mandarinoriental.com/ritzmadrid
301 Moved Permanently 0 B URL HTTP/1.1 mandarinoriental.com/ritzmadrid
IP
ASN #1299 Telia Company AB
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ritzmadrid HTTP/1.1
Host: mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://www.mandarinoriental.com/ritzmadrid
Expires: Thu, 15 Sep 2022 21:06:48 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 15 Sep 2022 21:06:48 GMT
Connection: keep-alive
Server-Timing: cdn-cache; desc=HIT, edge; dur=1
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 20:10:33 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6c-5aRFtMNX14DmoYzHd8t2m8IU4jxTtpA6KeuQg3HPwf_1LTaqa8Q==
Age: 3375
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3157
Expires: Thu, 15 Sep 2022 21:59:25 GMT
Date: Thu, 15 Sep 2022 21:06:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0k2O2urEBWHEKkKu8r3FercsOoNf4SsbbVjEtt9U0VyztUqyjU3u9w==
age: 59493
X-Firefox-Spdy: h2
www.mandarinoriental.com/ritzmadrid
302 Found 0 B URL HTTP/2 www.mandarinoriental.com/ritzmadrid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ritzmadrid HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
content-length: 0
location: https://www.mandarinoriental.com/en/ritzmadrid
expires: Thu, 15 Sep 2022 21:06:48 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Sep 2022 21:06:48 GMT
set-cookie: AKA_A2=A; expires=Thu, 15-Sep-2022 22:06:48 GMT; path=/; domain=mandarinoriental.com; secure; HttpOnly
server-timing: cdn-cache; desc=HIT, edge; dur=1
link: <https://code.jquery.com>;rel="preconnect",<https://assets.adobedtm.com>;rel="preconnect",<https://cdn.cookielaw.org>;rel="preconnect",<https://cdn.jsdelivr.net>;rel="preconnect",<https://bat.bing.com>;rel="preconnect",<https://s.pinimg.com>;rel="preconnect",<https://static.tacdn.com>;rel="preconnect"
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 21:06:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 15 Sep 2022 21:03:22 GMT
Expires: Thu, 15 Sep 2022 21:05:15 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Kkfyc8mfdL5zJkUzkozJQMUg84m6oL_zMDoJy1Vn-xzJC4j9EP4r1A==
Age: 206
ocsp.digicert.com/
200 OK 471 B IP
Hash d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3005
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:49 GMT
Last-Modified: Thu, 15 Sep 2022 20:16:45 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /U4wOGM1zIgV1+MbrfnJPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gee/yCjYA91hYO3hT9bEk+RliDk=
www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
200 OK 128 kB URL HTTP/2 www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
IP
File type Unicode text, UTF-8 text, with very long lines (45454)
Size 128 kB (128019 bytes)
Hash e998cf1d34e07302a01b94ae16fc25db
8c13686b50bd6a2b65f74adaaebc2ade3db7673b
275a11dc289145a77e51bf285ef3df9ade7fa1cfc81b8b4c198a6645becac90e
GET /corporate/corporate.css?v=1.1.3-beta.1-4 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/en/ritzmadrid
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 14 Sep 2022 17:32:49 GMT
accept-ranges: bytes
etag: "1d8c860026e0594"
x-xss-protection: 1; mode=block
x-azure-ref: 09NEiYwAAAADRrdLnrn/8T439bAaH9rRGTFRTRURHRTEyMTkAOGEzZDhlNzktYjQwNS00Zjg4LTk4NDYtNTc0MGE4YTY0ZmJk
content-encoding: gzip
content-length: 128019
cache-control: max-age=54050
date: Thu, 15 Sep 2022 21:06:49 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
www.mandarinoriental.com/corporate/main.js?v=1.1.3-beta.1-4
200 OK 513 kB URL HTTP/2 www.mandarinoriental.com/corporate/main.js?v=1.1.3-beta.1-4
IP
File type Unicode text, UTF-8 text, with very long lines (65442)
Size 513 kB (513090 bytes)
Hash 38113c1631f33674fcf6edbfe5e6bfcd
1faaac8b7ece014b37bb45cbbf2c65be985f8cf5
57e2d24c557aa30592f661bbf25ac4157a8ee942cc1441d7465b9bb5ebda1916
GET /corporate/main.js?v=1.1.3-beta.1-4 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/en/ritzmadrid
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 17:32:49 GMT
accept-ranges: bytes
etag: "1d8c860027bf283"
x-xss-protection: 1; mode=block
x-azure-ref: 0+9EiYwAAAAAANSGXHKVkRKFytidfcHt1TFRTRURHRTEyMjAAOGEzZDhlNzktYjQwNS00Zjg4LTk4NDYtNTc0MGE4YTY0ZmJk
content-encoding: gzip
content-length: 513090
cache-control: max-age=54064
date: Thu, 15 Sep 2022 21:06:49 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 7.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (21747)
Hash ec12a4ed6414d59f440cc6667f54fa56
dc045fd45a736db97db94c22d5b4d3a29aa10ea6
1a4fd42ea4ea00d7762d0a273e6094ac7967db784c736280fe77328025427373
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:49 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: 7BKk7WQU1Z9EDMZmf1T6Vg==
last-modified: Wed, 14 Sep 2022 19:30:30 GMT
etag: 0x8DA968795FE8E83
x-ms-request-id: cc4d814a-101e-0024-4d8f-c841a8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7204
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b45413dcf01c02-OSL
X-Firefox-Spdy: h2
assets.adobedtm.com/3eb63c9a5226/0ee825a6e961/launch-d19bd14d0831.min.js
200 OK 49 kB URL HTTP/2 assets.adobedtm.com/3eb63c9a5226/0ee825a6e961/launch-d19bd14d0831.min.js
IP
File type ASCII text, with very long lines (32725)
Hash c8d179c4c35c20d098a776d969d55c7b
7a66f133527573c14d961e74b5899d5af04ce235
2a15e234ed45b72a96bf9a9506dd2b0019ed59d2a1d02b23e490f8cbe5844a6f
GET /3eb63c9a5226/0ee825a6e961/launch-d19bd14d0831.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "aea38f2372c28524f9429d4e9e4188ae:1628617554.604344"
last-modified: Tue, 10 Aug 2021 17:45:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Thu, 15 Sep 2022 22:06:49 GMT
date: Thu, 15 Sep 2022 21:06:49 GMT
content-length: 48651
access-control-allow-origin: https://www.mandarinoriental.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/lazysizes@5.3.2/lazysizes.min.js
200 OK 3.5 kB URL HTTP/2 cdn.jsdelivr.net/npm/lazysizes@5.3.2/lazysizes.min.js
IP
File type ASCII text, with very long lines (7862)
Hash d9fcec2b38ae98567cc98046c820d7f7
2f72f7179da3005ac36bda4cec57de9b2710d208
0de0f4f5aed48d75364702a38e193b675bb7ba9c6a56b29e3aea7a8e07c1c97f
GET /npm/lazysizes@5.3.2/lazysizes.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.2
x-jsd-version-type: version
etag: W/"1ed1-+lXiz/B4OB5TZdlXgqlaeH0LcZI"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Sep 2022 21:06:49 GMT
age: 2051290
x-served-by: cache-fra19139-FRA, cache-bma1656-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3494
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.5.0.js
200 OK 84 kB URL HTTP/2 code.jquery.com/jquery-3.5.0.js
IP
Hash 14ee67dad9098ec1aa179859a587fc8d
4322dbc7d6f4b69c5dbf94bd9c2517b0cd6f2a67
20d269d3d572dcf932991fa3b49e02e8919b865b632de234e3f7df035005842b
GET /jquery-3.5.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:49 GMT
content-encoding: gzip
content-length: 84374
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-463a1"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663276009.dop072.sk1.t,1663276009.cds211.sk1.hn,1663276009.cds065.sk1.c
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash df3b4ba527967ea8bf385569cec0d6ad
ea84d608f3d30e0d134dcda87902aa2d337fa4f3
aa5cd1707e52ea9891d7478c373f7fb1a9e37fc5f32188f385eb6e0ff185ee72
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:06:49 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "88EB7D3A744759E1CEC8144BEF338D1A1E835C7C"
Expires: Fri, 16 Sep 2022 08:00:00 GMT
Last-Modified: Thu, 15 Sep 2022 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2201
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b454146d571c16-OSL
assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js
200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32766)
Hash ef1dca45932932a17b01c4b6946f6042
0f0f0501b7d48e1e2b2aead666d9b9b59c07720c
