5mq3ZmJ%2B5O7wMz9H%2FCLVQPECHWcyREsBUQ9wQsqn3q1yg4jAonBlDmt2DoT8JydOqxJweFDCs%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F21MsgXvvyuvg2IAuYLmWREg25mq0gKbjy2XommPWbUFGAwLdVaGWA==
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/979.bf82265b.chunk.js
54.230.111.69200 OK 28 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/js/979.bf82265b.chunk.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65460)
Hash 4289d34e12e2696a4a27c88914b70f21
631b8a1e231bc31b637c6c3400c1898870bb9fe1
4fa1c4af7002010b74eb7f1ed8c9cc187c03f1a7b8488b787b287e3ed80aaea4
GET /psb/capla/static/js/979.bf82265b.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"b6dd54b1424b27f0314c98243d1924c6"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:02 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:02 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ll8Rx-lALjeuYBy8iLpZvd1J92Xb2Fg-ZLMt1HuLyY4BmjhM5H_SWA==
age: 86223
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css
54.230.111.69200 OK 119 kB URL HTTP/2 cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css
IP 54.230.111.69:0
File type ASCII text, with very long lines (65487)
Size 119 kB (118818 bytes)
Hash fde38e825e5148ffb1a550a97154f20d
af47be6df736ab326bc8db6be240b9f027b0a0b6
27b4da5cdce5a14b0da5b65d246c789f4cc53249fa1d840c8428e1e47f6baa9a
GET /static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:48 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Tue, 14 Feb 2023 02:58:11 GMT
expires: Thu, 16 Mar 2023 02:51:16 GMT
cache-control: max-age=2592000
etag: W/"5cadd1cc-375af"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y6a_acFv-cMXn5lHiyKrVMK523A5VjWxVCbekBEjaROTKTGRJPHMGA==
age: 1854426
X-Firefox-Spdy: h2
www.booking.com/js_tracking?lang=en-us&aid=7928989&ref_action=index&ver=2&stype=1&pid=50be623d744b001a&sid=5707394d17314fd76dff9ff5e8597f83&ete=&etg=&etcg=&ets=aaTBNZZJRLESPIDNJDPVBC|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZ__sflxmk2Rlcncw_s38IQfHLwr4z-yg040-C6CafjK5oQXrnqkKfLkUx3OcEmgNDPZZeX29EyaiullsZqLy9hGDxo8gRwOs4Xu1egQnV4X7U-uXCkhj1oO2kd8LE5anZblmpTHipndIYUEV_WqUy2P9W6hZ7qR1oOqX5sbqmS3F0fAcnUreZv_8Ya54DjeQk0rFx-f9GFqa0NIWMmpY6kv4LLtLOJi-qLQBi_JqlX9kiv-huzfew6arIbhYxMcemxQU-Tbo7IPYIF8nphO8gMhXVZqcWxkuN9SI4nprju4C8Ct_cwZ9Ws6K818KkemWw
54.230.111.88200 OK 16 kB URL HTTP/2 www.booking.com/js_tracking?lang=en-us&aid=7928989&ref_action=index&ver=2&stype=1&pid=50be623d744b001a&sid=5707394d17314fd76dff9ff5e8597f83&ete=&etg=&etcg=&ets=aaTBNZZJRLESPIDNJDPVBC|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZ__sflxmk2Rlcncw_s38IQfHLwr4z-yg040-C6CafjK5oQXrnqkKfLkUx3OcEmgNDPZZeX29EyaiullsZqLy9hGDxo8gRwOs4Xu1egQnV4X7U-uXCkhj1oO2kd8LE5anZblmpTHipndIYUEV_WqUy2P9W6hZ7qR1oOqX5sbqmS3F0fAcnUreZv_8Ya54DjeQk0rFx-f9GFqa0NIWMmpY6kv4LLtLOJi-qLQBi_JqlX9kiv-huzfew6arIbhYxMcemxQU-Tbo7IPYIF8nphO8gMhXVZqcWxkuN9SI4nprju4C8Ct_cwZ9Ws6K818KkemWw
IP 54.230.111.88:0
Hash a33df6dfdc4d4569cd1f217f8d3b6552
ec2bce06233da8d1f70332b00b7227cf527f6a1e
6c8bdc65371903e08e5769b6f4caee4c290e9a5c29d2f94e7370a14256cbce01
GET /js_tracking?lang=en-us&aid=7928989&ref_action=index&ver=2&stype=1&pid=50be623d744b001a&sid=5707394d17314fd76dff9ff5e8597f83&ete=&etg=&etcg=&ets=aaTBNZZJRLESPIDNJDPVBC|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZ__sflxmk2Rlcncw_s38IQfHLwr4z-yg040-C6CafjK5oQXrnqkKfLkUx3OcEmgNDPZZeX29EyaiullsZqLy9hGDxo8gRwOs4Xu1egQnV4X7U-uXCkhj1oO2kd8LE5anZblmpTHipndIYUEV_WqUy2P9W6hZ7qR1oOqX5sbqmS3F0fAcnUreZv_8Ya54DjeQk0rFx-f9GFqa0NIWMmpY6kv4LLtLOJi-qLQBi_JqlX9kiv-huzfew6arIbhYxMcemxQU-Tbo7IPYIF8nphO8gMhXVZqcWxkuN9SI4nprju4C8Ct_cwZ9Ws6K818KkemWw HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
X-Booking-AID: 7928989
X-Booking-CSRF: OnsHZAAAAAA=zjg7urFl4_oCm2V_Cr30k_wocFej3QffUVVjAR82xzSvJ0iDkWppWt-x6ScRpubaxikBoCOp-oyfA4e2ntyIMoivJ9a8ctVpDxQRK9ZIuyi2LNAdrxWECbwwwzX3m5kwGskdu2IigHs6zHFxb651NIgPdny6CcNk3ACNQlyA3ojOJSRR9JchvCyH4OHajnExWZP7GrABhTopqb09
X-Booking-Info: 1670050,1670060,1670070,1670090,1670120,1670140,1670770,1674130,1681530,1683290,1685250,1685260,1690290,1690590,1693900,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|1,1693900|2,1674130|1,1674130|3,1693900|1,1681530|3,cCHObECVVDDORMTfFbRZFJGO|1,cCHObECVVDDORMTfFbRZFJGO|2,cCHObECVVDDORMTfFbRZFJGO|4,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|2,aaTBNZZJRLESPIDNJDPVBC|1,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,cCHObTRVEFDEXNBBTZBYSGSYO|5,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|3,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|2,cCHObVZMYCVKKMadMUPORIPBLAUFRURURHe|7,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|1,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|2,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|3
X-Booking-Client-Info: aaTBNZZJRLESPIDNJDPVBC|1
X-Booking-Label: 101
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 50be623d744b001a
X-Booking-Session-Id: 5707394d17314fd76dff9ff5e8597f83
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sVk3zz0dHepkAKsNfGnNwGC99xwLQbuTx3%2FZBY6TZVL%2BFIXUnDFijFNLb%2FcB3vTWKOg533c8C%2BuqV5ANmB9X0JOpshzcMLxZLo9M6DvprqJN5zrCVnhA9T6NyvBGA8FF6ER1AEAq3IUAySXYixhJXtmwPUgydhSxc%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=e682623f0d970064&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejK0xg2gXXphjDeC26BVQua62TIr5fDGom0;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZKqUhkFXX7ujHziFGFFoem0oBpRDtedv4R17ugxPQ-swqcEpBWhYPA==
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o=
54.230.111.69200 OK 12 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash a36f4027287a0f6a3082dc0f55198730
046cdc6d82e7bd58bea3d7425a38d71bfb9c8914
93a0201d50a63130bc8b38fd47974805b864bf254427c8ea6e628b83f333f34b
GET /xdata/images/xphoto/300x240/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12527
server: nginx
date: Fri, 17 Feb 2023 03:32:14 GMT
etag: "f63f9a374bdfb7cdc1454992fd528ea0d48d6a7f"
expires: Sun, 19 Mar 2023 03:32:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DW1voRgh9d3M-CfKcFHelFnVfSmqpZ0A4nLcciUItOU-pGYWwynXUw==
age: 1592768
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/100235855.jpeg?k=61ef6692e05b5971e2e8dc75687f844e6d0ad295a9a5ace17f7c713f167e61b5&o=
54.230.111.69200 OK 14 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/100235855.jpeg?k=61ef6692e05b5971e2e8dc75687f844e6d0ad295a9a5ace17f7c713f167e61b5&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash ae28732d3af7dd3c2e2d13749ab42a79
b8341aff35ccb8f99c0d031d626bb14a271dfb20
965bac64c41768c2237a9d09aa066cee2d1cc0c51f88c64ee197942af7839339
GET /xdata/images/xphoto/300x240/100235855.jpeg?k=61ef6692e05b5971e2e8dc75687f844e6d0ad295a9a5ace17f7c713f167e61b5&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 13757
server: nginx
date: Fri, 24 Feb 2023 11:26:32 GMT
etag: "5c7b49c0dce15eb1ccf6502f53e3c8bcd9fea146"
expires: Sun, 26 Mar 2023 11:26:32 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pr2jID49tSDuNF8j5-azTi_0yodA2I4TkCgonRxBqmG0MaVP26Fn2Q==
age: 959510
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/52979454.jpeg?k=98337a30d1016ebce1cbebb9e24ba4585f535438bc455ff9efcaee27960ac8b2&o=
54.230.111.69200 OK 5.5 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/52979454.jpeg?k=98337a30d1016ebce1cbebb9e24ba4585f535438bc455ff9efcaee27960ac8b2&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 69b711fd7a51a8fce86d475c45ee23bd
121c1467140f01ba501141a66910b36b7087109d
6c5b015ce4d8299884f843e289a154182037f066e763c2476505d87c4fd54c9d
GET /xdata/images/xphoto/300x240/52979454.jpeg?k=98337a30d1016ebce1cbebb9e24ba4585f535438bc455ff9efcaee27960ac8b2&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5468
server: nginx
date: Fri, 24 Feb 2023 11:26:31 GMT
etag: "273a207e738b589fb34678a39258ade300ff3c7f"
expires: Sun, 26 Mar 2023 11:26:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BviqYa309NyLVNxXaIIBPrstXtesz6E2CTch_ZUk0myoatycDzfz-w==
age: 959511
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o=
54.230.111.69200 OK 20 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 2414c022c1585360984508f5c5de208b
7f2fe2e841f4929dcf52c93c7efbe6401ef9fd24
2309e00634f6000b455200aeaae2c868aef28a31a05571aeada61b9c78264135
GET /xdata/images/xphoto/300x240/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20152
server: nginx
date: Fri, 24 Feb 2023 23:32:41 GMT
etag: "6ce7269b983942be61157866a22b3ae40c246825"
expires: Sun, 26 Mar 2023 23:32:41 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: J77sBNauW_iPcsIvUFCx1ny0oY3CLP0pRe4SntfnYZL4ghdoMxBC7g==
age: 915941
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o=
54.230.111.69200 OK 14 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 8acccb2d6683be0bca40bb1771e89a50
7b209f7d6f9a0f44f33f2a12b132ea391d5a7811
95e94b8bd3c16405b193fdd709c777fd2b5ea98d994a40232d95c26c04da6f79
GET /xdata/images/xphoto/300x240/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 14448
server: nginx
date: Sat, 11 Feb 2023 03:17:12 GMT
etag: "7eb3abfa535a2ffdec40097c56c36a9a0f57588b"
expires: Mon, 13 Mar 2023 03:17:12 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4rrtcIVaOabmJ6esKMf1QBNJt13_R1cAHJjMF7UMVJxkaecsyOUIQw==
age: 2112070
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 42fcc80d879dd35c0bbdd04c1414890b
f1dbf58d1b458f9c50995bb8d84da4a67f2d437b
fb87565b58755d257fcf9af5b4b25e0dcfc682adb630dd2a32bbf56b91d2c325
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 570
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sVk3zz0dHepkAKsNfGnNwGC99xwLQbuTx3%2FZBY6TZVL%2BFIXUnDFijFNLb%2FcB3vTWKOg533c8C%2BuqV5ANmB9X0JOpshzcMLxZLo9M6DvprqJN5zrCVnhA9T6NyvBGA8FF6ER1AEAq3IUAySXYixhJXtmwPUgydhSxc%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhBQaaLhV81ZEXQHe2mxwMc7ii6sjmqgJm%2BntlVlcOyd6Ou5FQJmuvx%2B8m3iYu2dp0w3MjH4PX%2FMmnfccsMmObjX4eTacBXdtV%2FBc8NTkqf6DOvzv%2Fw%2FzsGGiyF%2FI4EAyOtdbBC98FWcxTRkZjSP8CDW1ikGHddRojY%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=2bbf623fad5c0033&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqstThn5A7nRCY_NSP26pZHtlggSnHUtY2AA; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vIqeR68CvwfOUujJZQiUTdbvX2r0fEkUkSyQeSqpkN1dj_jeLEukQA==
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o=
54.230.111.69200 OK 12 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash b5b754cfdb4146c7a99d432dd323a23b
901d28c8ad2a1431c560f4fefbd96768cea85823
1718dd5438e00eacc0afd6176fbe286bb20531864915d3c07c4312737d25ce7a
GET /xdata/images/xphoto/300x240/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12173
server: nginx
date: Fri, 17 Feb 2023 03:32:14 GMT
etag: "990c268f1f4288056d9d787f2ee6fadc5e6f1aee"
expires: Mon, 03 Apr 2023 03:32:14 GMT
cache-control: max-age=3888000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P8QN-OeinfoIz_GvB4VMBZ0Rrz8ZC-rG6L4dYXNuqzgWI8jeYj8jlw==
age: 1592767
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o=
54.230.111.69200 OK 11 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 36896ed28c3a04b337713e865e468131
b42b54b780ee6652ae6ba59bf57a1f7daaeb6458
6bf196e10de012119d344c3b9c9e1ca4637b5917264327dfb6704ecae22b059d
GET /xdata/images/xphoto/300x240/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 11215
server: nginx
date: Thu, 23 Feb 2023 01:05:06 GMT
etag: "4fbd0d215c9ea231cec6672992974c42a8e59c76"
expires: Sat, 25 Mar 2023 01:05:06 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BX9XHEtVsGcJaj0lOcuWHQwNdbolhzfs2Tn5Gg74WpPkViJS8r6bRg==
age: 1083196
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o=
54.230.111.69200 OK 11 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 5567eb5c3d7f1f8d3c5fa7d43cb32b34
4caeab4dfa4cbdad3bdde14b1f659f8b0b06b46f
84331b7d14d04d74b8b85ef87221f322f8508e5e596b5c8bae2f8197f233aec2
GET /xdata/images/xphoto/300x240/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10959
server: nginx
date: Thu, 09 Feb 2023 04:22:44 GMT
etag: "0ae4dfb6b2d0c319bac904c5fe360c4dda3d6231"
expires: Sat, 11 Mar 2023 04:22:44 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NStvYibWcHgFpm8sbJC9SFUGiDK0fbg4VXT8XuUHQqF_jae8Y1yzyQ==
age: 2280938
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js
54.230.111.69200 OK 16 kB URL HTTP/2 cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (5619), with no line terminators
Hash afb43e0f659cf9613d70dce020c4b06d
512602eb1757914848c069cb033a4010057bf94f
cb024e96d61135533cc7ee5c5c9e58e2d891d6c60f80007fd4172ba3361703c4
GET /static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Tue, 04 Feb 2020 10:19:57 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Mon, 06 Feb 2023 15:52:11 GMT
expires: Wed, 08 Mar 2023 15:52:11 GMT
cache-control: max-age=2592000
etag: W/"5e39454d-15f3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nf6SbM8p8NCtQG4ulx1tRcOVjA607MdwdigfSr0nOtYonkTr_ENRgg==
age: 2498768
X-Firefox-Spdy: h2
cf.bstatic.com/libs/perimeterx/px.v7.6.9.min.js
54.230.111.69200 OK 99 kB URL HTTP/2 cf.bstatic.com/libs/perimeterx/px.v7.6.9.min.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65402)
Hash 3b8650dad3028497c31c622ad8611eb9
78240f6c6187109917676b218a467a53b3619359
c7c6145489ef76105f18480033ff565bad689ec8810ec3aad786f60fd9f544be
GET /libs/perimeterx/px.v7.6.9.min.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 23 Feb 2023 02:05:21 GMT
last-modified: Tue, 31 Jan 2023 20:19:52 GMT
etag: W/"63d977e8-39901"
expires: Sat, 25 Mar 2023 02:05:21 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IFqm9Nx1kyg7WxdIGOziQCklvfs8MrjAVouak52LbMMjXtEBrI1pVQ==
age: 1079581
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/970.12607b6f.chunk.js
54.230.111.69200 OK 41 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/js/970.12607b6f.chunk.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (65460)
Hash 65e9ea47542f7afaf213521c59fa5988
c059b7d607c1601ae6eabca04a2080e9b1e0aafb
d1ecf82b70a8d82f259b8bec7476f22c09d52c80916e2b60c5cc1c1d0f348ae5
GET /psb/capla/static/js/970.12607b6f.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"dff8cdc2362ff5b05f9dfc715b2944f4"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:02 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:02 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lBJJFDZerwCkm0RwK5NqT6hCAOFX8xws440d5QROJvJxepmrq7yFCA==
age: 86224
X-Firefox-Spdy: h2
www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
54.230.111.88200 OK 3.1 kB URL HTTP/2 www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
IP 54.230.111.88:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (12831), with no line terminators
Hash b3de266c848ef28ebdcb599586aa0834
211d6e3a74adaf4b7ec7ef70f73f661c1bfdd911
6c3fc57372c8170937f373fbb7fea2722b2f397389c214842a2a035b78dc7a16
POST /dml/graphql?aid=7928989&label=101&lang=en-us HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
content-type: application/json
x-booking-context-action-name: index
x-booking-context-aid: 7928989
x-booking-csrf-token: eyJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJjb250ZXh0LWVucmljaG1lbnQtYXBpIiwic3ViIjoiY3NyZi10b2tlbiIsImlhdCI6MTY3ODE5NzQ5OSwiZXhwIjoxNjc4MjgzODk5fQ.CV5S2YSCemdOg2MPBnOx6OxTigKFddHsyfxx7qqbM6pj8Zm-ac5YXyKDu4QF--QdM4zPaNcnx2wvHedmNuqHBQ
x-booking-et-serialized-state: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
x-booking-pageview-id: 50be623d744b001a
x-booking-site-type-id: 1
x-booking-topic: capla_browser_b-index-lp-web-mfe
Origin: https://www.booking.com
Content-Length: 1719
Connection: keep-alive
Cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhDvvyKT5qqm2N409Xv5gaq7o0a9DQXUEWQJW4FT3h5kIvgb4h2ct%2FNTF3HLBQgKOPmjin0UKtfBtqZAiQIEwNkJh1EM6laz0GSoS7kAKWRS2fy%2BLiGNEHvtZAglXiibE5ecnUXqVrNzPsh1vhQVhdd4B6vx4vJthPs%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 3143
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
set-cookie: _pxhd=PDbAc7AkF9CBYtyl-E90TV5PNsN6beP34AVSXfdxPIIzXxuS0IkjzleVa-0pS5nnaj4Bqja-xWvFjBLzfAO0iQ%3D%3D%3A-DUgo7ly10rrIVZGhiOPTPFf2k%2Fzn9xRwBhMnx8-DvUxmoiG1dHeKtIk9rSakuWdsdmtm3G%2F2hcNJIPHUjas4tGOAeJjn3itMIOytnRpRBI%3D; domain=booking.com; path=/; expires=Wed, 06-Mar-2024 13:58:22 GMT
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCp22MEd7Sd8RX1GyLvbVBrrV1ZMebbaBDUxwuR7ZhEvWG4QqZFITuSrFTMvXqGnsJx5pZXw6o%2FQxWuXYTydhIsHwpk5g35jS1crCSmmPjNjYH7gTTWdm8WWBmgULeW657lGgH16S1iIMVP1u8%2B48p%2F2uYXK2HyB0YY%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vO-pp3duT6OPRZU-RYdI5Weio8WfB4YENTXBGF10mcFa8j2O-QVxQw==
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o=
54.230.111.69200 OK 23 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash d2777025d4a89299a415993ffee584ae
882aadd31ddf11f475cc870f291c0cb00909bb41
a358344c77aa72b8ed5c9aeb8989f3e5d01116badd07b0c8fa7a6a3d7b1afb2e
GET /xdata/images/xphoto/300x240/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22931
server: nginx
date: Sun, 12 Feb 2023 00:40:07 GMT
etag: "57b844a916fa92a37e5f7cca64769aa7ccee8c19"
expires: Tue, 14 Mar 2023 00:40:07 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RrpHZ0PLdxpznoBq_oIXGFjBaE91137eEqNex_SH-VTtZZMclUzJqQ==
age: 2035095
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o=
54.230.111.69200 OK 18 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 3d32707cb3ccfc843ca809ff0ff08c28
950e8aa81a2f546217a0ca433700c4df4550bbfd
10d7e42ad31f48815167a292170eaacedd4e7b0ae8546795a63975c2711ce024
GET /xdata/images/xphoto/300x240/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18103
server: nginx
date: Thu, 16 Feb 2023 19:51:45 GMT
etag: "0681e8b59ea4c8be7fdf0c8216c1cc08458d1976"
expires: Sat, 18 Mar 2023 19:51:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Co0udLTx-3U6nHgtjPZ91Uc4SvQW1C8_m4HlPXy0WwJTz57L2OQbGQ==
age: 1620397
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o=
54.230.111.69200 OK 20 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 41bf36733e71ce642c45069444cfcf64
c931c599e9519d6c110ceed2c92432b818780d07
5c330c4cabaf246ebde2e47b2153d3e070423478706634c810980d67173f503a
GET /xdata/images/xphoto/300x240/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19539
server: nginx
date: Sat, 25 Feb 2023 16:48:00 GMT
etag: "a1abb6debcd8d5cf227b075344fb7e3814565c3b"
expires: Mon, 27 Mar 2023 16:48:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0B024G-7LXX0XXN8cP3hkxcC8F1ctRqB1EbLr8Qak6troStW7zS7tw==
age: 853822
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o=
54.230.111.69200 OK 22 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash a610b882e99f89c94893c05f18687ec3
16e551d6c5ac3a8db914ec8f5fc15bbe9589a1c8
9814b3eb58d8fb061b8ebe7b1a76f31f1d08e556f1c4b3662e3a6752f121ca07
GET /xdata/images/xphoto/300x240/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21509
server: nginx
date: Sun, 19 Feb 2023 03:07:47 GMT
etag: "cae0d2dd8aa0198150d903ae55a5013050d35f21"
expires: Tue, 21 Mar 2023 03:07:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ADPF37_Bd3fCtpgCT4vKlkL0p2F7RP0QIixPfJIKW9OsSNe_JaqhaQ==
age: 1421435
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o=
54.230.111.69200 OK 16 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 6eb82e2bccd8b35e46f250238844ef3c
8f9cc26cce3b866559d1994c75147871b3d3bcea
0a96fd07340aee61dede1f72f25f593c9bed353963d8f289890b38fc2b827ba7
GET /xdata/images/xphoto/300x240/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15976
server: nginx
date: Mon, 06 Feb 2023 08:37:48 GMT
etag: "9656bfb35525d58a577bab93e3df8a9e15684eed"
expires: Wed, 08 Mar 2023 08:37:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kGX5hZguSczCUarJPkcbc79rNHu52qM7agfxG-9pkQQ1HE01g0032Q==
age: 2524834
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o=
54.230.111.69200 OK 21 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 90383d39034028eafbd253eead13aecf
32035c5bcff0627f4901188d0e7b994aa46e64c8
150590b7a8af048e1a2696985211a78b0fa1800523f338e9fee9b5947cb0e5d7
GET /xdata/images/xphoto/300x240/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20736
server: nginx
date: Wed, 15 Feb 2023 05:25:20 GMT
etag: "22999e3a492f8298270b04dabbeea01e819aa51e"
expires: Fri, 17 Mar 2023 05:25:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fxt5r0k9cC3aG23iJLHsDPsbDOXovHoXrheOoP0dj_8U8Adnb1DuAg==
age: 1758782
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o=
54.230.111.69200 OK 13 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 04e82ce3fa3ae9bd52cad3056a100c91
93693b20ed0103332bbb4e9f29852a5eaa187f1a
2e50a6fcd67533e10f476f84bbfafd558dd520f5b53ef1c2256e221bdaac9513
GET /xdata/images/xphoto/300x240/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12640
server: nginx
date: Fri, 17 Feb 2023 03:32:15 GMT
etag: "acbe20da8e1bbdb8bf0c0cdda294c53ffc109e54"
expires: Sun, 19 Mar 2023 03:32:15 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C29s_cl8zyRt75RHhGhf2d310UBbmcTzHSU56I0kOza4RHoKjXa6Yg==
age: 1592767
X-Firefox-Spdy: h2
www.booking.com/js_tracking?lang=en-us&aid=7928989&ref_action=index&ver=2&stype=1&pid=50be623d744b001a&sid=5707394d17314fd76dff9ff5e8597f83&ete=&etg=&etcg=&ets=cCGaYSddOEGcHNAdUDUCRPQFAeJQC|1,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|6&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZ__sflxmk2Rlcncw_s38IQfHLwr4z-yg040-C6CafjK5oQXrnqkKfLkUx3OcEmgNDPZZeX29EyaiullsZqLy9hGDxo8gRwOs4Xu1egQnV4X7U-uXCkhj1oO2kd8LE5anZblmpTHipndIYUEV_WqUy2P9W6hZ7qR1oOqX5sbqmS3F0fAcnUreZv_8Ya54DjeQk0rFx-f9GFqa0NIWMmpY6kv4LLtLOJi-qLQBi_JqlX9kiv-huzfew6arIbhYxMcemxQU-Tbo7IPYIF8nphO8gMhXVZqcWxkuN9SI4nprju4C8Ct_cwZ9Ws6K818KkemWw
54.230.111.88200 OK 20 kB URL HTTP/2 www.booking.com/js_tracking?lang=en-us&aid=7928989&ref_action=index&ver=2&stype=1&pid=50be623d744b001a&sid=5707394d17314fd76dff9ff5e8597f83&ete=&etg=&etcg=&ets=cCGaYSddOEGcHNAdUDUCRPQFAeJQC|1,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|6&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZ__sflxmk2Rlcncw_s38IQfHLwr4z-yg040-C6CafjK5oQXrnqkKfLkUx3OcEmgNDPZZeX29EyaiullsZqLy9hGDxo8gRwOs4Xu1egQnV4X7U-uXCkhj1oO2kd8LE5anZblmpTHipndIYUEV_WqUy2P9W6hZ7qR1oOqX5sbqmS3F0fAcnUreZv_8Ya54DjeQk0rFx-f9GFqa0NIWMmpY6kv4LLtLOJi-qLQBi_JqlX9kiv-huzfew6arIbhYxMcemxQU-Tbo7IPYIF8nphO8gMhXVZqcWxkuN9SI4nprju4C8Ct_cwZ9Ws6K818KkemWw
IP 54.230.111.88:0
Hash 7151708f974415803850b99b58373039
7fb78864329b0e9765ff26b84adae1674a1d4bd9
eb23e34a526c594ff71d8e418f0704fa2fe37f4360fd0b1972d85b8131af139f
GET /js_tracking?lang=en-us&aid=7928989&ref_action=index&ver=2&stype=1&pid=50be623d744b001a&sid=5707394d17314fd76dff9ff5e8597f83&ete=&etg=&etcg=&ets=cCGaYSddOEGcHNAdUDUCRPQFAeJQC|1,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|6&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZ__sflxmk2Rlcncw_s38IQfHLwr4z-yg040-C6CafjK5oQXrnqkKfLkUx3OcEmgNDPZZeX29EyaiullsZqLy9hGDxo8gRwOs4Xu1egQnV4X7U-uXCkhj1oO2kd8LE5anZblmpTHipndIYUEV_WqUy2P9W6hZ7qR1oOqX5sbqmS3F0fAcnUreZv_8Ya54DjeQk0rFx-f9GFqa0NIWMmpY6kv4LLtLOJi-qLQBi_JqlX9kiv-huzfew6arIbhYxMcemxQU-Tbo7IPYIF8nphO8gMhXVZqcWxkuN9SI4nprju4C8Ct_cwZ9Ws6K818KkemWw HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
X-Booking-AID: 7928989
X-Booking-CSRF: OnsHZAAAAAA=zjg7urFl4_oCm2V_Cr30k_wocFej3QffUVVjAR82xzSvJ0iDkWppWt-x6ScRpubaxikBoCOp-oyfA4e2ntyIMoivJ9a8ctVpDxQRK9ZIuyi2LNAdrxWECbwwwzX3m5kwGskdu2IigHs6zHFxb651NIgPdny6CcNk3ACNQlyA3ojOJSRR9JchvCyH4OHajnExWZP7GrABhTopqb09
X-Booking-Info: 1670050,1670060,1670070,1670090,1670120,1670140,1670770,1674130,1681530,1683290,1685250,1685260,1690290,1690590,1693900,aaTBNZZJRLESPIDNJDPVBC|1,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|1,1693900|2,1674130|1,1674130|3,1693900|1,1681530|3,cCHObECVVDDORMTfFbRZFJGO|1,cCHObECVVDDORMTfFbRZFJGO|2,cCHObECVVDDORMTfFbRZFJGO|4,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|1,NAFQeYJdDBKJbAQGGFVOdWNeYZaTaTaET|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,cCHObTRVEFDEXNBBTZBYSGSYO|5,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|1,cCHObMKdFEVYQGXUGScOTVaAFZKXe|3,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|1,cCHObdRdJJXRDVMDTEJWcFRURURHe|2,cCHObVZMYCVKKMadMUPORIPBLAUFRURURHe|7,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|1,cCHObMKdFEVRVVPKLZZVCMISLUDZSedLOLOLMO|2,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|3,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|6
X-Booking-Client-Info: aaTBNZZJRLESPIDNJDPVBC|1,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|1,cCGaYSddOEGcHNAdUDUCRPQFAeJQC|6
X-Booking-Label: 101
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 50be623d744b001a
X-Booking-Session-Id: 5707394d17314fd76dff9ff5e8597f83
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: _pxhd=Ocne5unmwMpfrsBctGresxft0altD-P42pkW0ruc7cUPBdkIHrqmHdi0VzjwyZyS3c8QX79rNtHQDDN6UqHg7g%3D%3D%3AVnHAKtDEw8OC0A0ioC7Y6%2FwKe5OjrlNUwk3Fz1m8wZgO1h9FH4YetGsxGjZ6wxt2pKXEXqFTBCoQiOSqSa1vKawrNf75F4y0MvO9TofOYuo%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzk%2FH4ZnjJfvaBjnG2EvNQsO%2FPyqN3R7mf3spa69GtJz4Aj1TlRY8%2BCIBcuyixFbehhw7y6G2ZsCgK9kSUBeOnjMal5mq3ZmJ%2B5O7wMz9H%2FCLVQPECHWcyREsBUQ9wQsqn3q1yg4jAonBlDmt2DoT8JydOqxJweFDCs%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=fcdc623f905d02c6&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejIwLB2_QNff9DZAkFA5Mn0YhlUBPVxRLGw; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2ep-6sKqD1TeNTOgXIQXD7OX7ErEo4AXxEGPMt1S7b5Pkv4M6DIOtA==
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o=
54.230.111.69200 OK 16 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 5ce55d22c4e06809b72801bf78198fb2
8cc49f26d00a1b2747ba599b06d67fd57d724047
3781416aa7ee06509ed5e7aa5143189ca6e1436f586194544fba3b8cfff6f27a
GET /xdata/images/xphoto/300x240/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16003
server: nginx
date: Wed, 08 Feb 2023 04:05:58 GMT
etag: "99ab36fff687a9a36ef5976947b52dcc3ef3dfa8"
expires: Fri, 10 Mar 2023 04:05:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OnTFaDKSUQRHQVNrONSEo89Zl298TRvsl80bykr9_LQnKanlGGBqsg==
age: 2368344
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o=
54.230.111.69200 OK 23 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash d2777025d4a89299a415993ffee584ae
882aadd31ddf11f475cc870f291c0cb00909bb41
a358344c77aa72b8ed5c9aeb8989f3e5d01116badd07b0c8fa7a6a3d7b1afb2e
GET /xdata/images/xphoto/300x240/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22931
server: nginx
date: Sun, 12 Feb 2023 00:40:07 GMT
etag: "57b844a916fa92a37e5f7cca64769aa7ccee8c19"
expires: Tue, 14 Mar 2023 00:40:07 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0QGTRLWLzjZ6SI7MmhDHGA7CWQJ04MUCh_PWHCjM_Lk_r6mV7G0_0w==
age: 2035095
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o=
54.230.111.69200 OK 18 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 3d32707cb3ccfc843ca809ff0ff08c28
950e8aa81a2f546217a0ca433700c4df4550bbfd
10d7e42ad31f48815167a292170eaacedd4e7b0ae8546795a63975c2711ce024
GET /xdata/images/xphoto/300x240/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18103
server: nginx
date: Thu, 16 Feb 2023 19:51:45 GMT
etag: "0681e8b59ea4c8be7fdf0c8216c1cc08458d1976"
expires: Sat, 18 Mar 2023 19:51:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NGDLeyXW-cHL6PU0eOE4YlAxg_C3wV6NiSQ84ZJhKipbYk9cz0jGTw==
age: 1620397
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o=
54.230.111.69200 OK 20 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 41bf36733e71ce642c45069444cfcf64
c931c599e9519d6c110ceed2c92432b818780d07
5c330c4cabaf246ebde2e47b2153d3e070423478706634c810980d67173f503a
GET /xdata/images/xphoto/300x240/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19539
server: nginx
date: Sat, 25 Feb 2023 16:48:00 GMT
etag: "a1abb6debcd8d5cf227b075344fb7e3814565c3b"
expires: Mon, 27 Mar 2023 16:48:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NUiMPofV6lpWRPNFDuhkjtiIR_45ijJUrUOJjuDssortf8Q27mWJdQ==
age: 853822
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o=
54.230.111.69200 OK 22 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash a610b882e99f89c94893c05f18687ec3
16e551d6c5ac3a8db914ec8f5fc15bbe9589a1c8
9814b3eb58d8fb061b8ebe7b1a76f31f1d08e556f1c4b3662e3a6752f121ca07
GET /xdata/images/xphoto/300x240/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21509
server: nginx
date: Sun, 19 Feb 2023 03:07:47 GMT
etag: "cae0d2dd8aa0198150d903ae55a5013050d35f21"
expires: Tue, 21 Mar 2023 03:07:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DwZmMovPWDuYTmywfppngh3d_yH6JvJ3St42sj10McJSDsArewou1w==
age: 1421435
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o=
54.230.111.69200 OK 16 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 6eb82e2bccd8b35e46f250238844ef3c
8f9cc26cce3b866559d1994c75147871b3d3bcea
0a96fd07340aee61dede1f72f25f593c9bed353963d8f289890b38fc2b827ba7
GET /xdata/images/xphoto/300x240/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15976
server: nginx
date: Mon, 06 Feb 2023 08:37:48 GMT
etag: "9656bfb35525d58a577bab93e3df8a9e15684eed"
expires: Wed, 08 Mar 2023 08:37:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eSzk5uXdJE87X0eAjQohmuH90RBaataOGteO8t2zUxnd7K58BK2BmA==
age: 2524834
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o=
54.230.111.69200 OK 21 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 90383d39034028eafbd253eead13aecf
32035c5bcff0627f4901188d0e7b994aa46e64c8
150590b7a8af048e1a2696985211a78b0fa1800523f338e9fee9b5947cb0e5d7
GET /xdata/images/xphoto/300x240/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20736
server: nginx
date: Wed, 15 Feb 2023 05:25:20 GMT
etag: "22999e3a492f8298270b04dabbeea01e819aa51e"
expires: Fri, 17 Mar 2023 05:25:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7qJx1AfWJTPPdDlAu_y9xmVYiYARdXj3VLCR9AAbgbCbaHsc-zbS3w==
age: 1758782
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o=
54.230.111.69200 OK 13 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 04e82ce3fa3ae9bd52cad3056a100c91
93693b20ed0103332bbb4e9f29852a5eaa187f1a
2e50a6fcd67533e10f476f84bbfafd558dd520f5b53ef1c2256e221bdaac9513
GET /xdata/images/xphoto/300x240/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12640
server: nginx
date: Fri, 17 Feb 2023 03:32:15 GMT
etag: "acbe20da8e1bbdb8bf0c0cdda294c53ffc109e54"
expires: Sun, 19 Mar 2023 03:32:15 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g_uD4EVmQncuTJiZl_t20-RQUcrAdwqqIjPmdkJ9fgOsHjJIYrG55w==
age: 1592767
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450095.jpeg?k=cd5e46e632dab722d22217813485efde31fbe82f5f26a624166edccdbe8187bc&o=
54.230.111.69200 OK 20 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450095.jpeg?k=cd5e46e632dab722d22217813485efde31fbe82f5f26a624166edccdbe8187bc&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash deb177f86bfc7083567ae12e1964f4ad
45c07c5d8cdec20431c81aee3aee189a4d87cd99
1f14eeb3c3ef9eeb1170e99a2fea2fbd034a83305f72be3fdfd7a7711f5fd4ee
GET /xdata/images/xphoto/300x240/45450095.jpeg?k=cd5e46e632dab722d22217813485efde31fbe82f5f26a624166edccdbe8187bc&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 20002
server: nginx
date: Sun, 19 Feb 2023 01:00:38 GMT
etag: "c9c5b95e24f2695949b5a8050940dd0b6899e08a"
expires: Tue, 21 Mar 2023 01:00:38 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3qA1W0eX7C4nhPZ1faavJhJSaq-9-TBwQTeOlbmWChfeCnZZNwFlYg==
age: 1429063
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/xphoto/300x240/45450097.jpeg?k=eac0f917a53dc395bd379fef8c191e7d5e37012b68e60232e4f6bba2a2901b7a&o=
54.230.111.69200 OK 15 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/xphoto/300x240/45450097.jpeg?k=eac0f917a53dc395bd379fef8c191e7d5e37012b68e60232e4f6bba2a2901b7a&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 13d1467c76d772dd6647f49fe4140d08
7ff7e63be06a3e98495eae5c0a1fb26482025d78
50fa8a1dfe8f3251194c1564def0dda195ce6fc96f05a63a83753b7b6bc9463d
GET /xdata/images/xphoto/300x240/45450097.jpeg?k=eac0f917a53dc395bd379fef8c191e7d5e37012b68e60232e4f6bba2a2901b7a&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15440
server: nginx
date: Sat, 11 Feb 2023 03:17:13 GMT
etag: "845ba9c7d09f3c70f691b186fee3a80a64284e78"
expires: Mon, 13 Mar 2023 03:17:13 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wyxhcRXkRQvF7VhdLkrfKzU9Vq6-sGCNYTzSZolxV9A677426x3row==