37d818de56459121621e8df2e54ff42109e6ac62fab1ead9aae508fab006073d
GET /extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "f259ee6445c19c2ce3c64a1b117a4f35:1597270192.577101"
last-modified: Wed, 12 Aug 2020 22:09:52 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12184
expires: Thu, 15 Sep 2022 22:06:49 GMT
date: Thu, 15 Sep 2022 21:06:49 GMT
cache-control: no-cache
access-control-allow-origin: https://www.mandarinoriental.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_ActivityMap.min.js
200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_ActivityMap.min.js
IP
File type ASCII text, with very long lines (3157)
Hash e237ae7747aa83fab4dafa788806a7bb
c8c649edb83da86b9e3a7bcf1bf76a9ce12853e6
37ec036f5f2a8fc879866180bd050c3679d218a67ef6579db55de43a82e84a97
GET /extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "5dedcda2c8a6c3a51fd419d306427010:1597270192.857753"
last-modified: Wed, 12 Aug 2020 22:09:52 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1594
expires: Thu, 15 Sep 2022 22:06:49 GMT
date: Thu, 15 Sep 2022 21:06:49 GMT
cache-control: no-cache
access-control-allow-origin: https://www.mandarinoriental.com
timing-allow-origin: *
X-Firefox-Spdy: h2
www.mandarinoriental.com/fonts/AkkuratLLWebPan-Regular.woff2
301 Moved Permanently 0 B URL HTTP/2 www.mandarinoriental.com/fonts/AkkuratLLWebPan-Regular.woff2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fonts/AkkuratLLWebPan-Regular.woff2 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
content-length: 0
location: https://www.mandarinoriental.com/fonts/akkuratllwebpan-regular.woff2
cache-control: max-age=0
date: Thu, 15 Sep 2022 21:06:49 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
www.mandarinoriental.com/fonts/4e43f64c-cddd-4d0b-a7cb-476fb498dcf4.woff2
200 OK 16 kB URL HTTP/2 www.mandarinoriental.com/fonts/4e43f64c-cddd-4d0b-a7cb-476fb498dcf4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15712, version 0.0\012- data
Hash ca0fb1d181588b4512e3e9cfbd6c2947
cafc6817f6a141b78e793806b4f49694bd9d1041
a80fb6b04e3fced5fc16a801c396af1397492f4683cad5460382a9026d558132
GET /fonts/4e43f64c-cddd-4d0b-a7cb-476fb498dcf4.woff2 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 15712
content-type: font/woff2
last-modified: Wed, 14 Sep 2022 17:32:49 GMT
accept-ranges: bytes
etag: "1d8c86002648be0"
x-xss-protection: 1; mode=block
x-azure-ref: 0+9EiYwAAAAC2pg1ND9mgRqTUtD8JyNGyTE9OMjFFREdFMTYwNgA4YTNkOGU3OS1iNDA1LTRmODgtOTg0Ni01NzQwYThhNjRmYmQ=
cache-control: max-age=2559843
date: Thu, 15 Sep 2022 21:06:49 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
www.mandarinoriental.com/fonts/AkkuratLLWebPan-Bold.woff2
301 Moved Permanently 0 B URL HTTP/2 www.mandarinoriental.com/fonts/AkkuratLLWebPan-Bold.woff2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fonts/AkkuratLLWebPan-Bold.woff2 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
content-length: 0
location: https://www.mandarinoriental.com/fonts/akkuratllwebpan-bold.woff2
cache-control: max-age=0
date: Thu, 15 Sep 2022 21:06:49 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash e54f9597f04b82a26bad08882e91bdf7
3cde63d75bf41426ca5761d1aef248be5f37741a
7bc46ed3668d3abbd02d49eaacf0f0ac947bf63ec51a06b65069d05deb219f2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5003
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:49 GMT
Last-Modified: Thu, 15 Sep 2022 19:43:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.mandarinoriental.com/fonts/akkuratllwebpan-regular.woff2
200 OK 141 kB URL HTTP/2 www.mandarinoriental.com/fonts/akkuratllwebpan-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 141121, version 5.0\012- data
Size 141 kB (141121 bytes)
Hash a4ae09dad3469a094e841e5e89f9dde9
c38e149adc8c14ed61de77b71fec4dc50df20b99
1304d95fe0d213bba3d9ee3792f895993a9b9afc995effda8656361e091f9e85
GET /fonts/akkuratllwebpan-regular.woff2 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
Connection: keep-alive
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 141121
content-type: font/woff2
last-modified: Wed, 14 Sep 2022 17:32:49 GMT
accept-ranges: bytes
etag: "1d8c860026691c1"
x-xss-protection: 1; mode=block
x-azure-ref: 0AdIiYwAAAACDSWcyt87JSqYup6oPlYheRlJBMjMxMDUwNDE4MDMzADhhM2Q4ZTc5LWI0MDUtNGY4OC05ODQ2LTU3NDBhOGE2NGZiZA==
cache-control: max-age=2559776
date: Thu, 15 Sep 2022 21:06:49 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
www.mandarinoriental.com/fonts/akkuratllwebpan-bold.woff2
200 OK 145 kB URL HTTP/2 www.mandarinoriental.com/fonts/akkuratllwebpan-bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 145208, version 5.0\012- data
Size 145 kB (145208 bytes)
Hash 742f9353584ee21e15b668bc43ef6a54
46ef98c2c00f4669c25463aa251b4dfe1eca5474
84e00d3e9ae5279dddeca429341275ba26f6c3f034379b1900e8b82a28311c09
GET /fonts/akkuratllwebpan-bold.woff2 HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/corporate/corporate.css?v=1.1.3-beta.1-4
Connection: keep-alive
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 145208
content-type: font/woff2
last-modified: Wed, 14 Sep 2022 17:32:49 GMT
accept-ranges: bytes
etag: "1d8c860026681b8"
x-xss-protection: 1; mode=block
x-azure-ref: 0+9EiYwAAAACeludPNlu2QrjRfoWV3XJtTE9OMjFFREdFMTYwNgA4YTNkOGU3OS1iNDA1LTRmODgtOTg0Ni01NzQwYThhNjRmYmQ=
cache-control: max-age=2559833
date: Thu, 15 Sep 2022 21:06:49 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=5.1.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&d_nsid=0&ts=1663275994256
200 OK 325 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.1.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&d_nsid=0&ts=1663275994256
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 048886abaa84d822e8de55e98498636d
eda8a771365b31d955be696f4d92214cc251aa6d
d6134a93cc41c64829c86bc75889635308c14ce27991f530ada573467060609d
GET /id?d_visid_ver=5.1.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&d_nsid=0&ts=1663275994256 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.mandarinoriental.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v040-03937ce5e.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=01349378013683560894080885980770768844; Max-Age=15552000; Expires=Tue, 14 Mar 2023 21:06:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: pHC/N3eaQEk=
Content-Length: 325
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-TQ5CRB
200 OK 142 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TQ5CRB
IP
File type ASCII text, with very long lines (59626)
Size 142 kB (142310 bytes)
Hash 97f20f6f0231cb80f9f828eae1b16827
b68f76d62899d0868e66fcc4be85efcf53c1663d
491891dd8e5c08048d6d531667c3670ccc9dc00b7c3dc5de8ad8e4fe965c99ca
GET /gtm.js?id=GTM-TQ5CRB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Sep 2022 21:06:49 GMT
expires: Thu, 15 Sep 2022 21:06:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 142310
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mandarinoriental.com/img/icons/favicon-256x256.png
200 OK 13 kB URL HTTP/2 www.mandarinoriental.com/img/icons/favicon-256x256.png
IP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 7fcc5316ffeb948c215f5c5938f665fd
dc9de0905811b5d051a718883f112bf3ec260846
5f43fb6e0aea51e787596512aa5e3e19bbaf541af6f44a739fa688f97b5db5ac
GET /img/icons/favicon-256x256.png HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/en/ritzmadrid
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 13199
content-type: image/png
last-modified: Wed, 14 Sep 2022 17:30:48 GMT
accept-ranges: bytes
etag: "1d8c85fba45a78f"
x-xss-protection: 1; mode=block
x-azure-ref: 09NEiYwAAAACPzy1MzYkMRoh7vRM8HepHTFRTRURHRTEyMjAAOGEzZDhlNzktYjQwNS00Zjg4LTk4NDYtNTc0MGE4YTY0ZmJk
cache-control: max-age=2559647
date: Thu, 15 Sep 2022 21:06:50 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