age: 2112069
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/searchbox_cloudfront_sd/9559ce1436fc4edda283895e133a5ab0397c1ac8.js
54.230.111.69200 OK 126 kB URL HTTP/2 cf.bstatic.com/static/js/searchbox_cloudfront_sd/9559ce1436fc4edda283895e133a5ab0397c1ac8.js
IP 54.230.111.69:0
File type Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size 126 kB (125473 bytes)
Hash e4e62ce767e974561c91bdaf2ed2da79
2577a195ae108cbb9a249745ceba60bfc1e7f841
8159614e049ee8522fd221f1bbaf6980a15452460b4eff429d6ceafb40486300
GET /static/js/searchbox_cloudfront_sd/9559ce1436fc4edda283895e133a5ab0397c1ac8.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 21 Feb 2023 09:06:28 GMT
last-modified: Tue, 21 Feb 2023 08:41:25 GMT
etag: W/"63f483b5-39be8"
expires: Thu, 23 Mar 2023 09:06:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fcvurYFjfwbFfla_4wzmftw4-wdxYrGmO15ZDPPxubliYxc4jNWLFA==
age: 1227111
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/xphoto/300x240/57175023.jpeg?k=dc0319d4d64ded9ee4b0ddb162a2e80db7899300b7bf21b34506888895d74c79&o=
54.230.111.69200 OK 17 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/xphoto/300x240/57175023.jpeg?k=dc0319d4d64ded9ee4b0ddb162a2e80db7899300b7bf21b34506888895d74c79&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash cb830f24406a145f18b29227188fe8d0
6244d25c3af11e7b1106c7652c6dd0818bf47849
3f3e48ee42260b5d5cbe17052df364872d6853d6a77db87b859d52d12411ede3
GET /xdata/images/xphoto/300x240/57175023.jpeg?k=dc0319d4d64ded9ee4b0ddb162a2e80db7899300b7bf21b34506888895d74c79&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17041
server: nginx
date: Tue, 21 Feb 2023 04:52:10 GMT
etag: "2281a4d7f463c5c88e05b78833fbf380e4dcee9b"
expires: Thu, 23 Mar 2023 04:52:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Eqe8luurplSvz_OVhM-rPOMVQSLStLEXt4PQKCO6RDh2FabNZMFRGA==
age: 1242372
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/665.c0979505.chunk.js
54.230.111.69200 OK 7.9 kB URL HTTP/2 cf.bstatic.com/psb/capla/static/js/665.c0979505.chunk.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (16709)
Hash 3920a3d9a0da5516ce91c0886dfad2f8
3c9033df19900601fe2933fb20132ac6f9965f66
a2678554b6b80ae967f5b6985a3c8aa1cc2dfe2eba37cd77ccc3c87bdbf5ebd7
GET /psb/capla/static/js/665.c0979505.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"88cdb5198880c88434af09d62ea89e0a"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 15:04:56 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 15:04:56 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cB_cYHyaqZCYBGh-9Ef9i0nucS4cXhyzR75-LsSvJALK_ACVpu8gqA==
age: 343706
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/city/300x240/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o=
54.230.111.69200 OK 19 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/city/300x240/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 591bf2b411ad8974dee0fc6795ace07a
34f56d548e4a716d3069ffe9a8375a1674523073
54d563a8d8f1a7c0169a111c61bbff842c2d2c97c23686ef2f9c5999283d4e4b
GET /xdata/images/city/300x240/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18928
server: nginx
date: Wed, 22 Feb 2023 01:49:28 GMT
etag: "246aeb2049cf18c0b1550cf652b45375abbaba37"
expires: Fri, 24 Mar 2023 01:49:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g_OyGYc6HmKIjMFeICxPxDawOo_RI7rGooDI7_lqylx7HzNdTUQdsA==
age: 1166934
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/city/300x240/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o=
54.230.111.69200 OK 14 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/city/300x240/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash b5543d6104bc9d4924b33eebce30c239
b3c4c2976cc018c27192835f6eb601fd78770677
312f7d7fe3b76d7c9114a596cf44616495688706a0a6a08ecfd99e34a0c4b233
GET /xdata/images/city/300x240/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 13995
server: nginx
date: Sat, 18 Feb 2023 12:15:02 GMT
etag: "054028629d9c1f87612a7cd5de481092d03f8ac9"
expires: Mon, 20 Mar 2023 12:15:02 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UCB9x_js0pZULswFt8C-5nFCXLKaWnNuyz-OeR3TzWXLJ_3w06P17w==
age: 1475000
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/city/300x240/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o=
54.230.111.69200 OK 14 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/city/300x240/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 1334acf6204a693d8b8c5c37fb860e16
19ff8b2f25976123112128920afe81d344a8acd9
a04c403a0adaa851bd2b922dd555e96921d3bdbfa5697fd232b9fe884510b3bc
GET /xdata/images/city/300x240/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 14212
server: nginx
date: Sat, 18 Feb 2023 12:15:17 GMT
etag: "38998a7b0d835a4dd7b11899c6eaa323e7536f01"
expires: Mon, 20 Mar 2023 12:15:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fzTeZdzsKs-0DL1llC5meq9SSBJgMQqLR8FFVpR-unuNCh_kLQA4mg==
age: 1474985
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/city/300x240/671694.jpg?k=cd1e3603afe4edd09f829675efb1cdc9a5925bed25a642bfc4d909602c231624&o=
54.230.111.69200 OK 18 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/city/300x240/671694.jpg?k=cd1e3603afe4edd09f829675efb1cdc9a5925bed25a642bfc4d909602c231624&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 26df9166cc4921af60adb47ef9a7f77d
b921074dbb6f67e28a48cb8bb77fa0827cd2beac
36197d4c18abcb09bb058deff5af048026e4c9d62f3b9bf45de27ae93aae73b4
GET /xdata/images/city/300x240/671694.jpg?k=cd1e3603afe4edd09f829675efb1cdc9a5925bed25a642bfc4d909602c231624&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17524
server: nginx
date: Sat, 18 Feb 2023 12:15:17 GMT
etag: "31106a26ad51fa19e5179af173dd61ebff0b7211"
expires: Mon, 20 Mar 2023 12:15:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z7nVm8PmW3bdTrMmGTb_GqndP4sPzuD6hm_8rbu-3RLHDFrRL75Mcg==
age: 1474985
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/city/300x240/644310.jpg?k=472fefd4c3c0aef36deb16adb91c965923d8b1078ab29056802f95aead0586bf&o=
54.230.111.69200 OK 18 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/city/300x240/644310.jpg?k=472fefd4c3c0aef36deb16adb91c965923d8b1078ab29056802f95aead0586bf&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 5f2f3d8ee0f8ead97ed4e4a5b9f2ac43
5858a21fce810a172be3142406bb9a7443a0a69f
c35348498863aeac5636be896c7c0285aee1df29cd8f0ce6effaf700e3847657
GET /xdata/images/city/300x240/644310.jpg?k=472fefd4c3c0aef36deb16adb91c965923d8b1078ab29056802f95aead0586bf&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17901
server: nginx
date: Sun, 26 Feb 2023 03:46:07 GMT
etag: "f09a4d668b90c570309e41de0a37e4b73401459a"
expires: Tue, 28 Mar 2023 03:46:07 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G-NtMxEaMuKD_P8wEQWZkmXLK_YQ6eThI4jBmyGwaFiG6FREfK3NkA==
age: 814335
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/city/300x240/737551.jpg?k=ad4ef19a2b979ef794b56d1901e6937b874b4726a4085d8ddbe795f5c6bfed73&o=
54.230.111.69200 OK 16 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/city/300x240/737551.jpg?k=ad4ef19a2b979ef794b56d1901e6937b874b4726a4085d8ddbe795f5c6bfed73&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 54cff41ebdd31ad0e04abb15d0e421fa
a6000223d658b506ded5454f38af9661c5207a23
20a97f185d2c12bc5c0fd4e095fc3113e0e8fdcc2b7b110548559bd340a86ca9
GET /xdata/images/city/300x240/737551.jpg?k=ad4ef19a2b979ef794b56d1901e6937b874b4726a4085d8ddbe795f5c6bfed73&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 15577
server: nginx
date: Sat, 18 Feb 2023 12:15:17 GMT
etag: "14879e18cc732147fd04451bb313d4ad26795964"
expires: Tue, 04 Apr 2023 12:15:17 GMT
cache-control: max-age=3888000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PlOvHxMlixpLVoyMKvwODCL3ZDPRiXNT10j4nKefjg1YAKdSTbnykg==
age: 1474985
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/region/300x240/48107.jpg?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o=
54.230.111.69200 OK 12 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/region/300x240/48107.jpg?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash c5787f85e8f66d72c3e0639f430d9740
bc4de0d03083ed58975cb1083f09e87683d36921
a1f878723d4b411aa0eb0befa0101f74c5052922b7986039e37e0bbf1b533ea6
GET /xdata/images/region/300x240/48107.jpg?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12328
server: nginx
date: Sat, 25 Feb 2023 13:40:29 GMT
etag: "cda3bc2a5972542ee2207d93bc352713ff2950b6"
expires: Mon, 27 Mar 2023 13:40:29 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -6UxM1h88C1q9JPaMa-7lWoOADueXXxCNn-3kUNbcMN532qVblP6ag==
age: 865073
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/city/300x240/954959.jpg?k=37410091e9d0e74278ef7710d594a8ef5882decaf47e8f9a7ca30f9e85bbab75&o=
54.230.111.69200 OK 8.8 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/city/300x240/954959.jpg?k=37410091e9d0e74278ef7710d594a8ef5882decaf47e8f9a7ca30f9e85bbab75&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 437f0b660bfce5dc7b9b880e85b81ded
ccc3d869fab9d7a1c3d132600d0640b3f1f125ee
d952190a2f97516811acf53c989f3df858bee29f265aad7a98e2a9b67041803e
GET /xdata/images/city/300x240/954959.jpg?k=37410091e9d0e74278ef7710d594a8ef5882decaf47e8f9a7ca30f9e85bbab75&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8817
server: nginx
date: Fri, 17 Feb 2023 09:09:53 GMT
etag: "7204e4cc86957d31e559e656a73b21e84ccf4bc2"
expires: Sun, 19 Mar 2023 09:09:53 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S3xO5fAfbKi8y9UZONcrx_g66qF5XqOIW84Ie7phVs8cl_GPrwQOOA==
age: 1572509
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/city/300x240/967346.jpg?k=f2fc26f8f1b8d3fbc6731b2818cba0888423bac3183cb1e87d1214045f4d4fd2&o=
54.230.111.69200 OK 18 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/city/300x240/967346.jpg?k=f2fc26f8f1b8d3fbc6731b2818cba0888423bac3183cb1e87d1214045f4d4fd2&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 2b28a678e7fa75fa6348bb51d73d4de8
2c1e0cd2d98ca0e6710591dbec667b38ae8fb0a9
aaeebda205ac43634877f24e7d1ce95ec54ad62bc1d8cc1a6db2f0bfac301eae
GET /xdata/images/city/300x240/967346.jpg?k=f2fc26f8f1b8d3fbc6731b2818cba0888423bac3183cb1e87d1214045f4d4fd2&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17904
server: nginx
date: Sat, 25 Feb 2023 13:46:24 GMT
etag: "d2c921c09edeff3904da36366cb2c6a9569d6c15"
expires: Mon, 27 Mar 2023 13:46:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -wtcA211H3t2rTGII1qJtJR6CL2Byp0R5ARKsv351hFOzJ40woluMQ==
age: 864718
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ef0949d72ccdcc083647d001c8ba940
ebe4e2284d3892b010623597d0945b6b5cd64448
fe1a912baa83e36855bb934de3f2cfdffe77b1224a552533a4a7f2e984a51e52
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 657
Connection: keep-alive
Cookie: _pxhd=PDbAc7AkF9CBYtyl-E90TV5PNsN6beP34AVSXfdxPIIzXxuS0IkjzleVa-0pS5nnaj4Bqja-xWvFjBLzfAO0iQ%3D%3D%3A-DUgo7ly10rrIVZGhiOPTPFf2k%2Fzn9xRwBhMnx8-DvUxmoiG1dHeKtIk9rSakuWdsdmtm3G%2F2hcNJIPHUjas4tGOAeJjn3itMIOytnRpRBI%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCp22MEd7Sd8RX1GyLvbVBrrV1ZMebbaBDUxwuR7ZhEvWG4QqZFITuSrFTMvXqGnsJx5pZXw6o%2FQxWuXYTydhIsHwpk5g35jS1crCSmmPjNjYH7gTTWdm8WWBmgULeW657lGgH16S1iIMVP1u8%2B48p%2F2uYXK2HyB0YY%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhBQaaLhV81ZEXQHe2mxwMc7ii6sjmqgJm9y5%2FPf0i2vXIcdqEuW9SpGnkhDFB2VBQBuEcTAPJ0YFL%2Fh002b82KUY8tegWBAVQympvi5L0LSTwHsY8i3yTdo%2Bf7tNCsdu3QzgDXslJ5DO8fIIC0q0EuSLL8zFGrxeyc%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=68a3623fbd3a0027&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqsvseaL0HKum3PKt9GJeiC7D6dVfWHzJAoM;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YXA1g8cbRAVmrgtnOTJG1uazMf2koNY5nSLNMVg5Ee9BUsT2O3hHDA==
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ef0949d72ccdcc083647d001c8ba940
ebe4e2284d3892b010623597d0945b6b5cd64448
fe1a912baa83e36855bb934de3f2cfdffe77b1224a552533a4a7f2e984a51e52
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 657
Connection: keep-alive
Cookie: _pxhd=PDbAc7AkF9CBYtyl-E90TV5PNsN6beP34AVSXfdxPIIzXxuS0IkjzleVa-0pS5nnaj4Bqja-xWvFjBLzfAO0iQ%3D%3D%3A-DUgo7ly10rrIVZGhiOPTPFf2k%2Fzn9xRwBhMnx8-DvUxmoiG1dHeKtIk9rSakuWdsdmtm3G%2F2hcNJIPHUjas4tGOAeJjn3itMIOytnRpRBI%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCp22MEd7Sd8RX1GyLvbVBrrV1ZMebbaBDUxwuR7ZhEvWG4QqZFITuSrFTMvXqGnsJx5pZXw6o%2FQxWuXYTydhIsHwpk5g35jS1crCSmmPjNjYH7gTTWdm8WWBmgULeW657lGgH16S1iIMVP1u8%2B48p%2F2uYXK2HyB0YY%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2FxGD2WH2G0ztqbRFd2N1fwusGynCKz4RAJzaLV%2BuMO8iV8Ujgk7gi%2B3C1Hmc4ItYnQPIAM0t8kcdpBYFCPHYaEd92KhNS9XZPDPf4BjPo6jxJbIrJ15q6D1CvvXMlMsqbBIAMCbBA6uRF8ifV1jo7yijD%2FneSd3R4%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=aac4623f26c20013&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqsv67c1wqxe6yOpqaMKOt2_WUZKyIxnBdUI;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oxDB77GLS3H29Qs0UlNT4DOOuqm9TGoJgEf8_tMABfrDo-9Wp3LyMQ==
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/city/300x240/954959.jpg?k=37410091e9d0e74278ef7710d594a8ef5882decaf47e8f9a7ca30f9e85bbab75&o=
54.230.111.69200 OK 8.8 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/city/300x240/954959.jpg?k=37410091e9d0e74278ef7710d594a8ef5882decaf47e8f9a7ca30f9e85bbab75&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 437f0b660bfce5dc7b9b880e85b81ded
ccc3d869fab9d7a1c3d132600d0640b3f1f125ee
d952190a2f97516811acf53c989f3df858bee29f265aad7a98e2a9b67041803e
GET /xdata/images/city/300x240/954959.jpg?k=37410091e9d0e74278ef7710d594a8ef5882decaf47e8f9a7ca30f9e85bbab75&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8817
server: nginx
date: Fri, 17 Feb 2023 09:09:53 GMT
etag: "7204e4cc86957d31e559e656a73b21e84ccf4bc2"
expires: Sun, 19 Mar 2023 09:09:53 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pgwfbwkVzL2Kv9j_5GEWjmzlrDTefr5EJO-NHXJuV0UMKJ4ApGaqyA==
age: 1572509
X-Firefox-Spdy: h2
www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=cCGaYSdVZMYCIPPQFFNcFGdcFRURURNLRe|1,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|4&ets=&etgwv=
54.230.111.88200 OK 35 B URL HTTP/2 www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=cCGaYSdVZMYCIPPQFFNcFGdcFRURURNLRe|1,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|4&ets=&etgwv=
IP 54.230.111.88:0
Hash 79a611524d7c43a354c589264cc2376e
2e25649d9a8a208302be0502b47a0e44b07bc7c1
c7a9af81f3467d3c95760df18d0853bda8c191f612fb2e8b2b5c4ed941fbaf1a
GET /js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=cCGaYSdVZMYCIPPQFFNcFGdcFRURURNLRe|1,cCHObIKELceMMPOJHZWSPYHAFPRDUNREWQRO|4&ets=&etgwv= HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
X-Booking-Info:
X-Booking-Client-Info:
X-Booking-Pageview-Id: 50be623d744b001a
X-Booking-SiteType-Id: 1
X-Booking-Language-Code: en-us
X-Booking-AID: 7928989
X-Booking-Session-Id: d56241c9df88499dc8be1424c7e9980d
X-Booking-ET-Serialized-State: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxCUn4aDZnVJUXO%2FnFmqkYRBJZIqN9jAeoTPDTmX1klfki9YFUyikYtCI3KFgBN4QDIi9m%2FgWAk3y4wBAMzy688DF8OQ3jw0HSvuXAdOiWMNtlgPs3orlW4VMxBRB%2BhPAw4%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=7ae5623fd3a30022&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejL2wkMB3hrvcEpox_uTu54uPA-zDgVcnLU; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BPdEwssHL4KC_ASU8K_IqiAPBvtC8cT-F1jZycZK7yEIFsW1RZWUVA==
X-Firefox-Spdy: h2
q-xx.bstatic.com/xdata/images/city/300x240/967346.jpg?k=f2fc26f8f1b8d3fbc6731b2818cba0888423bac3183cb1e87d1214045f4d4fd2&o=
54.230.111.69200 OK 18 kB URL HTTP/2 q-xx.bstatic.com/xdata/images/city/300x240/967346.jpg?k=f2fc26f8f1b8d3fbc6731b2818cba0888423bac3183cb1e87d1214045f4d4fd2&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 2b28a678e7fa75fa6348bb51d73d4de8
2c1e0cd2d98ca0e6710591dbec667b38ae8fb0a9
aaeebda205ac43634877f24e7d1ce95ec54ad62bc1d8cc1a6db2f0bfac301eae
GET /xdata/images/city/300x240/967346.jpg?k=f2fc26f8f1b8d3fbc6731b2818cba0888423bac3183cb1e87d1214045f4d4fd2&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17904