www.mandarinoriental.com/img/icons/favicon-16x16.png
200 OK 479 B URL HTTP/2 www.mandarinoriental.com/img/icons/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 49ee39832b270baaefb22dbc9d4bba4b
11b9a4c3fc518483a5ecbaa6d03f58095f77a292
05d9060f9e4c1c827c28dcb649bd6d947c0e3407502b4366851a48c63095001a
GET /img/icons/favicon-16x16.png HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/en/ritzmadrid
Cookie: AKA_A2=A; site_lang=en; site_name=Corporate; corporate#lang=en; AMCV_0DD8210654E6C7380A4C98A7%40AdobeOrg=-127034327%7CMCIDTS%7C19251%7CvVersion%7C5.1.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 479
content-type: image/png
last-modified: Wed, 14 Sep 2022 17:30:48 GMT
accept-ranges: bytes
etag: "1d8c85fba4595df"
x-xss-protection: 1; mode=block
x-azure-ref: 09NEiYwAAAABqWjhSBsz9TKH11xSZZsffTE9OMjFFREdFMTgxOAA4YTNkOGU3OS1iNDA1LTRmODgtOTg0Ni01NzQwYThhNjRmYmQ=
cache-control: max-age=2559776
date: Thu, 15 Sep 2022 21:06:50 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
assets.adobedtm.com/3eb63c9a5226/0ee825a6e961/bc0c1a5de076/RCb2b4bcccdff5467eb6a4ff182721a31b-source.min.js
200 OK 509 B URL HTTP/2 assets.adobedtm.com/3eb63c9a5226/0ee825a6e961/bc0c1a5de076/RCb2b4bcccdff5467eb6a4ff182721a31b-source.min.js
IP
File type ASCII text, with very long lines (723)
Hash a88911307258fcc2b9e2f03b816c569c
7bf06c4017b43bd972cf2773278ea13ae155792c
d3d5e85fc14b8afd594928b998924d21f85ea0495b9930fe8b2332cdc8a6d86b
GET /3eb63c9a5226/0ee825a6e961/bc0c1a5de076/RCb2b4bcccdff5467eb6a4ff182721a31b-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "70b1b9ed55c364c0d76f4000b25c7ad7:1628617555.993599"
last-modified: Tue, 10 Aug 2021 17:45:55 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 509
cache-control: max-age=3600
expires: Thu, 15 Sep 2022 22:06:50 GMT
date: Thu, 15 Sep 2022 21:06:50 GMT
access-control-allow-origin: https://www.mandarinoriental.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/3eb63c9a5226/0ee825a6e961/bc0c1a5de076/RC628f4f411250456da5055b662a1f8506-source.min.js
200 OK 494 B URL HTTP/2 assets.adobedtm.com/3eb63c9a5226/0ee825a6e961/bc0c1a5de076/RC628f4f411250456da5055b662a1f8506-source.min.js
IP
File type ASCII text, with very long lines (730)
Hash d4df9bc49c3de7ec93356046fa6a8a55
8a109ff6c4c8bfa85c744f1f2ca9022908474c15
9fd3e42629a5fe51e22b6f922113857bf12cecd665d16a4a3d355429c5360951
GET /3eb63c9a5226/0ee825a6e961/bc0c1a5de076/RC628f4f411250456da5055b662a1f8506-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "70b1b9ed55c364c0d76f4000b25c7ad7:1628617555.993599"
last-modified: Tue, 10 Aug 2021 17:45:55 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 494
cache-control: max-age=3600
expires: Thu, 15 Sep 2022 22:06:50 GMT
date: Thu, 15 Sep 2022 21:06:50 GMT
access-control-allow-origin: https://www.mandarinoriental.com
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3606
Expires: Thu, 15 Sep 2022 22:06:56 GMT
Date: Thu, 15 Sep 2022 21:06:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3606
Expires: Thu, 15 Sep 2022 22:06:56 GMT
Date: Thu, 15 Sep 2022 21:06:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3606
Expires: Thu, 15 Sep 2022 22:06:56 GMT
Date: Thu, 15 Sep 2022 21:06:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3606
Expires: Thu, 15 Sep 2022 22:06:56 GMT
Date: Thu, 15 Sep 2022 21:06:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3606
Expires: Thu, 15 Sep 2022 22:06:56 GMT
Date: Thu, 15 Sep 2022 21:06:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4833535b1650b0ac875704023b650e66
96ab8cd8e14350f730d26731f3445710324e24e2
d2b5a51e39a4890ba56e819d4d5d1d57d4d3cfc50dde42efdf23b8e9be17d1c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9400
x-amzn-requestid: c1199c77-0340-46ee-b03f-641ec15816e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJE_H-NoAMFXjQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63225552-08e6daa0169abd8c42a55598;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:27:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zPeaNxhV9P5ORhzsosoaLD5cKZtIXR1Ar2_yRPHZifxpd4P8YlmNPg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:20 GMT
age: 2730
etag: "96ab8cd8e14350f730d26731f3445710324e24e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1633672fad0b564108cf81ad711dc881
d37ad0f40bc1f3f0022467dd0af2478980bd858a
cc7176a297f6009f07074fb9af796132b4452833be675bf378cc950fe81a582a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9071
x-amzn-requestid: b450f7cf-6cc7-4d1f-aef3-4496f0971727
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeIxuEq6oAMF9jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632254d7-6912ef8731d81fa43b805e5b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:25:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6LDUuDX1W8-Q88pDJma0xCAd5QuJ0YV-VpJ_8LVyDHX9YN1k0fQZ8Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:25:28 GMT
etag: "d37ad0f40bc1f3f0022467dd0af2478980bd858a"
content-type: image/jpeg
age: 81682
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f5befd5bb8e6d5dad2465be69d5a33e4
e5b46c3ca439a09950290cada1af5e27cede10f2
4dc0a3373fb4c1830c4e2420dddbcbe8dceecf10e969cbe8d02368e41207832c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5988
x-amzn-requestid: a0d81c7a-14e3-443d-8fb7-19241f06d3c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yaux0H77IAMF2_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f80b-0fe6fbbe75e891b925f88dc2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VWjXuugfeW6xGoTvb_q4GZWERm_iM0l_RjdyyPxEt2ssOPiU8_yAoQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:20 GMT
age: 2730
etag: "e5b46c3ca439a09950290cada1af5e27cede10f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:42:04 GMT
age: 84286
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ef9865421a37eae9a4df04083d27485
c7cf1f6a259cece60a34261ec83ee00736e1d72b
723b65ba660f22281f85d6caceea23e9cd932ee9084dc905a08a585746c4c4cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9922
x-amzn-requestid: de1e3e45-74ff-41b2-986f-e78473cb6d98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVc1SGM7IAMFw0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631edb54-2099524d6f2c338b41eea101;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 07:10:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: g4LYoK2-sx5QTvWPxwsh8yhHjOswmtzMB6d4N9YAvQOvspuvSFbJOA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:17:07 GMT
age: 82183
etag: "c7cf1f6a259cece60a34261ec83ee00736e1d72b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IksVsW_2Y1I74dH0vXGeLN2ljxJHljF0Wn20n7v0b8UNPmikrHNkgA==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Sep 2022 20:21:20 GMT
age: 2730
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/otBannerSdk.js
200 OK 76 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash 523e98a35ea92fd6e6d32d6728a8c98e
e0951a7bfa0700679aa41a03394286723e697d93
a746202b022948dfc0461cf24b3be5b01d0c08b924b23545f3cba6e2d15b41a9
GET /scripttemplates/6.22.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:50 GMT
content-type: application/javascript
content-length: 75930
content-encoding: gzip
content-md5: Uj6Yo16pL9bm0y1nKKjJjg==
last-modified: Thu, 19 Aug 2021 02:39:18 GMT
etag: 0x8D962BA8ADAEF03
x-ms-request-id: 18163f5d-b01e-0083-086c-c4784b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 28673945
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b4541aec371c02-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b69a8c14508e6bc4e8980a769e9ae7c
bda574c457837d43cabd90713e70ee39178237f1
124b629a5768d9ff342185015b714fdc757d09b5bb72f9c2242126d265019db7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4632776.fls.doubleclick.net/activityi;src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid?
200 OK 389 B URL HTTP/2 4632776.fls.doubleclick.net/activityi;src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (499), with no line terminators
Hash bc2fe69a7386e09a6bf13f093c6d761b
e9fd73ac4f7fba89860bd339c929fb47d2b6df22
c2397af4220f8260534dfb691fb281517a59e3439c7609af9967e9ad5fd53fd5
GET /activityi;src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid? HTTP/1.1
Host: 4632776.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:50 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 389
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.tacdn.com/js3/taevents-c.js
200 OK 1.3 kB URL HTTP/2 static.tacdn.com/js3/taevents-c.js
IP
File type ASCII text, with very long lines (2486)
Hash 67ffa5b9f045eca6db514586abd23b1c
368979a598657917c42d8bbadffb5aea32c18c81
4c5ba1bff4fdc553898b2b86551aa2e0ade35677ee476488ec69404355f7ff66
GET /js3/taevents-c.js HTTP/1.1
Host: static.tacdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
last-modified: Sat, 19 Mar 2022 11:29:50 GMT
cache-control: max-age=31536000, immutable
expires: Wed, 22 Mar 2023 01:13:57 GMT
content-encoding: gzip
timing-allow-origin: *
access-control-allow-origin: *
content-type: application/x-javascript
accept-ranges: bytes
date: Thu, 15 Sep 2022 21:06:50 GMT
via: 1.1 varnish
age: 15364376
x-served-by: cache-bma1620-BMA
x-cache: HIT
x-cache-hits: 2017
x-timer: S1663276011.762247,VS0,VE0
vary: Accept-Encoding
content-length: 1282
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash 11718146e6edaae0a2b48d76b6832d3b
77c1e6b2a04f27f653a8b229e62b694691e6e82a
48a60f7bcfaeb016b18203cf8885741455a698617cc86a51dbc79cb59035c7e9
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:06:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 07:52:50 GMT
Expires: Tue, 20 Sep 2022 07:52:49 GMT
Etag: "77c1e6b2a04f27f653a8b229e62b694691e6e82a"
Cache-Control: max-age=604159,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 164
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b4541b4c39b51d-OSL
4413739.fls.doubleclick.net/activityi;src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid?
200 OK 399 B URL HTTP/2 4413739.fls.doubleclick.net/activityi;src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (528), with no line terminators
Hash 3965bb4f91fbf0e67f4458ec20c584d9
43503702cdf158f12bf6b0e5b3e7108a4fe308ed
6405c51c94da6cf1a732691e92603491eb408f5baf9a2d2715f48daa4a8cca15
GET /activityi;src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid? HTTP/1.1
Host: 4413739.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:50 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 399
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/1245adc6-46b9-4c58-8391-211df33d9e87/8ef5ab6e-90f2-4c0f-a9ff-f011d25185a7/en.json
200 OK 20 kB URL HTTP/2 cdn.cookielaw.org/consent/1245adc6-46b9-4c58-8391-211df33d9e87/8ef5ab6e-90f2-4c0f-a9ff-f011d25185a7/en.json
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Hash c420261ffc28544aada4993e25e5c327
03300a8a496f55a5c5ec53ce839ab72bff52c50e
87b53cfef9313527b53ac5e9a49dc3f33236e1d697c7092153a03334739bfec4
GET /consent/1245adc6-46b9-4c58-8391-211df33d9e87/8ef5ab6e-90f2-4c0f-a9ff-f011d25185a7/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:50 GMT
content-type: application/x-javascript
content-length: 20352
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: xCAmH/woVEqtpJk+JeXDJw==
last-modified: Fri, 20 Aug 2021 16:06:22 GMT
etag: 0x8D963F47416F113
x-ms-request-id: 3ab926c3-001e-0012-19e5-beecfa000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 333
expires: Fri, 16 Sep 2022 01:06:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b4541b6b530b51-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b69a8c14508e6bc4e8980a769e9ae7c
bda574c457837d43cabd90713e70ee39178237f1
124b629a5768d9ff342185015b714fdc757d09b5bb72f9c2242126d265019db7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash 94fdee58d5208150ce0010057f72bf6d
e843afd6e6003f2ce8189da6102788b77c23c535
edc3737fe20a109b1bc4afb34bfe420b65b6f9a86486e0a2ea3ad3ef0c17db6b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6208
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Last-Modified: Thu, 15 Sep 2022 19:23:22 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 312
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b69a8c14508e6bc4e8980a769e9ae7c
bda574c457837d43cabd90713e70ee39178237f1
124b629a5768d9ff342185015b714fdc757d09b5bb72f9c2242126d265019db7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mandarinorientalmanagementusa.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 mandarinorientalmanagementusa.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: mandarinorientalmanagementusa.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Thu, 15 Sep 2022 21:06:50 GMT
DCS: dcs-prod-irl1-2-v040-0bd4f2720.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Wed, 14 Sep 2022 10:24:53 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: swcuKg0aTG4=
Content-Length: 2791
Connection: keep-alive
uktc.fospha.com/ijento.js
200 OK 8.0 kB URL HTTP/1.1 uktc.fospha.com/ijento.js
IP
File type C source, ASCII text, with very long lines (556)
Hash 9a66511c76fffbe3d8bb89a5ead431c2
f8c39d15f6c489106915c06387184805587b616e
baea97515b2a26d24610e04e5bb43625e8c676e2aecda364dc0b517ffdee1b1f
GET /ijento.js HTTP/1.1
Host: uktc.fospha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:06:50 GMT
Server: Apache
Content-Security-Policy: upgrade-insecure-requests;
Vary: Accept-encoding
Last-Modified: Mon, 15 Oct 2018 08:39:07 GMT
ETag: "1f58-578405ed5dfca"
Accept-Ranges: bytes
Content-Length: 8024
Content-Encoding: gzip
Cache-Control: public, max-age=7200
Keep-Alive: timeout=3, max=100
Connection: Keep-Alive
Content-Type: text/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ff1c0d8a380ce4a561609526d995bf5
135ecd7e71ea2823d39f8c1efcb2121618ed8167
f7228281af8d6de222aa47b3a78a627f85315244e65a8956fa2c0c7dff1bb7ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mohg.sc.omtrdc.net/id?d_visid_ver=5.1.0&d_fieldgroup=A&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&mid=01314541234131589704084300655981686543&ts=1663275995191
200 OK 2 B URL HTTP/2 mohg.sc.omtrdc.net/id?d_visid_ver=5.1.0&d_fieldgroup=A&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&mid=01314541234131589704084300655981686543&ts=1663275995191
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=5.1.0&d_fieldgroup=A&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&mid=01314541234131589704084300655981686543&ts=1663275995191 HTTP/1.1
Host: mohg.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.mandarinoriental.com
access-control-allow-credentials: true
date: Thu, 15 Sep 2022 21:06:50 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
200 OK 390 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (498), with no line terminators
Hash 21d155968bb1d0c381765846a9225d13
1223a4fdb20d0179fbe90f6faef9c8655d9e3619
9f56c73a112222510ee8c80adb5ef5568d2d0a59df1f0451f31d569db10a0498