server: nginx
date: Sat, 25 Feb 2023 13:46:24 GMT
etag: "d2c921c09edeff3904da36366cb2c6a9569d6c15"
expires: Mon, 27 Mar 2023 13:46:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UxbWF6Oe7qXr4qH6LEM4VuV1jUo88pSkhOsc7Ji_G-Hkmyt9IWfHgw==
age: 864718
X-Firefox-Spdy: h2
r-xx.bstatic.com/xdata/images/region/300x240/54845.jpg?k=0e2af6c2736168d778b44424c17abaa4e6189f8962bab5381061472112252abb&o=
54.230.111.69200 OK 17 kB URL HTTP/2 r-xx.bstatic.com/xdata/images/region/300x240/54845.jpg?k=0e2af6c2736168d778b44424c17abaa4e6189f8962bab5381061472112252abb&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash b6fd8929a2e9ef1673183fa7b80469a4
4ce6f1115e261652055961fc5c9821212b7da042
9cae95a8aaf5d447fdac5ad8d30577d32e4fe70dc333b2ebdb98c8f7a44b9aaa
GET /xdata/images/region/300x240/54845.jpg?k=0e2af6c2736168d778b44424c17abaa4e6189f8962bab5381061472112252abb&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16722
server: nginx
date: Sat, 25 Feb 2023 13:38:33 GMT
etag: "efd4aecbb9b5d3de8a0ae125def783b47f1ed030"
expires: Mon, 27 Mar 2023 13:38:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2Drb0VZ20FQ74OF1_vUxT8NEZ7pOnxAJBHjlyHIPN0J9wk7BjfXqDQ==
age: 865189
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ef0949d72ccdcc083647d001c8ba940
ebe4e2284d3892b010623597d0945b6b5cd64448
fe1a912baa83e36855bb934de3f2cfdffe77b1224a552533a4a7f2e984a51e52
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 657
Connection: keep-alive
Cookie: _pxhd=PDbAc7AkF9CBYtyl-E90TV5PNsN6beP34AVSXfdxPIIzXxuS0IkjzleVa-0pS5nnaj4Bqja-xWvFjBLzfAO0iQ%3D%3D%3A-DUgo7ly10rrIVZGhiOPTPFf2k%2Fzn9xRwBhMnx8-DvUxmoiG1dHeKtIk9rSakuWdsdmtm3G%2F2hcNJIPHUjas4tGOAeJjn3itMIOytnRpRBI%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCp22MEd7Sd8RX1GyLvbVBrrV1ZMebbaBDUxwuR7ZhEvWG4QqZFITuSrFTMvXqGnsJx5pZXw6o%2FQxWuXYTydhIsHwpk5g35jS1crCSmmPjNjYH7gTTWdm8WWBmgULeW657lGgH16S1iIMVP1u8%2B48p%2F2uYXK2HyB0YY%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3XAtKWxIJ3ZQLV5po74oVNB8LmL3NMgoJH8pG5YzSMNGdeGB58NO1Q3e7pA%2FYWP%2Bb7jd4g3QBZ9tW9ZprTgpek7QNMYpv1nap6jyE6JBJP%2FYs4%2FT2xmrapp%2B8nhragtmrqGc%2FCLK41aYNIsxKbl0iqNzZbdzgBelms%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=ea59623f701e0046&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqstEIbFRYA-dF-7LT6mvU68TGVo5fAaHGMA; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j3mUcmsBkpTq1RGKkdGZRMv5w_Xx0C27RnvR2KpbhHLrH_pTwhY-tQ==
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
54.230.111.88200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP 54.230.111.88:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 42fcc80d879dd35c0bbdd04c1414890b
f1dbf58d1b458f9c50995bb8d84da4a67f2d437b
fb87565b58755d257fcf9af5b4b25e0dcfc682adb630dd2a32bbf56b91d2c325
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
Content-Type: application/json
X-Booking-Platform: WWW
X-Booking-SiteType-Id: undefined
X-Booking-Pageview-Id: undefined
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: undefined
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Origin: https://www.booking.com
Content-Length: 657
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxCUn4aDZnVJUXO%2FnFmqkYRBJZIqN9jAeoTPDTmX1klfki9YFUyikYtCI3KFgBN4QDIi9m%2FgWAk3y4wBAMzy688DF8OQ3jw0HSvuXAdOiWMNtlgPs3orlW4VMxBRB%2BhPAw4%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxAT%2BWxVDNwrj89w7HGE%2BZcJ8YgePCfARyyCCG1fDYdffO8zC6ppkR0H3BoWJR5qEKOvIgQsaGkLKtcSGQKqQpstEjgvPYlg6nn7mepURni%2BjZSCKscqA1P3iTYtMD0WWcU%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:22 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=e320623feec60026&e=UmFuZG9tSVYkc2RlIyh9YaKT1Ar0s2gSEmakdtrUqssibujz_Idcril9cvQeVyyjowndg-xTwr0;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NsdjHBtd7NA4-hgPiOqxXK7s8vz7SVyDQv_AwFE-cCU75ekkrHvGvA==
X-Firefox-Spdy: h2
account.booking.com/static/booking-sso.v1.js
54.230.111.51200 OK 3.6 kB URL HTTP/2 account.booking.com/static/booking-sso.v1.js
IP 54.230.111.51:0
File type ASCII text, with very long lines (3558)
Hash 57974846eeec5ba455de4e7ed2264627
e3319c816120f819a93f1bab2bb0683d9a6d8460
fb0b3aef25c12ebb0a3d15eef6c367e790b1a8ea0660ae5ad4ea5d24b83778f0
GET /static/booking-sso.v1.js HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxAT%2BWxVDNwrj89w7HGE%2BZcJ8YgePCfARyyCCG1fDYdffO8zC6ppkR0H3BoWJR5qEKOvIgQsaGkLKtcSGQKqQpstEjgvPYlg6nn7mepURni%2BjZSCKscqA1P3iTYtMD0WWcU%3D; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjY1ZDQ2OTUwLWJiMGMtNDJmNy1iNTliLWNlYmVlYTY4YTZiNCJ9fQ; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 3559
server: envoy
date: Tue, 07 Mar 2023 13:58:22 GMT
last-modified: Mon, 06 Mar 2023 10:28:46 GMT
etag: "6405c05e-de7"
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ut5OaSa5uk3yfgW1UZnukBx-SzzpGrhqWR3-tq-k4nEl65J2vOytOw==
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/154512398.webp?k=f34c90d1aae9ef4b8c0eea552e829f669eac79b844bd6e88ced019273f4d3c4b&o=&s=1
54.230.111.69200 OK 72 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/154512398.webp?k=f34c90d1aae9ef4b8c0eea552e829f669eac79b844bd6e88ced019273f4d3c4b&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8f65d9111ef2d4aa2b2cb67dc112b64c
0ac0d2a13010ff6a3f65812cd8949393eefaeef2
74b91ae62006cdad22d6e702c8f1f432c2144abd4909cbc997c23d9425b63104
GET /xdata/images/hotel/square600/154512398.webp?k=f34c90d1aae9ef4b8c0eea552e829f669eac79b844bd6e88ced019273f4d3c4b&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 71718
server: nginx
date: Mon, 06 Feb 2023 08:02:40 GMT
etag: "99c737091095e81489397fc39b715f0325e363a4"
expires: Wed, 08 Mar 2023 08:02:40 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NedYv5bPF5uo2J0IzTkJpIRqjX5q84BSOnZnbmYB3elCj50MiA20HQ==
age: 2526942
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/90166571.webp?k=0b63f507a150b0e5f6e2173786be4374ee7deae468fc1a6443feef111cc01ef5&o=&s=1
54.230.111.69200 OK 31 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/90166571.webp?k=0b63f507a150b0e5f6e2173786be4374ee7deae468fc1a6443feef111cc01ef5&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 144ea530c7ce441545e4faf8436567c5
adc26707883764b633c3c56b6fd94eadd1f02658
3b463c2a52c167a2ca60af3010e689f9edb48dcdfab7918a06b9ca83df7f4270
GET /xdata/images/hotel/square600/90166571.webp?k=0b63f507a150b0e5f6e2173786be4374ee7deae468fc1a6443feef111cc01ef5&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 30798
server: nginx
date: Fri, 17 Feb 2023 01:53:16 GMT
etag: "00f46aabf404ea8bf694d85ee02dfc45c062d0bb"
expires: Sun, 19 Mar 2023 01:53:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YMpv_3-5Idz9EEcmVJVUCphi1fYGf4muHADVF7ixV9bspp9Z8EbwvA==
age: 1598706
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/main_cloudfront_sd/2c5b361ae1bd95f6401f87fcacfdc9eab3b210f4.js
54.230.111.69200 OK 193 kB URL HTTP/2 cf.bstatic.com/static/js/main_cloudfront_sd/2c5b361ae1bd95f6401f87fcacfdc9eab3b210f4.js
IP 54.230.111.69:0
File type ASCII text, with very long lines (57572)
Size 193 kB (193305 bytes)
Hash 9ec4ab3a830095fba9f51174b9d4b280
456e2cb857339a5031a799d53f96a5f59bee8a12
5d269851f9755eb711d58e645ce974f49bdf058b0aea439f49bcad610d61768e
GET /static/js/main_cloudfront_sd/2c5b361ae1bd95f6401f87fcacfdc9eab3b210f4.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 28 Feb 2023 14:17:23 GMT
last-modified: Tue, 28 Feb 2023 13:38:09 GMT
etag: W/"63fe03c1-874a9"
expires: Thu, 30 Mar 2023 14:17:23 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KACupF1YuT1KHlH5xRcsNKSH7bKQN1_Tc3EQM_fHwajWJHOcMhZSQA==
age: 603656
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/236840535.webp?k=ce3c9fd759ec1a8d942b39f8fa1b8f4f388918523b269b9dff75842fec735038&o=&s=1
54.230.111.69200 OK 44 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/236840535.webp?k=ce3c9fd759ec1a8d942b39f8fa1b8f4f388918523b269b9dff75842fec735038&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1a4d2393c57cc8f4803d5142fbec0b15
bc63da22a153bbeb61fc53874e2c86fab68392ff
a4c1d356a4ef9d0eff6a71be2d6a8fd03300bf48087346743197f6a096f1628a
GET /xdata/images/hotel/square600/236840535.webp?k=ce3c9fd759ec1a8d942b39f8fa1b8f4f388918523b269b9dff75842fec735038&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 44364
server: nginx
date: Sat, 25 Feb 2023 04:09:17 GMT
etag: "48ceaa8a65b17b6ec671968b3846481f69f3f28f"
expires: Mon, 27 Mar 2023 04:09:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D4fULlb8l7dGndlTA5SRH7bGQ_ZUOflzs94QtucKgtgA_V1LD1-NKQ==
age: 899345
X-Firefox-Spdy: h2
www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=&ets=&etgwv=js_wcu_trip_type_based_destination_number_of_types|4
54.230.111.88200 OK 35 B URL HTTP/2 www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=&ets=&etgwv=js_wcu_trip_type_based_destination_number_of_types|4
IP 54.230.111.88:0
Hash 79a611524d7c43a354c589264cc2376e
2e25649d9a8a208302be0502b47a0e44b07bc7c1
c7a9af81f3467d3c95760df18d0853bda8c191f612fb2e8b2b5c4ed941fbaf1a
GET /js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=50be623d744b001a&ete=&etg=&etcg=&ets=&etgwv=js_wcu_trip_type_based_destination_number_of_types|4 HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
X-Booking-Info:
X-Booking-Client-Info:
X-Booking-Pageview-Id: 50be623d744b001a
X-Booking-SiteType-Id: 1
X-Booking-Language-Code: en-us
X-Booking-AID: 7928989
X-Booking-Session-Id: d56241c9df88499dc8be1424c7e9980d
X-Booking-ET-Serialized-State: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxAT%2BWxVDNwrj89w7HGE%2BZcJ8YgePCfARyyCCG1fDYdffO8zC6ppkR0H3BoWJR5qEKOvIgQsaGkLKtcSGQKqQpstEjgvPYlg6nn7mepURni%2BjZSCKscqA1P3iTYtMD0WWcU%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Tue, 07 Mar 2023 13:58:22 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=6d82623f112e0367&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejLY6BUAnwmni1U0FfmiZsiLo4L_oL4LHcg; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wYL5KpsQJFCFh85c1drAsOmCrB7tPA-nVE2V6SZagqh23gLnLMqJzw==
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/236840535.webp?k=ce3c9fd759ec1a8d942b39f8fa1b8f4f388918523b269b9dff75842fec735038&o=&s=1
54.230.111.69200 OK 44 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/236840535.webp?k=ce3c9fd759ec1a8d942b39f8fa1b8f4f388918523b269b9dff75842fec735038&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1a4d2393c57cc8f4803d5142fbec0b15
bc63da22a153bbeb61fc53874e2c86fab68392ff
a4c1d356a4ef9d0eff6a71be2d6a8fd03300bf48087346743197f6a096f1628a
GET /xdata/images/hotel/square600/236840535.webp?k=ce3c9fd759ec1a8d942b39f8fa1b8f4f388918523b269b9dff75842fec735038&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 44364
server: nginx
date: Sat, 25 Feb 2023 04:09:17 GMT
etag: "48ceaa8a65b17b6ec671968b3846481f69f3f28f"
expires: Mon, 27 Mar 2023 04:09:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: toS91fL043WXcQTuHYCKtCoX7l7Qo7dFZn1kZFMxuZeUT7RGY-hjcA==
age: 899345
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
104.19.187.97200 OK 133 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
IP 104.19.187.97:0
Size 133 kB (133285 bytes)
Hash 0084c4f0895debdef7bb4a1e4eae3cbb
35e7b7aa089bf4bf6e70e3b6904d6e263c7dec13
04d650ef93953331a5e90e662cf532663b4579950aa51fe1ddfe87d9a6e7c33d
GET /scripttemplates/6.22.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:19 GMT
content-type: text/css
content-md5: F/Fs54+x9bQK/ULkNRp4fA==
last-modified: Thu, 19 Aug 2021 02:39:24 GMT
x-ms-request-id: 6bc20948-001e-0159-656c-c49b35000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 26770
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7a435a44eaa10b69-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/262247242.webp?k=ac5f696d6e7c82349e66d4e54d6a12bb0d89003eac8e7734489cc3e5d76944b8&o=&s=1
54.230.111.69200 OK 72 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/262247242.webp?k=ac5f696d6e7c82349e66d4e54d6a12bb0d89003eac8e7734489cc3e5d76944b8&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4bc699d1bd67bda2dd2771f1160ebf07
5bd339ae7baa59fb6ea72d9b0adfc22859458596
deb835a811f25db8ab52d0a20100d29baf15fa5b2ec3f2b4f01210c56fb0163f
GET /xdata/images/hotel/square600/262247242.webp?k=ac5f696d6e7c82349e66d4e54d6a12bb0d89003eac8e7734489cc3e5d76944b8&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 128296
server: nginx
date: Wed, 22 Feb 2023 08:13:35 GMT
etag: "adcbf5275c82b8833a84fa5b188752afcecd72fa"
expires: Sat, 08 Apr 2023 08:13:35 GMT
cache-control: max-age=3888000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q7PuJLm1lIYjjz0pKz5AXopxNcpCbJLvfPTRkjm5HO__aBnnWGZiqA==
age: 1143887
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/98662660.webp?k=6e981419e8af97778c5b13a8aca3c264a0be73e9ebfd565cb17c0e4134783564&o=&s=1
54.230.111.69200 OK 40 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/98662660.webp?k=6e981419e8af97778c5b13a8aca3c264a0be73e9ebfd565cb17c0e4134783564&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ae5abd3325e28c423001f3f540d38b80
aa9535e550f5c89977b4f598eb656de20ec767cc
938a823e490adc84ef5d12c5b763baebb2e0ccc0592b3f0faa785a7e94e88055
GET /xdata/images/hotel/square600/98662660.webp?k=6e981419e8af97778c5b13a8aca3c264a0be73e9ebfd565cb17c0e4134783564&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 39584
server: nginx
date: Fri, 03 Mar 2023 11:14:36 GMT
etag: "39b0f612e06ba0e66645bdc61a28024914c9ebb5"
expires: Sun, 02 Apr 2023 11:14:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HMuLJyXAcX2oDuHPnYEdMQt6zaCBb-wT4BK0S8WHgJhGk5bAxDvBNw==
age: 355427
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/101174842.webp?k=515b19cd29852207a9e6add777068c1df7931a0dc58ddb80b36af9b605a3a00d&o=&s=1
54.230.111.69200 OK 20 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/101174842.webp?k=515b19cd29852207a9e6add777068c1df7931a0dc58ddb80b36af9b605a3a00d&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ce2edbb1483dd2f1a695bb9fe57f7574
5684d3255717041c66037bd6d76f2aa9761578b7
e5c6e93bfa6be2a02b28f5b1e3bd4ff78eaf4b7738710e73f91c3235db6b3c77
GET /xdata/images/hotel/square600/101174842.webp?k=515b19cd29852207a9e6add777068c1df7931a0dc58ddb80b36af9b605a3a00d&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 19804
server: nginx
date: Fri, 10 Feb 2023 01:10:48 GMT
etag: "6e83dc99093caec5a5cf31cea6f26715b4932a3b"
expires: Sun, 12 Mar 2023 01:10:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5FAQ2dy2d3Khx8ImpKvyO2hAPRahzvDfvxcmLLRczHoJ-kQlJnXB_A==
age: 2206055
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/218529186.webp?k=669db47d57f15a20a66212f4d267ecde0a5866a896f3d2a3223441aef8b07f6c&o=&s=1
54.230.111.69200 OK 68 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/218529186.webp?k=669db47d57f15a20a66212f4d267ecde0a5866a896f3d2a3223441aef8b07f6c&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1ae4768126a76f4093bcf30833c7a4a0
3b35ab740b2f5860d1c6e0096446247d5b7c406d
9f222b46c7a092237c0e4bc1fe0c972365ba84e64463825f7b5fd31963e94c77
GET /xdata/images/hotel/square600/218529186.webp?k=669db47d57f15a20a66212f4d267ecde0a5866a896f3d2a3223441aef8b07f6c&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 68144
server: nginx
date: Wed, 01 Mar 2023 14:03:52 GMT
etag: "93ba87291c0b3bc032b4843b3d8d9ec4c79f30eb"
expires: Fri, 31 Mar 2023 14:03:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GgAQ9LaTYh2fs-WO7_zfAUlSdXlPRrF5JoEDIkjWf4lReR69XtQV_g==
age: 518071
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/286573218.webp?k=05df3eea56c59038cf7fa2ab228ec44c47c66ac49f708bc924c2b24738ea1e61&o=&s=1
54.230.111.69200 OK 65 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/286573218.webp?k=05df3eea56c59038cf7fa2ab228ec44c47c66ac49f708bc924c2b24738ea1e61&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 651317e3637bdb07fead8acac91ff1df
677318c0d98efb6b0fed37c7f2594cedd7458f06
89f50060edeff15d0df29057194bcd3e035944bb5f8b14f64471174ff57a3389
GET /xdata/images/hotel/square600/286573218.webp?k=05df3eea56c59038cf7fa2ab228ec44c47c66ac49f708bc924c2b24738ea1e61&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 65350