GET /ddm/fls/i/src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4632776.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:50 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 390
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/v2/otPcCenter.json
200 OK 11 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (37295)
Hash 18547e97b06ab94df47f203505e4250f
c3fb390706da22139963e285865cf4af77e374cf
35c3b153e612b2809fd668d85c67b873887773d1c13d8cb4f796544c0f7a4141
GET /scripttemplates/6.22.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:50 GMT
content-type: application/json
content-length: 11387
content-encoding: gzip
content-md5: GFR+l7BquU30fyA1BeQlDw==
last-modified: Thu, 19 Aug 2021 02:39:12 GMT
etag: 0x8D962BA87864242
x-ms-request-id: a332ffcc-901e-0035-3ee5-be76b3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 333
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b4541bebea0b51-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCenterRounded.json
200 OK 2.6 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCenterRounded.json
IP
File type JSON data\012- , ASCII text, with very long lines (7547)
Hash 2a40a1b1a1e9a22e403826a219fc7ecf
e2e60c3c4581e53a957506ffb1c11429b02ffa60
c262bd60e524af1bfaa98709c712b0a29b4aacaba6244666c1715ab6c93db19e
GET /scripttemplates/6.22.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:50 GMT
content-type: application/json
content-length: 2584
content-encoding: gzip
content-md5: KkChsaHpoi5AOCaiGfx+zw==
last-modified: Thu, 19 Aug 2021 02:39:12 GMT
etag: 0x8D962BA872795A1
x-ms-request-id: 29e3dbeb-601e-0160-48e5-bedb91000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 333
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b4541bdbe10b51-OSL
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
200 OK 399 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (527), with no line terminators
Hash 12cdda1c1ba8bd82a676a1bc1d1df77c
81351ef4b64949b36e0eba82085073bc84bd1476
9300d621bf102e0174280c2d094d4a143ae1c81df14b1f61e737a1ce40a6ab5e
GET /ddm/fls/i/src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4413739.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:50 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 399
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
uktc.fospha.com/mandarinoriental/track.gif?v=14.0&i=1.1.1663275995411.1509569305.-142a5bb8&f=toycwpgi&d=anMxNjYzMjc1OTk1NDA5cjEwOS4x*MQ__*cGFnZXZpZXc_*MS4xNDEzNTE0MDYyLjE2NjMyNzU5OTU0MTAuLTFiMTRjNmRh*YS5w*aHR0cHM6Ly93d3cubWFuZGFyaW5vcmllbnRhbC5jb20vZW4vcml0em1hZHJpZA__*eyJ0eiI6MCwibGFuZ3VhZ2UiOiJlbi1VUyIsImVuY29kaW5nIjoiVVRGLTgiLCJzY3JlZW5Db2xvcnMiOjI0LCJ2aXNpYmlsaXR5IjoidmlzaWJsZSIsInNjcmVlblJlc29sdXRpb24iOiIxMjgweDEwMDIifQ__*eyJ0aXRsZSI6IkVSUk9SIDQwNCJ9*&t=0&c=741788a3
200 OK 35 B URL HTTP/1.1 uktc.fospha.com/mandarinoriental/track.gif?v=14.0&i=1.1.1663275995411.1509569305.-142a5bb8&f=toycwpgi&d=anMxNjYzMjc1OTk1NDA5cjEwOS4x*MQ__*cGFnZXZpZXc_*MS4xNDEzNTE0MDYyLjE2NjMyNzU5OTU0MTAuLTFiMTRjNmRh*YS5w*aHR0cHM6Ly93d3cubWFuZGFyaW5vcmllbnRhbC5jb20vZW4vcml0em1hZHJpZA__*eyJ0eiI6MCwibGFuZ3VhZ2UiOiJlbi1VUyIsImVuY29kaW5nIjoiVVRGLTgiLCJzY3JlZW5Db2xvcnMiOjI0LCJ2aXNpYmlsaXR5IjoidmlzaWJsZSIsInNjcmVlblJlc29sdXRpb24iOiIxMjgweDEwMDIifQ__*eyJ0aXRsZSI6IkVSUk9SIDQwNCJ9*&t=0&c=741788a3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /mandarinoriental/track.gif?v=14.0&i=1.1.1663275995411.1509569305.-142a5bb8&f=toycwpgi&d=anMxNjYzMjc1OTk1NDA5cjEwOS4x*MQ__*cGFnZXZpZXc_*MS4xNDEzNTE0MDYyLjE2NjMyNzU5OTU0MTAuLTFiMTRjNmRh*YS5w*aHR0cHM6Ly93d3cubWFuZGFyaW5vcmllbnRhbC5jb20vZW4vcml0em1hZHJpZA__*eyJ0eiI6MCwibGFuZ3VhZ2UiOiJlbi1VUyIsImVuY29kaW5nIjoiVVRGLTgiLCJzY3JlZW5Db2xvcnMiOjI0LCJ2aXNpYmlsaXR5IjoidmlzaWJsZSIsInNjcmVlblJlc29sdXRpb24iOiIxMjgweDEwMDIifQ__*eyJ0aXRsZSI6IkVSUk9SIDQwNCJ9*&t=0&c=741788a3 HTTP/1.1
Host: uktc.fospha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:06:50 GMT
Server: Apache
Content-Security-Policy: upgrade-insecure-requests;
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
Content-Length: 35
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Keep-Alive: timeout=3, max=99
Connection: Keep-Alive
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8ff1c0d8a380ce4a561609526d995bf5
135ecd7e71ea2823d39f8c1efcb2121618ed8167
f7228281af8d6de222aa47b3a78a627f85315244e65a8956fa2c0c7dff1bb7ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.tamgrt.com/RT
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /RT HTTP/1.1
Host: www.tamgrt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: envoy
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-allow-credentials: true
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT DSP COR CAO PSA IDC ADM DEVi TAIi PSD IVAi IVDi CONi HIS CNT"
timing-allow-origin: https://www.tripadvisor.com
content-type: text/plain; charset=utf-8
vary: Accept-Encoding
expires: Thu, 15 Sep 2022 21:06:50 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Sep 2022 21:06:50 GMT
set-cookie: RT=%1%enc%3Ats5cxHjqP8WBYn1kHyIzLa7mBet9dlyav%2BELSD60BPtkRN7xooPNXh6TPTKYwGTiEEdMURPW9BQ%3D; Domain=www.tamgrt.com; Expires=Sat, 14-Sep-2024 21:06:50 GMT; Path=/; SameSite=None; Secure
ServerPool=X; Domain=www.tamgrt.com; Path=/
ak_bmsc=2FE92DCA62473654707F2DC26FDBE553~000000000000000000000000000000~YAAQpk0kFy55D0CDAQAAu835QhFdyDOt+f965JTmi2pGmZwN2LLxSDuPSvNz5N5bhE4ZEeJt7O0LbahFmH1799LFEg7IXO3IbFuIBjM0pML6HY4RI3fSK7a2lOHJhQukqZ+nx45ACdDc+MFhXhHQvnhf8gy8elSAEYL42Ns7c/5hUzxdcIDDJI+AYdlLxU1mEw3dwKaJUi+0Y17m7fyKCvqx21jWupbXRsnXh75z1F8G8N2n3JCOYv0nOrQsqRziFw34yWrg35MKn3qapjIL5+00n+bbkrWogWuh9FqOa5R/0Ctc1tOcN+JDnXmJF0ZNsygqMK1Q/JDToafn6FKyk+EjxPoh6oLzVzJev5OGc9yLE2DVr07MCYM+JhzTtJaTqPodMVqitMlu; Domain=.tamgrt.com; Path=/; Expires=Thu, 15 Sep 2022 23:06:50 GMT; Max-Age=7200; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db503d6c6780cb1b8dfeffa10a50eada
51a459bdc02f20576031f526be6788f653095d94
b7a653d3c381c6cea5b6838aea01a7de8ea5c2d8bdf5ff92c4cd5c22829c8e8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db503d6c6780cb1b8dfeffa10a50eada
51a459bdc02f20576031f526be6788f653095d94
b7a653d3c381c6cea5b6838aea01a7de8ea5c2d8bdf5ff92c4cd5c22829c8e8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=4413739;type=websi035;cat=emira212;ord=1;num=2479629695732;gtm=2wg9e0;auiddc=1893307878.1663275995;u9=%2Fen%2Fritzmadrid;u11=english;u10=undefined;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
expires: Thu, 15 Sep 2022 21:06:51 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=4632776;type=count0;cat=allpagrt;ord=1;num=2687172464823;gtm=2wg9e0;auiddc=1893307878.1663275995;u7=GLOBAL;u8=English;~oref=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
expires: Thu, 15 Sep 2022 21:06:51 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f3d30e6660bba3bc38ec350a55f6e77d
afc1a4dd21f67012c3593e41bafe2a84aaf91011
379030c65783390c65466c02750bd9d9e195ac63989daca58ef41f2d01fe1aac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3890
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Last-Modified: Thu, 15 Sep 2022 20:02:01 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=61797
date: Thu, 15 Sep 2022 21:06:51 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7dff4bc87dbee6fd33e0d7a3dc5ed3bd
59878d4dd98e60b39dcf7ac288e77bb262afab5d
8c3a027cee1f48144eb0504deff1f2b9aa98c9fc3f4e3057ece6caac9f604315
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Last-Modified: Thu, 15 Sep 2022 19:34:02 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Thu, 15 Sep 2022 20:41:12 GMT
expires: Thu, 15 Sep 2022 22:41:12 GMT
cache-control: public, max-age=7200
age: 1539
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f3d30e6660bba3bc38ec350a55f6e77d
afc1a4dd21f67012c3593e41bafe2a84aaf91011
379030c65783390c65466c02750bd9d9e195ac63989daca58ef41f2d01fe1aac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3890
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Last-Modified: Thu, 15 Sep 2022 20:02:01 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 91dad4479f7dcb623266cf0dcfef5875
9fcf1f0e16c17a43021ab8fb01089d2d9c9f1d3a
0dc4f9c3ecdccb7e1b7a651c72ee63acc06482b362f060547534c3196e561412
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=06038C1C8F8261CF0A9A9E3C8E77600F; domain=.bing.com; expires=Tue, 10-Oct-2023 21:06:51 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2FD982EDB5D048FFAF4574E03211BF85 Ref B: OSL30EDGE0211 Ref C: 2022-09-15T21:06:51Z
date: Thu, 15 Sep 2022 21:06:50 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/gtm/optimize.js?id=GTM-W6ZZ4PJ
200 OK 42 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-W6ZZ4PJ
IP
File type ASCII text, with very long lines (1720)
Hash 98d7948f40cce36e763c1619705576bc
1ea130b53f9e057f4c7d008b685307ecffd3b888
dc9c81e97a13da4af44ab81db4a5482a2a51f58fab0d10f0401ead8e47b35497
GET /gtm/optimize.js?id=GTM-W6ZZ4PJ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Sep 2022 21:06:51 GMT
expires: Thu, 15 Sep 2022 21:06:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41685
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a8761319363e537f58bedc071786c203
1e983c0df7eeca5ed22cf839bb36c16c251101fe
528d57282b86878146b06df898cfa945913c02e05e5f8b1190907d456f13860e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash ecb99528d18dbe7952eac9618eaf2d8e
eb59bf3afc849403fa3dde09b75b5fc51f29e7b5
bcecfe43bf3e0f22ff425fe630e189d28fc3ecdc9764dd1686599e5ce59f40cc
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: BmSx0xoHc8jtksllWS3Ff1JUgX+RxFa4z30nOEozxrb3mAwa9Kpqc9Prf+g8TQkfdYiYDZDF5pgxhB4vIOdrZw==
content-length: 26872
x-fb-trip-id: 1904183273
date: Thu, 15 Sep 2022 21:06:51 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.mandarinoriental.com/en/ritzmadrid
404 Not Found 16 kB URL HTTP/2 www.mandarinoriental.com/en/ritzmadrid
IP
File type gzip compressed data, max compression\012- data
Hash 4738d969770682feba80f04bf171d65b
be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
GET /en/ritzmadrid HTTP/1.1
Host: www.mandarinoriental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: AKA_A2=A
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
x-xss-protection: 1; mode=block
x-azure-ref: 06JMjYwAAAAD6qg7b6/W0RpdXKf10kqyFTE9OMjFFREdFMTgxOQA4YTNkOGU3OS1iNDA1LTRmODgtOTg0Ni01NzQwYThhNjRmYmQ=
expires: Thu, 15 Sep 2022 21:06:49 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Sep 2022 21:06:49 GMT
set-cookie: site_lang=en; path=/
site_name=Corporate; path=/
corporate#lang=en; path=/; secure; SameSite=None
server-timing: cdn-cache; desc=MISS, edge; dur=137, origin; dur=661
link: <https://code.jquery.com>;rel="preconnect",<https://assets.adobedtm.com>;rel="preconnect",<https://cdn.cookielaw.org>;rel="preconnect",<https://cdn.jsdelivr.net>;rel="preconnect",<https://bat.bing.com>;rel="preconnect",<https://s.pinimg.com>;rel="preconnect",<https://static.tacdn.com>;rel="preconnect"
strict-transport-security: max-age=86400 ; includeSubDomains
X-Firefox-Spdy: h2
beacon.sojern.com/pixel/p/142520?f_v=v6_js&p_v=1&vid=hot&cid=
200 OK 696 B URL HTTP/2 beacon.sojern.com/pixel/p/142520?f_v=v6_js&p_v=1&vid=hot&cid=
IP
Hash d77a879d55ffa91d44d39b7c820630ed
cdd5e7eb7b36e4a5d776d83a6f625c40c943f69b
ae57a25f281183add59e831c343fffd6173d89fd8a4e33e1bdbe12fec21d0989
GET /pixel/p/142520?f_v=v6_js&p_v=1&vid=hot&cid= HTTP/1.1
Host: beacon.sojern.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript
p3p: policyref="/w3c/p3p.xml", CP="ADMa OUR IND DSP NON LAW"
set-cookie: cid=107f4fba-f8e3-5708-275e-8bd833d5da8d#1663804800000; Path=/; Domain=sojern.com; Max-Age=31536000; Secure; SameSite=None
vary: Accept-Encoding
date: Thu, 15 Sep 2022 21:06:51 GMT
content-length: 696
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7dff4bc87dbee6fd33e0d7a3dc5ed3bd
59878d4dd98e60b39dcf7ac288e77bb262afab5d
8c3a027cee1f48144eb0504deff1f2b9aa98c9fc3f4e3057ece6caac9f604315
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5569
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Last-Modified: Thu, 15 Sep 2022 19:34:02 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash f3d30e6660bba3bc38ec350a55f6e77d
afc1a4dd21f67012c3593e41bafe2a84aaf91011
379030c65783390c65466c02750bd9d9e195ac63989daca58ef41f2d01fe1aac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3890
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Last-Modified: Thu, 15 Sep 2022 20:02:01 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
s.pinimg.com/ct/core.js
200 OK 1.2 kB IP
File type ASCII text, with very long lines (1182), with no line terminators
Hash 7cac7e5d9e2b15cdc4ae76549dde174b
41a5b48387aef7bef116d52da64af00c504c7f86
d8261c0f4ae314e710ac7b15aa6bd0cf371de5b1cec41331ca12a1c392742ce6
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "7cac7e5d9e2b15cdc4ae76549dde174b"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1182
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0268506ef4f4e7249e6d3994c76ff2f7
200048033dce178a59b169cd556b10c5c3db069d
af9069b5915efb2ce47e5e2a79767f014033460e55715cd778fbfe903f81f1e9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 21:06:51 GMT
Last-Modified: Thu, 15 Sep 2022 20:35:53 GMT
Server: ECS (nyb/1D14)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CE8ZeOrXekELlByakTvizX3adKhDnt1FtlDhxsGP-hSbMXJbma6zkg==
Age: 1858
cm.everesttech.net/cm/dd?d_uuid=01349378013683560894080885980770768844
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=01349378013683560894080885980770768844
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=01349378013683560894080885980770768844 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Thu, 15 Sep 2022 21:06:51 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~YyOT6wAAAJFdTANx; Domain=.everesttech.net; Expires=Fri, 15-Sep-2023 21:06:51 GMT; Path=/
everest_session_v2=YyOT6wAAAJFdTQNx; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=YyOT6wAAAJFdTANx
Server: AMO-cookiemap/1.1
bat.bing.com/action/0?ti=5163411&Ver=2&mid=213e9f14-447d-43c6-92ff-0bae2f18bbbb&sid=4858eb00353a11edb24ebb156570f663&vid=4858f0f0353a11ed98f1bfa41ba9597c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=ERROR%20404&p=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&r=<=2407&evt=pageLoad&sv=1&rn=88861