server: nginx
date: Sat, 11 Feb 2023 03:19:01 GMT
etag: "760319dc40955fb9a0ad66ef457c7896bb89c3d9"
expires: Mon, 13 Mar 2023 03:19:01 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d-XqgVsDb1fU3oOtM7Nh2D_Ylmw8Z9-2uC80dagIeryLuSIuDz2hKg==
age: 2111962
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/106411975.webp?k=53597242e9727e6e44a618b8edbc222c39b6937ac1bbe76761e24a2d796aed62&o=&s=1
54.230.111.69200 OK 47 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/106411975.webp?k=53597242e9727e6e44a618b8edbc222c39b6937ac1bbe76761e24a2d796aed62&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 305465a9638c31999672f217d98701d6
ab6a936d965af5e3b623e803fc46b48dd45e8641
58e195cf5d834d26264ad4f6641d2f8e7ca2e761ec4b8331f5d63e359ef5bbfc
GET /xdata/images/hotel/square600/106411975.webp?k=53597242e9727e6e44a618b8edbc222c39b6937ac1bbe76761e24a2d796aed62&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 46882
server: nginx
date: Tue, 14 Feb 2023 04:41:19 GMT
etag: "4ae666499a0df3a9eabf13769483060f519583a6"
expires: Thu, 16 Mar 2023 04:41:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uzS6Xos-Ki36TG1xqmRaXxpFBRYnr7vORaklcOJAhGOeXlyRk6mWjw==
age: 1847824
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/236967822.webp?k=1465d052cf64137e1976c658cf1d63c249e8409896cd8f58cc088effbe552af6&o=&s=1
54.230.111.69200 OK 124 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/236967822.webp?k=1465d052cf64137e1976c658cf1d63c249e8409896cd8f58cc088effbe552af6&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 124 kB (124272 bytes)
Hash 2867261384ef36b3257b72b797b26bb4
21e4abf06b714b14727e593d7e7cb543cbc1ff9d
ef3d8d9bbb1970944acaa14e0729f4001989221a35d0e91802534a3a8753268a
GET /xdata/images/hotel/square600/236967822.webp?k=1465d052cf64137e1976c658cf1d63c249e8409896cd8f58cc088effbe552af6&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 124272
server: nginx
date: Thu, 16 Feb 2023 06:29:33 GMT
etag: "220db823a612c14e3f7c0b1fa0f945f7d7e60b21"
expires: Sat, 18 Mar 2023 06:29:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p-PQ5V8goJVxDKYAdRZvwtIAtfezIuoTDeg6JRmIUcBSw9r84fpyMA==
age: 1668530
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/156985326.webp?k=26e1231c1a1e2dc7fe1dd0ad8ff94bdf807e0917f7a22cc1a15f71ad644743bb&o=&s=1
54.230.111.69200 OK 93 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/156985326.webp?k=26e1231c1a1e2dc7fe1dd0ad8ff94bdf807e0917f7a22cc1a15f71ad644743bb&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c61a50dfef740fa62682940dacaad92d
da520b09281a21446f71695fed7700c2d80200c1
8d94001a72b6689fbb4f0bd7e34118fc7557043833acdb730565f5f3f5f4b622
GET /xdata/images/hotel/square600/156985326.webp?k=26e1231c1a1e2dc7fe1dd0ad8ff94bdf807e0917f7a22cc1a15f71ad644743bb&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 92834
server: nginx
date: Mon, 06 Feb 2023 08:52:00 GMT
etag: "bc979925e1fd6d9c12e3816ec0e73573772c4601"
expires: Wed, 08 Mar 2023 08:52:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aZIV8YtMgG5f9vHu915huUEE3eySLyxCdV84ajbnP3KcC8obBipSeQ==
age: 2523983
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/279333721.webp?k=8b632db276149b1ce327e8bfea4ac83e15d7ffc4f2b343a30af4bdd49197813e&o=&s=1
54.230.111.69200 OK 52 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/279333721.webp?k=8b632db276149b1ce327e8bfea4ac83e15d7ffc4f2b343a30af4bdd49197813e&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d04eb453f0e7fbbbdbba2a1951a8f290
1a6eb24b80524789134492cff32767adf785b1e9
d05234f5c8999958b2953ba76dc2180eecb1643c24419c009acd808332ba05f9
GET /xdata/images/hotel/square600/279333721.webp?k=8b632db276149b1ce327e8bfea4ac83e15d7ffc4f2b343a30af4bdd49197813e&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 51934
server: nginx
date: Wed, 22 Feb 2023 20:16:37 GMT
etag: "07901b8435421b146020f903e27fc879f0706ef3"
expires: Fri, 24 Mar 2023 20:16:37 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l2Uzb81oQh5oXwLrN1U132al7eegJAWZn9Ea45H8l4j8mHtc012Wvg==
age: 1100506
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/294401155.webp?k=4c91bd821bcf8a21dfd3cd73dfc8043179b0b35412cd7ce30e14e45092db6be9&o=&s=1
54.230.111.69200 OK 36 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/294401155.webp?k=4c91bd821bcf8a21dfd3cd73dfc8043179b0b35412cd7ce30e14e45092db6be9&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bb64ec57700ec86c850ac9d4f0f5589e
8d02a485746db6f9ec0935b2daf5577491003614
94de30bdfb15c208a49b1320082c994dfdf6b622cead146dbbb7b050578b6509
GET /xdata/images/hotel/square600/294401155.webp?k=4c91bd821bcf8a21dfd3cd73dfc8043179b0b35412cd7ce30e14e45092db6be9&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 35794
server: nginx
date: Thu, 16 Feb 2023 01:25:19 GMT
etag: "292d568749f16de87b40737029a0e20e91c79cd1"
expires: Sat, 18 Mar 2023 01:25:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BguhELX1dqN_BTwV4pBkww1q7U1kKHJzAc0Bwz7PvcTkyA4GAE_Irw==
age: 1686784
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040861.jpg?k=b3923be5ee58ae482fc655dacb085266ad442072fb5e267b4c425a591d4bd28b&o=
54.230.111.69200 OK 21 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040861.jpg?k=b3923be5ee58ae482fc655dacb085266ad442072fb5e267b4c425a591d4bd28b&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash d39ccfe2bd19314bee77123a52e0aefd
01f8cede86ab8add86197ed6f8a7e22c24412618
3f1572d10d71118c50b1f2478edf42b5bd0b2a5fb02c5f476cef309d1eb16523
GET /xdata/images/xphoto/300x240/140040861.jpg?k=b3923be5ee58ae482fc655dacb085266ad442072fb5e267b4c425a591d4bd28b&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21427
server: nginx
date: Sat, 11 Feb 2023 01:56:11 GMT
etag: "365df5c56e69d704ff5363f2c4059fba2bf677ba"
expires: Mon, 13 Mar 2023 01:56:11 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6oOEx2ezSAEgDOjZloosCQplgWD5lS2GRuc45CjMqIb4mcbU1YddMA==
age: 2116932
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040786.jpg?k=7af39f6b3d8c0b3e171d876343c3c26e5cc26a877ed41976a716da57c4dc3ef1&o=
54.230.111.69200 OK 7.8 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040786.jpg?k=7af39f6b3d8c0b3e171d876343c3c26e5cc26a877ed41976a716da57c4dc3ef1&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash c598c4dcb3727ca8f99b993060427919
b3640d1c65c21563744a2ac2d55fbe10058c3079
2066310b6a21919e4d7facfff9d2896e7c8630e504942e26f6d63db076cfe9df
GET /xdata/images/xphoto/300x240/140040786.jpg?k=7af39f6b3d8c0b3e171d876343c3c26e5cc26a877ed41976a716da57c4dc3ef1&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7820
server: nginx
date: Fri, 10 Feb 2023 07:03:36 GMT
etag: "a65ec995927d8d1b8512f68471a076a839d3caa4"
expires: Sun, 12 Mar 2023 07:03:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5_ILeqTQOnge3Uw52EhriygJKojf38zAkbTZW-8JjyqcciW-deDVSQ==
age: 2184887
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040692.jpg?k=525a82bc4ff232862f0214df25e19b94535b792955e8f10b3ce2bd151aac0af0&o=
54.230.111.69200 OK 12 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040692.jpg?k=525a82bc4ff232862f0214df25e19b94535b792955e8f10b3ce2bd151aac0af0&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash ffed4c1c9d2ee092ed991df22804e4b9
6a714c2ef5a865bf30de8a7c1d297d9e57534eca
d0f2672a80a9a2a11387d6ef3910d5c75747463b877e45971ec7426629734718
GET /xdata/images/xphoto/300x240/140040692.jpg?k=525a82bc4ff232862f0214df25e19b94535b792955e8f10b3ce2bd151aac0af0&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 11983
server: nginx
date: Mon, 06 Feb 2023 00:09:58 GMT
etag: "9fd64984d6616298fe65a05a2f2cc26bb017bd27"
expires: Wed, 08 Mar 2023 00:09:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PprW4ypWIUnyJk5zDVF33YyKwM8f-vb6ms4q-s15fsVhaVkTjqNcqQ==
age: 2555305
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140050621.jpg?k=f744dfb0b4f12cd94190d738a75eb6a0d5d58e5a971496bb789391c05a60bdba&o=
54.230.111.69200 OK 17 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140050621.jpg?k=f744dfb0b4f12cd94190d738a75eb6a0d5d58e5a971496bb789391c05a60bdba&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 0f61c800a3d9b0841e0c0760099b6bd8
e27b3b3eb5fbe350822cfa78f207c0608c47eecb
340612fdff510f6a24f8bb4e624959f6dad356aead3d5f2abcc2ccbe230d0d25
GET /xdata/images/xphoto/300x240/140050621.jpg?k=f744dfb0b4f12cd94190d738a75eb6a0d5d58e5a971496bb789391c05a60bdba&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17441
server: nginx
date: Mon, 20 Feb 2023 17:17:38 GMT
etag: "f165a860407d03885ab8701e224349ed343c320a"
expires: Wed, 22 Mar 2023 17:17:38 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7g5Z64ZEiaSwPRKMJokkrMc9TYl_ZuDlxq4zmcaSV_so4ku9iEvaig==
age: 1284045
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040791.jpg?k=bb3322bd62efa3aead56ece07d9f6338c98de541b10f919455973354ddcfdf76&o=
54.230.111.69200 OK 8.8 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040791.jpg?k=bb3322bd62efa3aead56ece07d9f6338c98de541b10f919455973354ddcfdf76&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 71501aba33491a4430453715c76dc4b2
85fc9f218b6b721bde7014133bb212e61f28b83c
9ff4140b3f0f4a9b6e8259f033efdb7f9819fbfb1069116c53ab588c13d4bf42
GET /xdata/images/xphoto/300x240/140040791.jpg?k=bb3322bd62efa3aead56ece07d9f6338c98de541b10f919455973354ddcfdf76&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8799
server: nginx
date: Sun, 19 Feb 2023 01:34:44 GMT
etag: "2115c938c4f1298f044dd97aa99356ac6cfe92bf"
expires: Tue, 21 Mar 2023 01:34:44 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MFIrkC1E07sg3aMtWIBeunssuZq3AJMszN3E_8MuazeXOHA9-whcEA==
age: 1427019
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040762.jpg?k=7a9446b459690b60fba2d74ecd856b1c34b896ba3f9e231eff82abbfc8956b15&o=
54.230.111.69200 OK 17 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040762.jpg?k=7a9446b459690b60fba2d74ecd856b1c34b896ba3f9e231eff82abbfc8956b15&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 65e38b40c58827e57fd0cff25009e4ba
8460e679a4da3541a3e7a17aecde2238da826c1d
df53b855667fd3c922bc4c5a960890b5497a7f890c9fb216adaa94fbaf40ac0c
GET /xdata/images/xphoto/300x240/140040762.jpg?k=7a9446b459690b60fba2d74ecd856b1c34b896ba3f9e231eff82abbfc8956b15&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 16779
server: nginx
date: Sat, 25 Feb 2023 11:36:10 GMT
etag: "c3d81db07cc7c2b8ba44bc0368b0620869c99185"
expires: Mon, 27 Mar 2023 11:36:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ST7UFGWs4yCeM_f_TUz09e_jZexWUzTsMCECerGPPG6A8_Lu769dag==
age: 872533
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040491.jpg?k=ad6e6050b93fe65224a29659793533d6562b424ee35882cb392c115d58ea1354&o=
54.230.111.69200 OK 7.0 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040491.jpg?k=ad6e6050b93fe65224a29659793533d6562b424ee35882cb392c115d58ea1354&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash da527d4ac8f4cb107e6a40c480d70d14
97fc6a9c91bb910fcf92b0e5dc4ec079385a0cc9
d4a7526e92a83ee550c888d6a3677b3c694393b979b442cd4c1f4a9d4def9759
GET /xdata/images/xphoto/300x240/140040491.jpg?k=ad6e6050b93fe65224a29659793533d6562b424ee35882cb392c115d58ea1354&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6982
server: nginx
date: Thu, 23 Feb 2023 04:26:06 GMT
etag: "5cd774cc2ea8e1f1cdd6f0eb37ee8f573dc539ab"
expires: Sat, 25 Mar 2023 04:26:06 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QgD_IKHL1XYqT13EfXyzzqsEXDiIKaY8xsMTYhooClNbL6ZHY2aDqg==
age: 1071137
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040870.jpg?k=b3e16242c2f01e3493f03bf8b863b6561f8c52b43fa48569d7446d94874bd080&o=
54.230.111.69200 OK 12 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040870.jpg?k=b3e16242c2f01e3493f03bf8b863b6561f8c52b43fa48569d7446d94874bd080&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 53edea1fadbd43623cbaf3da9da24419
a034eab2a360a9b2a94b4bbb2ec999bd27524f17
a9593ed4bdec054997e16c6ede0ceb76dc652041fe6378f8320c571ac460c96b
GET /xdata/images/xphoto/300x240/140040870.jpg?k=b3e16242c2f01e3493f03bf8b863b6561f8c52b43fa48569d7446d94874bd080&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 11607
server: nginx
date: Sat, 11 Feb 2023 08:18:30 GMT
etag: "e89a6706d2fc8d8cc86f90302dd2a6f8adc559bb"
expires: Mon, 13 Mar 2023 08:18:30 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZHZ_oq8CAtwgRDGEV4yFs4fJi2mqpZaW4MMIhM5gnPcPJcvCcmt82g==
age: 2093993
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040599.jpg?k=574957ec36a2177a4b46f64993121848e62e61ced3932d1fdb6504f95652b439&o=
54.230.111.69200 OK 13 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040599.jpg?k=574957ec36a2177a4b46f64993121848e62e61ced3932d1fdb6504f95652b439&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash d3809e03fb1ae8fcef94ef19dca6228d
b97f714288003f6b3834ea9bc2a961ced5b89606
a000cfd08bff2b7ba4397d160bc02de6d5283e18bb06c8b3b018f41460108000
GET /xdata/images/xphoto/300x240/140040599.jpg?k=574957ec36a2177a4b46f64993121848e62e61ced3932d1fdb6504f95652b439&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12804
server: nginx
date: Sat, 18 Feb 2023 02:24:31 GMT
etag: "b72f4d11965f003cd82a31b283cb7cae89b72927"
expires: Mon, 20 Mar 2023 02:24:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: djjh961mESTe2P4HDxeLuLW5jHObCUxd3dr_Dj_PUKYuekUN0GC1ZQ==
age: 1510432
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140050621.jpg?k=f744dfb0b4f12cd94190d738a75eb6a0d5d58e5a971496bb789391c05a60bdba&o=
54.230.111.69200 OK 17 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140050621.jpg?k=f744dfb0b4f12cd94190d738a75eb6a0d5d58e5a971496bb789391c05a60bdba&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 0f61c800a3d9b0841e0c0760099b6bd8
e27b3b3eb5fbe350822cfa78f207c0608c47eecb
340612fdff510f6a24f8bb4e624959f6dad356aead3d5f2abcc2ccbe230d0d25
GET /xdata/images/xphoto/300x240/140050621.jpg?k=f744dfb0b4f12cd94190d738a75eb6a0d5d58e5a971496bb789391c05a60bdba&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17441
server: nginx
date: Mon, 20 Feb 2023 17:17:38 GMT
etag: "f165a860407d03885ab8701e224349ed343c320a"
expires: Wed, 22 Mar 2023 17:17:38 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hTIIm28pDN8GNnoB5irRZgTds7rsio_PPz0XuR8zM9olzYkK7J2Mhg==
age: 1284045
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040791.jpg?k=bb3322bd62efa3aead56ece07d9f6338c98de541b10f919455973354ddcfdf76&o=
54.230.111.69200 OK 8.8 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040791.jpg?k=bb3322bd62efa3aead56ece07d9f6338c98de541b10f919455973354ddcfdf76&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 71501aba33491a4430453715c76dc4b2
85fc9f218b6b721bde7014133bb212e61f28b83c
9ff4140b3f0f4a9b6e8259f033efdb7f9819fbfb1069116c53ab588c13d4bf42
GET /xdata/images/xphoto/300x240/140040791.jpg?k=bb3322bd62efa3aead56ece07d9f6338c98de541b10f919455973354ddcfdf76&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 8799
server: nginx
date: Sun, 19 Feb 2023 01:34:44 GMT
etag: "2115c938c4f1298f044dd97aa99356ac6cfe92bf"
expires: Tue, 21 Mar 2023 01:34:44 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zDD7teEK8EYrPEOmWep7aq2SZX9UVRtgPOyz6y5_8DV5sjgDn42dhg==
age: 1427019
X-Firefox-Spdy: h2
account.booking.com/oauth2/authorize/v2?client_id=vO1Kblk7xX9tUn2cpZLS&redirect_uri=https%3A%2F%2Fsecure.booking.com%2Flogin.html%3Fop%3Doauth_return&response_type=anon_session&prompt=none&iframe=1&dt=1678197502792&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g&bkng_referrer=https%3A%2F%2Fwww.booking.com%2Findex.html&bkng_action=index
54.230.111.51302 Found 17 kB URL HTTP/2 account.booking.com/oauth2/authorize/v2?client_id=vO1Kblk7xX9tUn2cpZLS&redirect_uri=https%3A%2F%2Fsecure.booking.com%2Flogin.html%3Fop%3Doauth_return&response_type=anon_session&prompt=none&iframe=1&dt=1678197502792&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g&bkng_referrer=https%3A%2F%2Fwww.booking.com%2Findex.html&bkng_action=index
IP 54.230.111.51:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 65e38b40c58827e57fd0cff25009e4ba
8460e679a4da3541a3e7a17aecde2238da826c1d