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5163411&Ver=2&mid=213e9f14-447d-43c6-92ff-0bae2f18bbbb&sid=4858eb00353a11edb24ebb156570f663&vid=4858f0f0353a11ed98f1bfa41ba9597c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=ERROR%20404&p=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&r=<=2407&evt=pageLoad&sv=1&rn=88861
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5163411&Ver=2&mid=213e9f14-447d-43c6-92ff-0bae2f18bbbb&sid=4858eb00353a11edb24ebb156570f663&vid=4858f0f0353a11ed98f1bfa41ba9597c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=ERROR%20404&p=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&r=<=2407&evt=pageLoad&sv=1&rn=88861 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=11F8EB6D58886CA70309F94D597D6D27; domain=.bing.com; expires=Tue, 10-Oct-2023 21:06:51 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7F299ECBE7FC4FF0BA13F3990F063E42 Ref B: OSL30EDGE0211 Ref C: 2022-09-15T21:06:51Z
date: Thu, 15 Sep 2022 21:06:50 GMT
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=YyOT6wAAAJFdTANx
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=YyOT6wAAAJFdTANx
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=YyOT6wAAAJFdTANx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v040-070fe68dc.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyOT6wAAAJFdTANx
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=91027573258356186722949815863714130971; Max-Age=15552000; Expires=Tue, 14 Mar 2023 21:06:51 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: 4uU+DfO9SfI=
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/ddm/activity/src=11939028;type=track0;cat=meemi0;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=orderID
302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=11939028;type=track0;cat=meemi0;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=orderID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=11939028;type=track0;cat=meemi0;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=orderID HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=11939028;type=track0;cat=meemi0;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;gdpr=$%7BGDPR%7D;gdpr_consent=$%7BGDPR_CONSENT_755%7D;ord=orderID;~oref=https://www.mandarinoriental.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041
302 Found 462 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 26c1d62872c7724cd9f0f131ccfadbe3
6e1046e93035a1b735a7b9ea77539a593648eb11
fc08e64d8b7b7fe307c1eb95e71ea9e4155d36a22d8eb04009c83006c00c08ae
GET /pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041&google_tc=
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 462
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 9f1902a324f55fca310b747e5c0cbacd
f72096f7537df1650a1d97515c5ce369b9f3dac4
bb8896356c8bb5ba25dd07ca814989a609aed89a1c9be89d225b576ab9ebff38
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 21:06:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 19 Sep 2022 19:26:01 GMT
ETag: "f72096f7537df1650a1d97515c5ce369b9f3dac4"
Last-Modified: Thu, 15 Sep 2022 19:26:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 132
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b4541f08a81c16-OSL
ad.doubleclick.net/ddm/activity/src=8901673;type=sales;cat=klup46zu;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID]
302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=8901673;type=sales;cat=klup46zu;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID]
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=8901673;type=sales;cat=klup46zu;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID] HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=8901673;type=sales;cat=klup46zu;qty=1;cost=0;u1=;u16=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://www.mandarinoriental.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127
302 Found 461 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 67c7e024b20d0be34cc0583a3f3218ad
8be56cd3fc0f07fdff4134a7167ba269ac3995da
c79bda5c9d8c314ecc6bbe0902bdc4ff169405fbfd35db9d0ff2d5c86ef54074
GET /pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127&google_tc=
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 461
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/954648378/?random=1663275995699&cv=9&fst=1663275995699&num=1&label=owJyCJzi2nkQuo6bxwM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&tiba=ERROR%20404&auid=1893307878.1663275995&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/954648378/?random=1663275995699&cv=9&fst=1663275995699&num=1&label=owJyCJzi2nkQuo6bxwM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&tiba=ERROR%20404&auid=1893307878.1663275995&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2293), with no line terminators
Hash 73005bc0ebd4d96a5a891c7344a370bc
fadcfca5ef5d76f3fd7eb2db9f9efe62627ba2aa
3b220a159b323e7ee1abc6104de5708558b8522fd23e3cf04b5f0bbec63f5594
GET /pagead/viewthroughconversion/954648378/?random=1663275995699&cv=9&fst=1663275995699&num=1&label=owJyCJzi2nkQuo6bxwM&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&tiba=ERROR%20404&auid=1893307878.1663275995&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1069
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyOT6wAAAJFdTANx
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyOT6wAAAJFdTANx
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=YyOT6wAAAJFdTANx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v040-0c7a2f69b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: uCGkTyEjSk4=
Content-Length: 59
Connection: keep-alive
ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 15 Sep 2022 21:06:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DO8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt
AN-X-Request-Uuid: 493b922e-caff-4da0-86ea-db1b10ea28bc
Set-Cookie: uuid2=2798447155779082600; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 14-Dec-2022 21:06:51 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
s.pinimg.com/ct/lib/main.55e552f9.js
200 OK 19 kB URL HTTP/2 s.pinimg.com/ct/lib/main.55e552f9.js
IP
File type Unicode text, UTF-8 text, with very long lines (54284), with no line terminators
Hash 84c1602180f73853dc1e35f7296bdf7d
40aea44ea928e8d539381759b791f5c70f6d4c82
6b2faea09b5d5015a36ab4300e1034e1907895b40249e5fd11b42a66fbd21dac
GET /ct/lib/main.55e552f9.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "84c1602180f73853dc1e35f7296bdf7d"
content-encoding: gzip
accept-ranges: bytes
content-type: application/javascript
content-length: 18601
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.g.doubleclick.net/pixel?google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern_adh
302 Found 305 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern_adh
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash a016a407a9cec4fd23214519ac658412
20d472ba54e0ea11138942f19c1d6c0bc57e0fb7
46ea4996d59ca10db104d37136233decf81f062a6dec3fc059b4db8f58eda9eb