df53b855667fd3c922bc4c5a960890b5497a7f890c9fb216adaa94fbaf40ac0c
GET /oauth2/authorize/v2?client_id=vO1Kblk7xX9tUn2cpZLS&redirect_uri=https%3A%2F%2Fsecure.booking.com%2Flogin.html%3Fop%3Doauth_return&response_type=anon_session&prompt=none&iframe=1&dt=1678197502792&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g&bkng_referrer=https%3A%2F%2Fwww.booking.com%2Findex.html&bkng_action=index HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxAT%2BWxVDNwrj89w7HGE%2BZcJ8YgePCfARyyCCG1fDYdffO8zC6ppkR0H3BoWJR5qEKOvIgQsaGkLKtcSGQKqQpstEjgvPYlg6nn7mepURni%2BjZSCKscqA1P3iTYtMD0WWcU%3D; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjY1ZDQ2OTUwLWJiMGMtNDJmNy1iNTliLWNlYmVlYTY4YTZiNCJ9fQ; bkng_sso_auth=CAEQARpWiuLdtQ9I8ZmmlpqBdOENJMWvBLZ39K9k3YHA4wfz5HbIwDURKgMXHWcFBJDLBbC/vcUfYoSE9ycFThhsbi9pV7DRfnZChOVbPW47x2Wf4ujwa5XZlNAiEBrkbNaIP9OtKJmBSQl9pOo=; BJS=-
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 302 Found
location: https://secure.booking.com/login.html?aid=304142&op=oauth_return&lang=en-us&code=ENIbMY12FABKoJ1bIL2eXlLee0t8Aj96utGUcVPzcEkBbL2ffl3xBjzjEaBwiS3j8KmECU5Qd1CY2PhMUskvEid2RDdPLGXhETJAoYwYyZI3LrbvLodAViN2peysaI1BHwpDMUYwAIRlYUudEbBgiWRQ1xkic5888e2Auq4LhByXXHJPjSdGNxGkMcXEgMN&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g
server: envoy
date: Tue, 07 Mar 2023 13:58:23 GMT
set-cookie: bkng_expired_hint=; domain=.booking.com; path=/; expires=Mon, 06-Mar-2023 13:58:23 GMT; secure; HttpOnly
bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6IlBpcThxcWIyS3NqSVpmcmFuUThOR1ZMaStYYzVFNjZQUGZuV2xYa3ppdmMiLCJhIjoxfV19; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; secure; HttpOnly
bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W3sicmVmcmVzaF90b2tlbiI6IkNBRVNkMUoxdVhWYmpsNWxQa1pabmpVUjExQ0FWU3ptWWlPeVBkTEVuZWVZOTJFT2YxS1REU2ZoeW42SFpJd0RTNzRJVmdacEJvUndjX2tUUkdLVjRpc0owUFYxMlQyWUlqYTNMeW1pRmFOS21qODhVRXRWa3dlNzJTVXpFUkVRazhjWjVHTEpmS2ZkMFVMcldBa2RDMmd1UmNBTjhiTTFva2xsIiwic2Vzc2lvbl9yZWZlcmVuY2UiOiJiMDk3NDk1Mi0yNDAwLTQwZmYtOTNlMi01MTZlODdjYzY5NGQifV0sImRhdGFfc3ViamVjdF9pZCI6IjY1ZDQ2OTUwLWJiMGMtNDJmNy1iNTliLWNlYmVlYTY4YTZiNCJ9fQ; domain=account.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; secure; HttpOnly
bkng_sso_auth=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=; Domain=.booking.com; Path=/; Expires=Tue, 21 Mar 2023 13:58:23 GMT; HttpOnly; Secure
bkng_sso_auth_1678197503=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=; Domain=.booking.com; Path=/; Expires=Tue, 21 Mar 2023 13:58:23 GMT; HttpOnly; Secure
x-booking-edge-auth-changed: CAEQpOC_mAQaOow_Wo0eUjIbPqMNOJDfZ26PU4fL3mKn355dMmdfYqdSC9-EN2-vv2ELgmMJDb5RQ3kVABBS6xpBoYYiEMs3LpeyW1FtMN2gGeoKAUU
content-security-policy: report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=6702623f09cc0ec0&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UM2tEFs8WDzZmosDxjsVz6dkq2PhsoSZTOe0GPgs65_ifFUdrr0_98e2xQvQg19ADwjLNrWSYYn50FuqOHGsOpAvJjLRMgyVpx; frame-ancestors https://*.booking.com 'self';
content-security-policy-report-only: default-src *.bstatic.com bstatic.com 'self'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-we9Dv0PYaqpyKPF' 'report-sample'; base-uri 'none'; object-src 'none'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=6702623f09cc0ec0&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UM2tEFs8WDzZmosDxjsVz6dkq2PhsoSZTOe0GPgs65_ifFUdrr0_98e2xQvQg19ADwjLNrWSYYn50FuqOHGsOpAvJjLRMgyVpx;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Iraud90guM6k6sSGtJRFUQMrS2l2J0elqWS1bAhuIDxsdmunXmPxoA==
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040491.jpg?k=ad6e6050b93fe65224a29659793533d6562b424ee35882cb392c115d58ea1354&o=
54.230.111.69200 OK 7.0 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040491.jpg?k=ad6e6050b93fe65224a29659793533d6562b424ee35882cb392c115d58ea1354&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash da527d4ac8f4cb107e6a40c480d70d14
97fc6a9c91bb910fcf92b0e5dc4ec079385a0cc9
d4a7526e92a83ee550c888d6a3677b3c694393b979b442cd4c1f4a9d4def9759
GET /xdata/images/xphoto/300x240/140040491.jpg?k=ad6e6050b93fe65224a29659793533d6562b424ee35882cb392c115d58ea1354&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6982
server: nginx
date: Thu, 23 Feb 2023 04:26:06 GMT
etag: "5cd774cc2ea8e1f1cdd6f0eb37ee8f573dc539ab"
expires: Sat, 25 Mar 2023 04:26:06 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bn9LBqOIVke7zHriwPP2AopO-_f8aZC8Hvl7kXp1aTnwKisjziJsYw==
age: 1071137
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040870.jpg?k=b3e16242c2f01e3493f03bf8b863b6561f8c52b43fa48569d7446d94874bd080&o=
54.230.111.69200 OK 12 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040870.jpg?k=b3e16242c2f01e3493f03bf8b863b6561f8c52b43fa48569d7446d94874bd080&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 53edea1fadbd43623cbaf3da9da24419
a034eab2a360a9b2a94b4bbb2ec999bd27524f17
a9593ed4bdec054997e16c6ede0ceb76dc652041fe6378f8320c571ac460c96b
GET /xdata/images/xphoto/300x240/140040870.jpg?k=b3e16242c2f01e3493f03bf8b863b6561f8c52b43fa48569d7446d94874bd080&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 11607
server: nginx
date: Sat, 11 Feb 2023 08:18:30 GMT
etag: "e89a6706d2fc8d8cc86f90302dd2a6f8adc559bb"
expires: Mon, 13 Mar 2023 08:18:30 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xLAT9YbIYWY-fSVMrwOYd_OAXahfaV4FyVhkPrsEII7U5jasthgZzw==
age: 2093993
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040599.jpg?k=574957ec36a2177a4b46f64993121848e62e61ced3932d1fdb6504f95652b439&o=
54.230.111.69200 OK 13 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040599.jpg?k=574957ec36a2177a4b46f64993121848e62e61ced3932d1fdb6504f95652b439&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash d3809e03fb1ae8fcef94ef19dca6228d
b97f714288003f6b3834ea9bc2a961ced5b89606
a000cfd08bff2b7ba4397d160bc02de6d5283e18bb06c8b3b018f41460108000
GET /xdata/images/xphoto/300x240/140040599.jpg?k=574957ec36a2177a4b46f64993121848e62e61ced3932d1fdb6504f95652b439&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12804
server: nginx
date: Sat, 18 Feb 2023 02:24:31 GMT
etag: "b72f4d11965f003cd82a31b283cb7cae89b72927"
expires: Mon, 20 Mar 2023 02:24:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lm3xV__gUz1rm-eAQXCFUWpyCM5AKPGzZNR2LOh3t4HzWI6oRjkV0w==
age: 1510432
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140050289.jpg?k=38a9f0bcadf1da09016399bec85f5d5b1ec53a8c24ae929da523e09c47db429b&o=
54.230.111.69200 OK 18 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140050289.jpg?k=38a9f0bcadf1da09016399bec85f5d5b1ec53a8c24ae929da523e09c47db429b&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash c11c7f9c8c482a844fa9f35a23ef554c
e4d700adcb02b63e9c6111dd857512eee1cbefe2
99aae4a81e7e564eecc8b4ed4db1d692542e37ee7b486bca7eef047ca0849056
GET /xdata/images/xphoto/300x240/140050289.jpg?k=38a9f0bcadf1da09016399bec85f5d5b1ec53a8c24ae929da523e09c47db429b&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17735
server: nginx
date: Sun, 19 Feb 2023 07:49:38 GMT
etag: "31073c56a3e33769d2045b001ffdc46ab2c4ddcd"
expires: Tue, 21 Mar 2023 07:49:38 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZmuGBKQvuFZyF8qzbLuCl1AqsDp1gjmIfVp7wL_04JlQeKiWJDwIvw==
age: 1404525
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040807.jpg?k=9cab54a3a43d3b941837c79958b284376005784e9ded8dadcbb83e39e25fcb9e&o=
54.230.111.69200 OK 17 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040807.jpg?k=9cab54a3a43d3b941837c79958b284376005784e9ded8dadcbb83e39e25fcb9e&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 6b69600400c2e34e52ac22b8280a471e
04b0fa66f7203b41bc5bcb9773afdb035cf68793
1e1547673775158c1b697974f7161f71b87530d3f1e565f18bd975579e67ef57
GET /xdata/images/xphoto/300x240/140040807.jpg?k=9cab54a3a43d3b941837c79958b284376005784e9ded8dadcbb83e39e25fcb9e&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 17072
server: nginx
date: Sat, 18 Feb 2023 02:47:46 GMT
etag: "b49ff458d940538dbd317c3bb27a4a6f2e81400c"
expires: Mon, 20 Mar 2023 02:47:46 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TcvL_0pGpzLBcPW2Y631vT1sbOglZkRBozpt48JKzYKJU8tBGYz3Hg==
age: 1509037
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040549.jpg?k=47295571a3c7ad6e86a62047a4aceb3c8c0a19f5b4b86d6eafab42d61abad33e&o=
54.230.111.69200 OK 14 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040549.jpg?k=47295571a3c7ad6e86a62047a4aceb3c8c0a19f5b4b86d6eafab42d61abad33e&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash f53be5a5dc8a5e0852c37ecef3f57e80
95e46d745e83d3e5767d50c82ddda8b871239225
4f4fd90acbda0f964439cf256b5ad16a879a517226656911b91ed51f96e38171
GET /xdata/images/xphoto/300x240/140040549.jpg?k=47295571a3c7ad6e86a62047a4aceb3c8c0a19f5b4b86d6eafab42d61abad33e&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 13659
server: nginx
date: Wed, 15 Feb 2023 15:16:00 GMT
etag: "2fc452260631d4bc2164bec4ef401d8dd9227331"
expires: Fri, 17 Mar 2023 15:16:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: runbHsUwRW7tzpg9twSfz1fTtjYFzhCShyNz34i_hGPkvZfdcIJEIw==
age: 1723343
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040444.jpg?k=78183a30bc77a7f4eb2550c457f0645c654b2c70f80b40258ffa926712392726&o=
54.230.111.69200 OK 18 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040444.jpg?k=78183a30bc77a7f4eb2550c457f0645c654b2c70f80b40258ffa926712392726&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 6f57315028bfce58a9111a97386b32f8
f865cb601c242c7945fceb5cdbd39af8e22ee68d
b51cb67e6a957bf93a45b47510f5b355d3779812dc4d46a3f2653baa3bbd8396
GET /xdata/images/xphoto/300x240/140040444.jpg?k=78183a30bc77a7f4eb2550c457f0645c654b2c70f80b40258ffa926712392726&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18535
server: nginx
date: Mon, 20 Feb 2023 07:32:48 GMT
etag: "017694057106982e522a1019c12623e1104d8312"
expires: Wed, 22 Mar 2023 07:32:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FIKQHDI1SpL9zffp_hoGym-ppIihU2wwhugVJi1kJ5PVFVC4NJkgZA==
age: 1319135
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140052116.jpg?k=e94346578a825ccf04f419c702577198d3d6c797aec34b2b0f58678af9e90dd0&o=
54.230.111.69200 OK 12 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140052116.jpg?k=e94346578a825ccf04f419c702577198d3d6c797aec34b2b0f58678af9e90dd0&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 4dde8ac450ded1d8d519f89b54df536e
c0a91335d7ae7b2193a125f7dd713a3fa10a3c03
7f9e23934ff3e05b17c81977e3429b17908bf98f5b7fa350ba102a33565fe523
GET /xdata/images/xphoto/300x240/140052116.jpg?k=e94346578a825ccf04f419c702577198d3d6c797aec34b2b0f58678af9e90dd0&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 11892
server: nginx
date: Thu, 23 Feb 2023 04:23:39 GMT
etag: "52513e11d6eed8b9bd81e6b896619bab3f5995bb"
expires: Sat, 25 Mar 2023 04:23:39 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QFn2m-SK3Xa0ub0PrFVt29K1it7jCTbtvinfqxalPopjK1zR0raz6g==
age: 1071284
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/xphoto/300x240/140040635.jpg?k=329ec95c88a102f72b8bbb381ce82f86f29a3fc4f4652b0c2ec768aee8f5ae4c&o=
54.230.111.69200 OK 11 kB URL HTTP/2 cf.bstatic.com/xdata/images/xphoto/300x240/140040635.jpg?k=329ec95c88a102f72b8bbb381ce82f86f29a3fc4f4652b0c2ec768aee8f5ae4c&o=
IP 54.230.111.69:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3\012- data
Hash 803716a18dfcbff4ec89fc3c654cb930
a67609f33b295ca8cd8c1c886b50f272d98628cc
c497e60866f9e42e0307d57527ac5220da67166f21a77c45cd6f99f8c3fdef50
GET /xdata/images/xphoto/300x240/140040635.jpg?k=329ec95c88a102f72b8bbb381ce82f86f29a3fc4f4652b0c2ec768aee8f5ae4c&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10747
server: nginx
date: Fri, 24 Feb 2023 02:25:03 GMT
etag: "6f0ba2cfca35f4ebe21b86ed10167d259396ade4"
expires: Sun, 26 Mar 2023 02:25:03 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XFz2KIoAgZcDt20Nw5u38k9ZfVllGoBObe2WtsAukkNjaDZ7W6ZlQA==
age: 991999
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/87428762.webp?k=9a065fcd92168145d8c8358701662c76793535597b678efc8f6921c8e3c188e6&o=&s=1
54.230.111.69200 OK 48 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/87428762.webp?k=9a065fcd92168145d8c8358701662c76793535597b678efc8f6921c8e3c188e6&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ca4a151bce3aae248256f42fb3571039
7b604ef0875745900683208d6d5d3ec446c80c52
17961e2dc69e730f0aca9f0e96057a87990141d415dceee221a37e29aab7bc8e
GET /xdata/images/hotel/square600/87428762.webp?k=9a065fcd92168145d8c8358701662c76793535597b678efc8f6921c8e3c188e6&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 48402
server: nginx
date: Fri, 24 Feb 2023 01:11:45 GMT
etag: "b6fe079cde5c4cb27b55fcc5cb4d645395dd04ca"
expires: Sun, 26 Mar 2023 01:11:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jlhq3LIlcds2858QBBp6d9o_Yp4H5D-1T_N5PC7noSu1RDB65fOsmg==
age: 996398
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/421853145.webp?k=140bfc6c54ee753d4a748ee7b5a86c00c988e6fc9bb340c87172ead66a3ea9d5&o=&s=1
54.230.111.69200 OK 34 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/421853145.webp?k=140bfc6c54ee753d4a748ee7b5a86c00c988e6fc9bb340c87172ead66a3ea9d5&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1c7172c64d1ec8fffe74e58762c35c83
7f1c0ffb837d9ee5d50b6dbf89d79327b772086a
8213abec1260a3ab242c9027077b7f9a2750f89cda6b9cdad3ef09d970b49811
GET /xdata/images/hotel/square600/421853145.webp?k=140bfc6c54ee753d4a748ee7b5a86c00c988e6fc9bb340c87172ead66a3ea9d5&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 33880
server: nginx
date: Fri, 24 Feb 2023 01:11:38 GMT
etag: "de130fd95625d64229619fb56ad847dcea8d5c5d"
expires: Sun, 26 Mar 2023 01:11:38 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YFhDD7Zd8Gs7lBMhKcRLHUmrug5_-MaAwDJ0vbTPS-HmYG7atucTkw==
age: 996405
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/352170812.webp?k=75ffc5f9eb3f3cc394b901714c1544757b05849dbbdf30e4fc8c6df53931c131&o=&s=1
54.230.111.69200 OK 40 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/352170812.webp?k=75ffc5f9eb3f3cc394b901714c1544757b05849dbbdf30e4fc8c6df53931c131&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ef150004f7e14877ef0adc2a55c848c8
f9fc55a1aa0bdb8a5cef5f7a37d7bbc5c44f612e
ff1f117923916d0f5479bf7b6f95f21303e5aa4fbef22fb7eb57834b3ed3af23
GET /xdata/images/hotel/square600/352170812.webp?k=75ffc5f9eb3f3cc394b901714c1544757b05849dbbdf30e4fc8c6df53931c131&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 39572
server: nginx
date: Sat, 18 Feb 2023 01:18:01 GMT
etag: "40fda3fa7c8325dc96d53ff0162577521d10ded5"
expires: Mon, 20 Mar 2023 01:18:01 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rd4paAt5moZwkSHBewZvZZqkrK-PFTly2SAqsLmV9Tt5kDVLYl94Fw==
age: 1514422
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/13125860.webp?k=e148feeb802ac3d28d1391dad9e4cf1e12d9231f897d0b53ca067bde8a9d3355&o=&s=1
54.230.111.69200 OK 60 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/13125860.webp?k=e148feeb802ac3d28d1391dad9e4cf1e12d9231f897d0b53ca067bde8a9d3355&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0329fb19001ce1f08a5c54a4f0e14ef1
3746e16117b5165f4eb2075a717a5c3821705c92
e71dc53498cb3d2e1271eeefdcc4e24f959b73e24b24809cfc83dcdd0a12de08
GET /xdata/images/hotel/square600/13125860.webp?k=e148feeb802ac3d28d1391dad9e4cf1e12d9231f897d0b53ca067bde8a9d3355&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 60384
server: nginx
date: Tue, 07 Feb 2023 02:10:25 GMT
etag: "31af6fdad97573b3f3d4f0577ca58eaae1a9c526"
expires: Thu, 09 Mar 2023 02:10:25 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D1fBt5Di1lgyv0kNUZMtYMlJGyMa44bHskt-_AoIz07MgqV4NZP6qw==
age: 2461678
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/29466558.webp?k=fa323cf3e030ae6b41c8b475fe2853ae4e9e38148501d68dd5b915905dcea664&o=&s=1
54.230.111.69200 OK 57 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/29466558.webp?k=fa323cf3e030ae6b41c8b475fe2853ae4e9e38148501d68dd5b915905dcea664&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a326cddd2766fcf01137137afa27b7ed
bb6c0c7df182252e90d865dc15f7d8a7d603c273
d01e06c160e130aff36646885bee3f271eddb260094d872bc533cf49b010d84c
GET /xdata/images/hotel/square600/29466558.webp?k=fa323cf3e030ae6b41c8b475fe2853ae4e9e38148501d68dd5b915905dcea664&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 56656
server: nginx
date: Mon, 20 Feb 2023 01:21:48 GMT
etag: "7f2a2840a2723b56cbcfc8f36d575e4afa69b26b"
expires: Wed, 22 Mar 2023 01:21:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pUgbK1Ep-SdastDmOTtLrd_THMmYa2OHERxF5p1gAyMB_BEyQI7vkQ==
age: 1341395
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/117127036.webp?k=cfa1260e7772a9b73e2d7da559672a01a478b111b857e2893a5d2b7a4f7212bc&o=&s=1
54.230.111.69200 OK 36 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/117127036.webp?k=cfa1260e7772a9b73e2d7da559672a01a478b111b857e2893a5d2b7a4f7212bc&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2a72efeb83504dbe9e671483c96d8c73
5990e32682846533ccff6862b6d6c9796867d83f
1a9e00f369634aaff57ee70e8eef9eee9831430a0bcdd8c6b8ca344ba59dc8b5
GET /xdata/images/hotel/square600/117127036.webp?k=cfa1260e7772a9b73e2d7da559672a01a478b111b857e2893a5d2b7a4f7212bc&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 35968
server: nginx
date: Fri, 17 Feb 2023 07:29:24 GMT
etag: "b7336c869ad105ba4fffbc3a853c6554cfe73db3"
expires: Sun, 19 Mar 2023 07:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gA3OlBEgybFN6jnfVGEUyFs-5vzuRj54HnD7sgWdP8IYZ1wuQkF23w==
age: 1578539
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/421852968.webp?k=f3889222c82f4a8e3783dddb5f1cc04d6140eeb2d5cb8297817a15aacfe4d191&o=&s=1
54.230.111.69200 OK 48 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/421852968.webp?k=f3889222c82f4a8e3783dddb5f1cc04d6140eeb2d5cb8297817a15aacfe4d191&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6ec5534eacb5eca078aa4adcf9b3daa0
861a1c6d83dff1f56153f68b267f9eeb9aa4cb2c
81c2a51cc8e6f40ccb75c9ac5a47dd61e127f3c6c53d4428a9d92fda9282427e
GET /xdata/images/hotel/square600/421852968.webp?k=f3889222c82f4a8e3783dddb5f1cc04d6140eeb2d5cb8297817a15aacfe4d191&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 47698
server: nginx
date: Sat, 18 Feb 2023 07:43:27 GMT
etag: "3366d1b1a1352b1b3d48dca4e34a841cd30cf562"
expires: Tue, 04 Apr 2023 07:43:27 GMT
cache-control: max-age=3888000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BvpqdabecdYFB3mSXISynFDATbMiIMRvZTQTZ-TZPWPBBro-E9pG_Q==
age: 1491296
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/29466558.webp?k=fa323cf3e030ae6b41c8b475fe2853ae4e9e38148501d68dd5b915905dcea664&o=&s=1
54.230.111.69200 OK 62 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/29466558.webp?k=fa323cf3e030ae6b41c8b475fe2853ae4e9e38148501d68dd5b915905dcea664&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5cfe389f62e843a8be166d7e27e2d6e8
a81200a8f32050bc3f9ffaee4c0d2d3947024663
dc226b9a5bd8b6a5c720ca33211b9fb0799617397fb2cd283d2af0bed0542a46
GET /xdata/images/hotel/square600/29466558.webp?k=fa323cf3e030ae6b41c8b475fe2853ae4e9e38148501d68dd5b915905dcea664&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 56656
server: nginx
date: Mon, 20 Feb 2023 01:21:48 GMT
etag: "7f2a2840a2723b56cbcfc8f36d575e4afa69b26b"
expires: Wed, 22 Mar 2023 01:21:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IM5lsmrPe9rJu5pKbUTr5pNUx8uoDP_ArUT7KKSdDnTnFh5b9qgM2Q==
age: 1341395
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/270323047.webp?k=ace18ab936560dac1e01f7d0f4b44206d354a8683e124c62f3f10c25cede9bd2&o=&s=1
54.230.111.69200 OK 22 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/270323047.webp?k=ace18ab936560dac1e01f7d0f4b44206d354a8683e124c62f3f10c25cede9bd2&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b099da28fae15a46bbfbd89b799f121c
01b26955d4c685e293e9e97d4a3fe51a19ee3c13
9a61b0c464b3593f2ed9c929ec7bc23697a125de4be4dd282aa9578e2d2162c0
GET /xdata/images/hotel/square600/270323047.webp?k=ace18ab936560dac1e01f7d0f4b44206d354a8683e124c62f3f10c25cede9bd2&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 22282
server: nginx
date: Wed, 15 Feb 2023 21:31:57 GMT
etag: "45abaab0c20d68498e38cce380c99687d49bda7e"
expires: Fri, 17 Mar 2023 21:31:57 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HO14WMSO74WiVYDw3eNk1pmu2AdCBNlxaKRMJkLhQFrFZ6PEev46LQ==
age: 1700786
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/square600/306077100.webp?k=19d26aec90277c04b1d2b3ccd1ea329ae345347f4c22c8d114e3d1337889e71e&o=&s=1
54.230.111.69200 OK 25 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/square600/306077100.webp?k=19d26aec90277c04b1d2b3ccd1ea329ae345347f4c22c8d114e3d1337889e71e&o=&s=1
IP 54.230.111.69:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3eb61e0e3dc655e024698eaf090e3d56
c1d887ee078f00cf85c7121f099cfeacc36a5e8b
41dd923e9a5d694c42e0d33b7a5a433c559dad0a702fd22f5fd884e81cf4cd61
GET /xdata/images/hotel/square600/306077100.webp?k=19d26aec90277c04b1d2b3ccd1ea329ae345347f4c22c8d114e3d1337889e71e&o=&s=1 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 25182
server: nginx
date: Thu, 16 Feb 2023 10:32:30 GMT
etag: "46b18887d92757e39975a3d1adfe49940cb97cdc"
expires: Sun, 02 Apr 2023 10:32:30 GMT
cache-control: max-age=3888000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rw5oqjqQ4j9JlrTQp2cEa9gBVTN-B6lOdMhW_wo4jpqANyRGNEt0kQ==
age: 1653953
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/apple-touch-icon/c9b35bf29a75cac2f430f80a5d4bc7fd961d21a7.png
54.230.111.69200 OK 2.9 kB URL HTTP/2 cf.bstatic.com/static/img/apple-touch-icon/c9b35bf29a75cac2f430f80a5d4bc7fd961d21a7.png
IP 54.230.111.69:0
File type PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash eeda6c96402e2a9ec176f43f0ac79e09
9cd713387ba5b2a468ffae40d40ae3718d2d1c49
08a917ae9e017c4b633b3d5920bb8e073968fa14b9bb7e78192fd2761465d0a4
GET /static/img/apple-touch-icon/c9b35bf29a75cac2f430f80a5d4bc7fd961d21a7.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2915
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:50 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 24 Feb 2023 01:41:19 GMT
expires: Sun, 26 Mar 2023 01:41:19 GMT
cache-control: max-age=2592000
etag: "5cadd1ce-b63"
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tiba86dvr3hIbH4KJGjnzUIh5cESfc7SkqeSsBmwaoPpkCGO7-ZdHQ==
age: 994624
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/b25logo/favicon/ebc77706da3aae4aee7b05dadf182390f0d26d11.ico
54.230.111.69200 OK 1.6 kB URL HTTP/2 cf.bstatic.com/static/img/b25logo/favicon/ebc77706da3aae4aee7b05dadf182390f0d26d11.ico
IP 54.230.111.69:0
File type MS Windows icon resource - 3 icons, 32x32, 16 colors, 4 bits/pixel, 24x24, 16 colors, 4 bits/pixel\012- data
Hash faedfe66cf96784098c9b7b1f405ef12
645dce7842fa7483bb676def6df255317f203f22
a87ec2239235e2521bebe6f92dc4a65ca035fd419ebd09b68d04b989afd3141a
GET /static/img/b25logo/favicon/ebc77706da3aae4aee7b05dadf182390f0d26d11.ico HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 1582
server: nginx
date: Fri, 10 Feb 2023 14:13:35 GMT
last-modified: Wed, 10 Apr 2019 11:21:50 GMT
etag: "5cadd1ce-62e"
expires: Sun, 12 Mar 2023 14:13:35 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lf8veOJfLRKHGpLkGTsLnTjSVBomMoAB2igbaW_BeDxOdgDlHNf-zw==
age: 2159088
X-Firefox-Spdy: h2
www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
54.230.111.88200 OK 3.1 kB URL HTTP/2 www.booking.com/dml/graphql?aid=7928989&label=101&lang=en-us
IP 54.230.111.88:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (12831), with no line terminators
Hash 126718bda819956d4e30de164fd82202
f303d849a8ad5ea1ba59bb3fe2895e7e14b0e37c
8bd2184517df552f8f048da4f0233a3720bee551ed91b75d6cf0639c0814b795
POST /dml/graphql?aid=7928989&label=101&lang=en-us HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=7928989&label=101
content-type: application/json
x-booking-context-action-name: index
x-booking-context-aid: 7928989
x-booking-csrf-token: eyJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJjb250ZXh0LWVucmljaG1lbnQtYXBpIiwic3ViIjoiY3NyZi10b2tlbiIsImlhdCI6MTY3ODE5NzQ5OSwiZXhwIjoxNjc4MjgzODk5fQ.CV5S2YSCemdOg2MPBnOx6OxTigKFddHsyfxx7qqbM6pj8Zm-ac5YXyKDu4QF--QdM4zPaNcnx2wvHedmNuqHBQ
x-booking-et-serialized-state: EVDW24MXMPTNJYsrPGsmKRsGzXXMTgqNJLQBlbhqg297wyYc-ONqeUVa4TQwySV6l
x-booking-pageview-id: 50be623d744b001a
x-booking-site-type-id: 1
x-booking-topic: capla_browser_b-index-lp-web-mfe
Origin: https://www.booking.com
Content-Length: 1719
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxAT%2BWxVDNwrj89w7HGE%2BZcJ8YgePCfARyyCCG1fDYdffO8zC6ppkR0H3BoWJR5qEKOvIgQsaGkLKtcSGQKqQpstEjgvPYlg6nn7mepURni%2BjZSCKscqA1P3iTYtMD0WWcU%3D; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6IlBpcThxcWIyS3NqSVpmcmFuUThOR1ZMaStYYzVFNjZQUGZuV2xYa3ppdmMiLCJhIjoxfV19; bkng_sso_session=e30; bkng_sso_auth=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=; BJS=-; bkng_sso_auth_1678197503=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 3081
server: nginx
date: Tue, 07 Mar 2023 13:58:23 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
set-cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; domain=booking.com; path=/; expires=Wed, 06-Mar-2024 13:58:23 GMT
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbca8KLfxLPecvSqFLb9fnbUIX7jK5xD4BG6iP7cnIr7HCrhSUrgpDXt0r9L1dt7KEYOi%2F46CUL2GRUGXC9H1CPxnkPNgITeQO6x96E523Bwnq6CjZ3%2Bi0Qp55iK9EER5HsBIT3enLESdpMOpueJFBiKl01oXjdAQKjN0%2Bt96nwYI%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gBzajle22yMnTo9dlHLTgC1ah5QBZ8s0L-27_ll8lDn_waJB0I-eGw==
X-Firefox-Spdy: h2
collector-pxikkul2rm.px-cloud.net/api/v2/collector
35.190.10.96200 OK 925 B URL HTTP/2 collector-pxikkul2rm.px-cloud.net/api/v2/collector
IP 35.190.10.96:0
File type JSON data\012- , ASCII text, with very long lines (924)
Hash b11d5d4820f77a7adc6d4fd91e495b4e
4329ebc5ba15ae766402e0900c1d8464f99e767f
8cdece0e966dbad6ea39762d0bc4795716767bb74a09c0a824c63082a3b9472b
POST /api/v2/collector HTTP/1.1
Host: collector-pxikkul2rm.px-cloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 737
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:23 GMT
content-type: application/json; charset=utf-8
content-length: 925
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.booking.com
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 898972449e864866b556f186fea9a05a
55563eb593e1a9edb0bc07bdb3eb0382220da857
217d49c14e8f81e238beab7264e4ce1a012ae86ba90da7e78f02556d3befab1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 13:58:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.booking.com/login.html?aid=304142&op=oauth_return&lang=en-us&code=ENIbMY12FABKoJ1bIL2eXlLee0t8Aj96utGUcVPzcEkBbL2ffl3xBjzjEaBwiS3j8KmECU5Qd1CY2PhMUskvEid2RDdPLGXhETJAoYwYyZI3LrbvLodAViN2peysaI1BHwpDMUYwAIRlYUudEbBgiWRQ1xkic5888e2Auq4LhByXXHJPjSdGNxGkMcXEgMN&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g
143.204.55.98302 Found 472 B URL HTTP/2 secure.booking.com/login.html?aid=304142&op=oauth_return&lang=en-us&code=ENIbMY12FABKoJ1bIL2eXlLee0t8Aj96utGUcVPzcEkBbL2ffl3xBjzjEaBwiS3j8KmECU5Qd1CY2PhMUskvEid2RDdPLGXhETJAoYwYyZI3LrbvLodAViN2peysaI1BHwpDMUYwAIRlYUudEbBgiWRQ1xkic5888e2Auq4LhByXXHJPjSdGNxGkMcXEgMN&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g
IP 143.204.55.98:0
Hash dd2ee1599347cac965e70050e95d7ac7
623cefcc937b9a43c0d06806aff7b269b0b6b77c
cdae2fc13b88648b54fe6b9dd8a28e8218e27e5d0b87d90727a54e7448df5736
GET /login.html?aid=304142&op=oauth_return&lang=en-us&code=ENIbMY12FABKoJ1bIL2eXlLee0t8Aj96utGUcVPzcEkBbL2ffl3xBjzjEaBwiS3j8KmECU5Qd1CY2PhMUskvEid2RDdPLGXhETJAoYwYyZI3LrbvLodAViN2peysaI1BHwpDMUYwAIRlYUudEbBgiWRQ1xkic5888e2Auq4LhByXXHJPjSdGNxGkMcXEgMN&state=UrYC5bWljdXaOeMUYKIp3cbf-PUNeULcrosT5Uy0ZY1YUiPH6qhycszxhCxie6-4cvM4LDcb9Upx_VxByQqkcBZJgy2Em6-RQEzcFtDthUx4-f8hNU19l0DMmRMAZrIf3877GKEq-iwSKs2awRpvEpor-5oJw1ZstU2R3QlLse4Lo40qqlYWNKColkY7RYe2drD2PU_4IBsOMXq_8_SLZz-uPU3we3gxmjeATBdXrTNCM9BrFS_YnUxdOXk6UH4lMFCbT8gK_Pno3rl_bZ2eKCqzMnwvwO2-_Eec7iWJ7Eu2RLFtKeGbraC_tMJRejp6nlJaObcQFtsM07BLwkBH8VOlbx-fK1YAOvwmPtCTfgKpBoH5TK_9xLFNXcfNV4FUF1a4QEnRMMRnCn9BruoFVsOfxAqloXe_0g HTTP/1.1
Host: secure.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzlD6yoKpoWp%2B2JUiEt35mHqCIzy%2FHtyHxAT%2BWxVDNwrj89w7HGE%2BZcJ8YgePCfARyyCCG1fDYdffO8zC6ppkR0H3BoWJR5qEKOvIgQsaGkLKtcSGQKqQpstEjgvPYlg6nn7mepURni%2BjZSCKscqA1P3iTYtMD0WWcU%3D; cors_js=1; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6IlBpcThxcWIyS3NqSVpmcmFuUThOR1ZMaStYYzVFNjZQUGZuV2xYa3ppdmMiLCJhIjoxfV19; bkng_sso_session=e30; bkng_sso_auth=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=; BJS=-; bkng_sso_auth_1678197503=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 302 Found
location: https://www.booking.com/general.en-us.html?sid=5707394d17314fd76dff9ff5e8597f83&label=101&tmpl=profile%2Flogin_callback_anon_session&aid=7928989&iframe=1
server: nginx
date: Tue, 07 Mar 2023 13:58:23 GMT
cache-control: no-cache, private, no-store, must-revalidate, max-stale=0, post-check=0, pre-check=0
nel: {"report_to":"default","max_age":604800}
report-to: {"max_age":604800,"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}]}
set-cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; domain=booking.com; path=/; expires=Wed, 06-Mar-2024 13:58:23 GMT
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBJjo%2FqIUcl9m8%2B2uZpJyFqEgv2AOX3mEQS1KZsbo9gHkx7jfHRypLSDYZWKl9koxWQus7aVwIHk9NTpf52QyqA0TglRgTQRcq7FqIpyvax%2FaPyvNDi1cKaomk9YKahPlhU%2FqZO2YGtA1L9nAlBbheOx; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=17280000
x-content-type-options: nosniff
x-recruiting: Like HTTP headers? Come write ours: https://careers.booking.com
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cOY-HnLEfHVSwfwjiF6VL1uGAmRFtkEHB20aBkjMVKq7l1xBWuoxoA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a262ed896e81c715b16a98cdb1a15bfa
6b1e4ea9844ad329ad428024f6d421327c8280d8
a849bb5452d63f980baea3d2f559ba55c2a633a9dd4396e550914a29234282a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 13:58:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.booking.com/general.en-us.html?sid=5707394d17314fd76dff9ff5e8597f83&label=101&tmpl=profile%2Flogin_callback_anon_session&aid=7928989&iframe=1
54.230.111.88200 OK 206 B URL HTTP/2 www.booking.com/general.en-us.html?sid=5707394d17314fd76dff9ff5e8597f83&label=101&tmpl=profile%2Flogin_callback_anon_session&aid=7928989&iframe=1
IP 54.230.111.88:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 773e55fa966faebf8e1debfa389f7715
f47ecd618f7b38884bb670ee9fad61f0fa4d6dc3
d28b3c6f3f56de06283724e84dd4af069be5f63baeb03b28f4e2a1965d7fbaa9
GET /general.en-us.html?sid=5707394d17314fd76dff9ff5e8597f83&label=101&tmpl=profile%2Flogin_callback_anon_session&aid=7928989&iframe=1 HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Connection: keep-alive
Cookie: _pxhd=aS45NHLhvDCPSQTeBPfqIxoe%2FwNDj57bH%2FEMYAJEcUw3UeP-tdEZhe4mLNL0xkGmqdaoApOZC3YoCiBfKm32ew%3D%3D%3Amk7W9-bwqRtqn36LgxyKun7Ur-YBIYG6qwsl4VRJjoMGf3KHx-%2Flm0mUzjEMYYL1FSnAbnP5alM9oANnlKtA70CWwm4%2Fv-Olg55qtRh0ykw%3D; px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBJjo%2FqIUcl9m8%2B2uZpJyFqEgv2AOX3mEQS1KZsbo9gHkx7jfHRypLSDYZWKl9koxWQus7aVwIHk9NTpf52QyqA0TglRgTQRcq7FqIpyvax%2FaPyvNDi1cKaomk9YKahPlhU%2FqZO2YGtA1L9nAlBbheOx; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Mar+07+2023+13%3A58%3A20+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=6bd8c9cc-3a16-4ad2-8875-f7210912a691&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D7928989%26label%3D101&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1678197501319; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6IlBpcThxcWIyS3NqSVpmcmFuUThOR1ZMaStYYzVFNjZQUGZuV2xYa3ppdmMiLCJhIjoxfV19; bkng_sso_session=e30; bkng_sso_auth=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=; BJS=-; bkng_sso_auth_1678197503=CAEQARpoiuLdtQ9I8ZmmlpqBdOENJMWvBKB39K9kxifGL1BB4Qnii6NNR8Gt/mcFDn3+D1nrqTjaALdgnk3QnnkgVtH22jCMQ4D3YQbZoG/MLwjmKfjKhnWQXYZt/PFt+yGI1lkB36lcUQgMV6UiEBZWTYUvDUl3jQulDfeZnIg=; _px3=4caa692b4ba2561acc7fc34fdad85120b62810ece134bb6ea48864c28aeb3770:GhXFZt+wriGfKk64Bl/GtqlSgVpMKUP7C5Fu3RXpBnAp5W1wjrZO5fe95PxdtMxtof49Oa4mUk0rvjZbzFDu7Q==:1000:Bk3JOoIwaT3o3Yf3+hNJctXCVcdLnQ6hWIBHMSIlgYkNFFPjMGJXPmAiLUqeoVNUfqZBLLuk21ZAXQyro9iugKFGKdpmjIYi7NeNp7jQHatY2/SQp7VuNBLmdYs5xQXnW3dy5mf9aNMhjCromAL7kYpmJjxSmaDj27NUPq+vvG5MHRVP8+Yzu+AGjaBTqPdEvsJchb1OsxkNGFZ99Dzd2Q==; pxcts=201e635f-bcf0-11ed-9b16-4d7774624754; _pxvid=1f329898-bcf0-11ed-83b1-447547464967; _pxff_ddtc=1; _pxde=1af96f9e81bc90529701e1f467764bf1d2ff340f3addbc97e34f02b2ce4e7401:eyJ0aW1lc3RhbXAiOjE2NzgxOTc1MDM1NTcsImZfa2IiOjAsImlwY19pZCI6W119
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 206
server: nginx
date: Tue, 07 Mar 2023 13:58:23 GMT
cache-control: private
vary: Accept-Encoding, User-Agent
content-encoding: br
nel: {"report_to":"default","max_age":604800}
report-to: {"max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default"}
set-cookie: px_init=0; domain=booking.com; expires=Fri, 10-Jul-2076 03:56:46 GMT; SameSite=Strict; secure; HttpOnly
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBKd%2F%2B1hfoh7rqfZZ6GvzUBLfAIgQrxWG4gGvvZNssr8urpYh9Dumnx%2F5HvyL2bmHMQ7fwvkGwmUbcDhH6vLrSnXNx9BFbDV5LAlNzHeGLAwDmdolbX6SMKVpAYZehi73AszJouZvO2ENGbVwyshKfh2jFmdUNp9c9A%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a9A-o0rTkMp6uQcsVUfld3eSXtsBcynhwf63ueT0uagGC0G4kf4YOQ==
X-Firefox-Spdy: h2
account.booking.com/collector/anon_session_init
54.230.111.51204 No Content 0 B URL HTTP/2 account.booking.com/collector/anon_session_init
IP 54.230.111.51:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /collector/anon_session_init HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.booking.com/
Origin: https://www.booking.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
server: envoy
date: Tue, 07 Mar 2023 13:58:23 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; secure; HttpOnly
bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI4NTEzMWRkNS0zMDUxLTQ0OWItOWU4MC0zNTZiMWE5ZGJhY2UiLCJzZXNzaW9ucyI6W119fQ; domain=account.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:23 GMT; secure; HttpOnly
content-security-policy: frame-ancestors https://*.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=ac11623f0945156f&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMdbC_b9IesoHYup-AC0nelpES1qqE6fifR5JViA8Go4CwOe8yYFSeDLiZ1Uua75nNAdVKxHFsDKyxjV4ZHo6_z4hhxrCj6_01NBhGCj78MTE;
content-security-policy-report-only: default-src *.bstatic.com bstatic.com 'self'; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-MMA2T04IenixSXg' 'report-sample'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=ac11623f0945156f&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMdbC_b9IesoHYup-AC0nelpES1qqE6fifR5JViA8Go4CwOe8yYFSeDLiZ1Uua75nNAdVKxHFsDKyxjV4ZHo6_z4hhxrCj6_01NBhGCj78MTE; base-uri 'none'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; object-src 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fXgvz99qbPRLwSN30VJ6qEB6zqBMkf136Iodl9uNrP7LgKcvSHSa0g==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 158405c7127a1b6738fbd4c4d68550cd
e0cd4eb6e736886e46a443ef098aa7111df29c77
dcf74892708d878f834d2ede6afe4bc959fb83b0bed7178dd54bdd3023621d18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 13:58:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/gsi/client
142.250.74.109200 OK 140 kB URL HTTP/2 accounts.google.com/gsi/client
IP 142.250.74.109:0
File type ASCII text, with very long lines (3034)
Size 140 kB (139780 bytes)
Hash bcd36ae9cd97d43031850a4f62037156
fa4eeba1ad395f2c021738607e71f6991fa472c2
0e077d1955fec178401d6dbc490eab7a3c756d8a52109c60e184846b8252c9bd
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 07 Mar 2023 13:58:23 GMT
date: Tue, 07 Mar 2023 13:58:23 GMT
cache-control: private, max-age=1800
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-UKCSbpfULm8hGWbeZHeRUw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 158405c7127a1b6738fbd4c4d68550cd
e0cd4eb6e736886e46a443ef098aa7111df29c77
dcf74892708d878f834d2ede6afe4bc959fb83b0bed7178dd54bdd3023621d18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 13:58:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
142.250.74.163200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf
IP 142.250.74.163:0
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google SansRegularGoogle;GoogleSans-RegularGoogle\012- data
Hash 097c4b560f821fb05c628abb70fab199
4650bf1244b6cba45b222aa269c96ad8ea95ab42
a9bd7cfb72481bd844fa2e3cd4019c8b2ab2a232b50cabe62f8d9483e284f672
GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owps.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27191
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Mar 2023 00:23:52 GMT
expires: Wed, 06 Mar 2024 00:23:52 GMT
cache-control: public, max-age=31536000
age: 48872
last-modified: Mon, 22 Apr 2019 23:42:54 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
142.250.74.163200 OK 27 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf
IP 142.250.74.163:0
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, Copyright 2015 Google LLC. All Rights Reserved.Google Sans MediumRegularGoogle;GoogleSans-Medium\012- data
Hash 48d399faaa696e710b9d841b934461e2
8b867014ac0ae0a2b81a55f171deede8336a496f
c905a4d23caf1f95d96c244084f15336fba5f65b74de870ec5c2be878410625d
GET /s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwM.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://accounts.google.com
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27431
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Mar 2023 00:23:52 GMT
expires: Wed, 06 Mar 2024 00:23:52 GMT
cache-control: public, max-age=31536000
age: 48872
last-modified: Mon, 22 Apr 2019 23:43:31 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 158405c7127a1b6738fbd4c4d68550cd
e0cd4eb6e736886e46a443ef098aa7111df29c77
dcf74892708d878f834d2ede6afe4bc959fb83b0bed7178dd54bdd3023621d18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Mar 2023 13:58:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
collector-pxikkul2rm.px-cloud.net/api/v2/collector
35.190.10.96200 OK 573 B URL HTTP/2 collector-pxikkul2rm.px-cloud.net/api/v2/collector
IP 35.190.10.96:0
File type JSON data\012- , ASCII text, with very long lines (572)
Hash 9ac5526ee15120f321de388eeee035e9
7ba8dab10fac51ee0ed61dbe2f2b43b6a54f643e
36dc6806982f309fecfe995dab8936557dfac30da71f965960fb5ffdbb9821fc
POST /api/v2/collector HTTP/1.1
Host: collector-pxikkul2rm.px-cloud.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4368
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:24 GMT
content-type: application/json; charset=utf-8
content-length: 573
access-control-allow-origin: https://www.booking.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/css/76.29ea6195.chunk.css
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/psb/capla/static/css/76.29ea6195.chunk.css
IP 54.230.111.69:0
GET /psb/capla/static/css/76.29ea6195.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"989c62f2f70b1385bf59101fe197a309"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Fri, 03 Mar 2023 14:07:01 GMT
x-amz-expiration: expiry-date="Sat, 01 Jul 2023 14:07:01 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CfM8SlgHy-3WEW94lq9alN7KI4A7hddgP1JPDZzNnqON32yUmjVAXQ==
age: 86224
X-Firefox-Spdy: h2
accounts.google.com/gsi/style
142.250.74.109200 OK 0 B URL HTTP/2 accounts.google.com/gsi/style
IP 142.250.74.109:0
GET /gsi/style HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
expires: Tue, 07 Mar 2023 13:58:23 GMT
date: Tue, 07 Mar 2023 13:58:23 GMT
cache-control: private, max-age=86400
content-security-policy: script-src 'nonce-_sK9WlXsNbKdM2ifcZPLtg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/6da0bf621035bb8a2f9c756d6a89dda03b2f7864.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/6da0bf621035bb8a2f9c756d6a89dda03b2f7864.js
IP 54.230.111.69:0
GET /static/js/core-deps-inlinedet_cloudfront_sd/6da0bf621035bb8a2f9c756d6a89dda03b2f7864.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Wed, 22 Jun 2022 10:40:45 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 16 Feb 2023 04:56:01 GMT
expires: Sat, 18 Mar 2023 04:56:01 GMT
cache-control: max-age=2592000
etag: W/"62b2f1ad-949e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KTAvooesCT1yHqSCQhvHFVx8O0fQBfzHlkAPimOaiqb3fRaJrXTA7Q==
age: 1674138
X-Firefox-Spdy: h2
track.hawkaffinity.com/?sig=2tmA0DTZ0RJB2HwA0DGB0ZTZ1RGMlRGLwMQAyqGL1ZTVMaUqcWKqwI2psAUqeXrSuWzmmEab9HRIDgTolt1pXuSMgIREAuUZRcSp5jJJkVxoXuKHHO1nfWQJ1E2IuuzDLWTnBWQHl50IuAaGljRq5VGJ19TJyEwJgcSnfuyL1AKowOGB5kxAAu0LjVSFuuI2uEKLRkzpIIzp1AJMG16t&hsh=f5e2af1df41510d75bdd175f77a7a161b1a04585193473d9
172.67.194.162200 OK 0 B URL HTTP/2 track.hawkaffinity.com/?sig=2tmA0DTZ0RJB2HwA0DGB0ZTZ1RGMlRGLwMQAyqGL1ZTVMaUqcWKqwI2psAUqeXrSuWzmmEab9HRIDgTolt1pXuSMgIREAuUZRcSp5jJJkVxoXuKHHO1nfWQJ1E2IuuzDLWTnBWQHl50IuAaGljRq5VGJ19TJyEwJgcSnfuyL1AKowOGB5kxAAu0LjVSFuuI2uEKLRkzpIIzp1AJMG16t&hsh=f5e2af1df41510d75bdd175f77a7a161b1a04585193473d9
IP 172.67.194.162:0
GET /?sig=2tmA0DTZ0RJB2HwA0DGB0ZTZ1RGMlRGLwMQAyqGL1ZTVMaUqcWKqwI2psAUqeXrSuWzmmEab9HRIDgTolt1pXuSMgIREAuUZRcSp5jJJkVxoXuKHHO1nfWQJ1E2IuuzDLWTnBWQHl50IuAaGljRq5VGJ19TJyEwJgcSnfuyL1AKowOGB5kxAAu0LjVSFuuI2uEKLRkzpIIzp1AJMG16t&hsh=f5e2af1df41510d75bdd175f77a7a161b1a04585193473d9 HTTP/1.1
Host: track.hawkaffinity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cynes-gwf.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Mar 2023 13:58:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VYSgK8SXnWnq0Gzs7THgq4GWSj%2F6XKLSdfDuWQqOv%2FwZZd07ZCkrPyq7qcwyegz4r1N3ZlboeeKK%2BbgluhEggt9iOUXLFTmjJbqRYvZ9Gstpk3EcXvGgEdS%2BWSVi0ZNM9j%2BEnynogJs3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a435a38aa16fabc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.booking.com/index.html?aid=7928989&label=101
54.230.111.88200 OK 0 B URL HTTP/2 www.booking.com/index.html?aid=7928989&label=101
IP 54.230.111.88:0
GET /index.html?aid=7928989&label=101 HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
server: nginx
date: Tue, 07 Mar 2023 13:58:19 GMT
cache-control: private
vary: User-Agent, Accept-Encoding
content-encoding: br
link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/45e1448a045ffbbe4ac3c464fb98c5df7c0fe7cd.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/c253238e9a1cc9e8fe7f142462ea4345a2c72799.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/7bfe22d0731067280f1fa787df71be9401c93df3.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/15c978760cd4cad9e4b5d39dca5a4eb51e9d522a.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/74bff00771219bf81578ea669a66844806551734.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/58c63e4d3e4eb7090033901e75e2c80c0caa437b.css>; rel=preload; as=style
nel: {"report_to":"default","max_age":604800}
report-to: {"group":"default","max_age":604800,"endpoints":[{"url":"https://nellie.booking.com/report"}]}
set-cookie: _pxhd=nRc6opdAtlNAajpYwX4Bsw2yu-SWZngMp4eV1OVpI3j20ydKd-uB7hrVi5neSkltQVDhRXjePiDhMtIcvAoyZA%253D%253D%253A9DgvF45ihJ4y9yU0gd5bJC5BwFsDUXr3Vavc%252F2SotDABJen0cV2KTDGQRrlZ3Cjx0m1Z8cuZol9I6EFMU4eKmi6i%252FVCM-xOifrIvuKaBdxU%253D; domain=booking.com; path=/; expires=Wed, 06-Mar-2024 13:58:18 GMT
px_init=0; domain=booking.com; expires=Fri, 10-Jul-2076 03:56:36 GMT; SameSite=Strict; secure; HttpOnly
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBucFACde3yH9f7QAIiMudpxvIgTYo9LzkGCnSrR8GWu6Mc%2FF9OC7Du3ULMthdqmyNCTIWblpepXne3wfn6pmJ4dYgY0ExFByigRj36VvDjZBY7YyhBxhaMnIZbhhBxXiJKLbH9tNp3KMM759v9IhDEdwhPoI8xPV1g%3D; domain=.booking.com; path=/; expires=Sun, 05-Mar-2028 13:58:19 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PdMLv9Eae8kwjS4DYIozsVQJjeJwmXJWXzf7nifKRInKFZrbGrqlVA==
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/genius_vip_cloudfront_sd/0fa5ce08d822cfb3e8f892ca799997e5f53cf27d.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/genius_vip_cloudfront_sd/0fa5ce08d822cfb3e8f892ca799997e5f53cf27d.js
IP 54.230.111.69:0
GET /static/js/genius_vip_cloudfront_sd/0fa5ce08d822cfb3e8f892ca799997e5f53cf27d.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Wed, 01 Mar 2023 14:26:13 GMT
last-modified: Mon, 30 Jan 2023 14:21:27 GMT
etag: W/"63d7d267-cc5"
expires: Fri, 31 Mar 2023 14:26:13 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZEsVg-SSrHZCglyeoObZS3drDJBep-lhm1A8j_LSWcL7d8QrfpKR_A==
age: 516727
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js
IP 54.230.111.69:0
GET /static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 18 Feb 2023 00:25:29 GMT
last-modified: Wed, 21 Dec 2022 14:29:30 GMT
etag: W/"63a3184a-180b"
expires: Mon, 20 Mar 2023 00:25:29 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jUfy5kmPm09YFEP1EXtxs4CmfUG87AgtqjzfNJAEe-Bg73ZorkprTg==
age: 1517570
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/527.42e55ea6.chunk.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/psb/capla/static/js/527.42e55ea6.chunk.js
IP 54.230.111.69:0
GET /psb/capla/static/js/527.42e55ea6.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"fc941788375d73a08acc9dbc212a4f1c"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 15:04:56 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 15:04:56 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k1HjBR0ZcsVfqF22xF-prBLKvlWJ7tA9Pc2PV1S-QdBXrjA67aL_dw==
age: 343706
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/vendors.82b3cca9.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/psb/capla/static/js/vendors.82b3cca9.js
IP 54.230.111.69:0
GET /psb/capla/static/js/vendors.82b3cca9.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 06 Mar 2023 14:01:16 GMT
etag: W/"b573f6426dfedf337695c1f470da9aff"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Mon, 06 Mar 2023 13:00:47 GMT
x-amz-expiration: expiry-date="Tue, 04 Jul 2023 13:00:47 GMT", rule-id=""
expires: Wed, 05 Apr 2023 14:01:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AZxPAhJmbsOYlVz3wYLEsnxSMEoSB5JXoiVBUtXbGpdfwPSCZhPWqw==
age: 86223
X-Firefox-Spdy: h2
cf.bstatic.com/psb/capla/static/js/513.659f38d0.chunk.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/psb/capla/static/js/513.659f38d0.chunk.js
IP 54.230.111.69:0
GET /psb/capla/static/js/513.659f38d0.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 03 Mar 2023 14:29:54 GMT
etag: W/"dcf8c9752dda71e4df92908b1b938a56"
x-amz-meta-x-deployment-hash: foo
x-amz-server-side-encryption: AES256
last-modified: Thu, 02 Mar 2023 15:04:56 GMT
x-amz-expiration: expiry-date="Fri, 30 Jun 2023 15:04:56 GMT", rule-id=""
expires: Sun, 02 Apr 2023 14:29:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jiIoh643Wy9sU5X3ZeRjcgaDI_gjvfznAM_4MxK6zrlu_kGV2kNkFQ==
age: 343706
X-Firefox-Spdy: h2
cf.bstatic.com/libs/privacy-consent/releases/2.1.38/customer/cookie-banner.min.js
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/libs/privacy-consent/releases/2.1.38/customer/cookie-banner.min.js
IP 54.230.111.69:0
GET /libs/privacy-consent/releases/2.1.38/customer/cookie-banner.min.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sun, 05 Feb 2023 21:29:11 GMT
last-modified: Wed, 01 Feb 2023 09:52:04 GMT
etag: W/"63da3644-2396"
expires: Tue, 07 Mar 2023 21:29:11 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W6I4tt0mnD5zrZzQ0oV_Voy8Adh7TlhMIiWfvvwjNlc3JG2kYgZoxA==
age: 2564948
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/15c978760cd4cad9e4b5d39dca5a4eb51e9d522a.css
54.230.111.69200 OK 0 B URL HTTP/2 cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/15c978760cd4cad9e4b5d39dca5a4eb51e9d522a.css
IP 54.230.111.69:0
GET /static/css/main_cloudfront_sd.iq_ltr/15c978760cd4cad9e4b5d39dca5a4eb51e9d522a.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 10 Feb 2023 03:53:09 GMT
last-modified: Fri, 10 Feb 2023 03:30:17 GMT
etag: W/"63e5ba49-87c3c"
expires: Sun, 12 Mar 2023 03:53:09 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iNwp4CKgBGxaIB8Rh1gEgM3irPc4MZZGycVuNp-t4kfh2oyl6zufzQ==
age: 2196310
X-Firefox-Spdy: h2