GET /pixel?google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern_adh HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern_adh&google_tc=
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 305
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 21:21:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041&google_tc=
302 Found 371 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 7a2c9654c642240c7c2f9bbad70ce856
51d30393ff73aef7f86a07272ea12d25873fe19e
b7f6f7f713574cb4e60ce73a76ddf89d3434fd54422b95357f30cdb34c2e88b9
GET /pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://pixel.sojern.com/idSync/AdX?exchangeProfileId=&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=7213079041&google_error=3
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 371
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127&google_tc=
302 Found 370 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 04741f9893ca9ee31c5dc145cdf51ed5
3a304ef584db862b70a1e4278c793d9d296700b7
a258cd33b0c286c5dad3882c0797cf23cece17c8d34f2c4a590dbecdda97e3b5
GET /pixel?google_cm=true&google_hm=EH9PuvjjVwgnXovYM9XajQ&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://pixel.sojern.com/idSync/AdX?exchangeProfileId=&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&sjrn_ula=785816127&google_error=3
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 370
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3829449%26time%3D1663275995623%26url%3Dhttps%253A%252F%252Fwww.mandarinoriental.com%252Fen%252Fritzmadrid%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQIrObSzPyV0IQAAAYNC-c9t09APhvxjNkSv0XRLAL6K9EQwDZHZ3LnQ8JHZQ5eMKGOtZ_258X7OHw; Max-Age=2592000; Expires=Sat, 15 Oct 2022 21:06:51 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJvU_ZWerbDrgAAAYNC-c9tlrzZWA3MbdbnpgHj113D4DsfTkbOTKM95I6eN4wrQ3tkfZIQ9b0UcmEviJbKNA; Max-Age=2592000; Expires=Sat, 15 Oct 2022 21:06:51 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&67826689-429b-4fa0-8b74-aec250140e77"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 15-Sep-2023 21:06:51 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2386:u=1:x=1:i=1663276011:t=1663362411:v=2:sig=AQHBJa3IRauhScS0KhYeLfW28z4iA8iR"; Expires=Fri, 16 Sep 2022 21:06:51 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXovZ/SHu3AjyylxY7mSQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 313311DA98CB4FE095CC53F0EE516344 Ref B: OSL30EDGE0308 Ref C: 2022-09-15T21:06:51Z
date: Thu, 15 Sep 2022 21:06:51 GMT
content-length: 0
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:51 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-66854808-3&cid=1113458513.1663275995&jid=1241616711&gjid=1130650455&_gid=252781395.1663275996&_u=aADAAEAAQAAAAC~&z=1406267960
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-66854808-3&cid=1113458513.1663275995&jid=1241616711&gjid=1130650455&_gid=252781395.1663275996&_u=aADAAEAAQAAAAC~&z=1406267960
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-66854808-3&cid=1113458513.1663275995&jid=1241616711&gjid=1130650455&_gid=252781395.1663275996&_u=aADAAEAAQAAAAC~&z=1406267960 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.mandarinoriental.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f94c38b92316f91765ceed606f9f4ea
03442fbbe884ceac60c9585a8bbc0b87278523fd
70df317dbe22ae71bcc285fc0ea2185a11822856187a6c235c758df3f63eb75f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/5163411.js
200 OK 666 B URL HTTP/2 bat.bing.com/p/action/5163411.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash f2c9686c007820cdf65b24286f95c6f9
cdef36a995a541d5f75a2a22e1df6438e278ac8b
00da952cc7472c1bcb4f8a2a766705a479eb26f667f0bb9b98805feb206119bd
GET /p/action/5163411.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 666
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=39EB91CEF51A6A9825CE83EEF4EF6B66; domain=.bing.com; expires=Tue, 10-Oct-2023 21:06:51 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 43A7725349AC4475B9462D361B2C36FE Ref B: OSL30EDGE0211 Ref C: 2022-09-15T21:06:51Z
date: Thu, 15 Sep 2022 21:06:50 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cfd2db57907a02add07cc8f727a30ca6
f9a6f8af7868c0be0a22fee404e0b07cf737bbaa
d8bac3b77cb2732588815a8bcb3ad6a49e518f04f99bf20513d91ffb30eee947
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 848674a3bc6b0d4d6cba22b140c574bc
ec95f08f3a5b022c3753f78e30f71d03e2895d78
069aaae82ec20e5bbcc694f9603bded464798891e5e2abc27baadeace22f6a05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-FSQWZL83JH>m=2oe9e0&_p=752919100&cid=1113458513.1663275995&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663275995&sct=1&seg=0&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&dt=ERROR%20404&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-FSQWZL83JH>m=2oe9e0&_p=752919100&cid=1113458513.1663275995&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663275995&sct=1&seg=0&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&dt=ERROR%20404&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FSQWZL83JH>m=2oe9e0&_p=752919100&cid=1113458513.1663275995&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663275995&sct=1&seg=0&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&dt=ERROR%20404&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.mandarinoriental.com
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mohg.sc.omtrdc.net/b/ss/mohgglobalprod/1/JS-2.22.0-LBSQ/s7915289832671?AQB=1&ndh=1&pf=1&t=15%2F8%2F2022%2021%3A6%3A35%204%200&mid=01314541234131589704084300655981686543&aamlh=6&ns=mohg&cdp=2&fpCookieDomainPeriods=2&pageName=home%20%3E%3E%20error%20%3E%3E%20404&g=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&ch=home%20-%20error%20-%20404&server=www.mandarinoriental.com&events=event21&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=global&c2=english&c3=responsive&c4=global%7Cenglish%7Cresponsive&c5=New%20Visit&v5=D%3Dc5&c19=Generic%20page&c20=http%3A%2F%2Fmo-com-prd-origin.sitecore.moweb-acc.com%2Fen%2Fritzmadrid&v25=D%3Dc1&v26=D%3Dc2&v27=D%3Dc3&v28=D%3Dc4&v29=D%3DpageName&v36=D%3Dc20&c38=D%3Dv38&v38=Thursday%2C%2010%3A00PM&v39=D%3Dch&c40=Generic%20page&c48=visitor&v48=D%3Dc48&v57=%2B1&v63=Generic%20page&v72=event21&c74=mohgglobalprod&c75=Launch%3A2020.04.26&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 mohg.sc.omtrdc.net/b/ss/mohgglobalprod/1/JS-2.22.0-LBSQ/s7915289832671?AQB=1&ndh=1&pf=1&t=15%2F8%2F2022%2021%3A6%3A35%204%200&mid=01314541234131589704084300655981686543&aamlh=6&ns=mohg&cdp=2&fpCookieDomainPeriods=2&pageName=home%20%3E%3E%20error%20%3E%3E%20404&g=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&ch=home%20-%20error%20-%20404&server=www.mandarinoriental.com&events=event21&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=global&c2=english&c3=responsive&c4=global%7Cenglish%7Cresponsive&c5=New%20Visit&v5=D%3Dc5&c19=Generic%20page&c20=http%3A%2F%2Fmo-com-prd-origin.sitecore.moweb-acc.com%2Fen%2Fritzmadrid&v25=D%3Dc1&v26=D%3Dc2&v27=D%3Dc3&v28=D%3Dc4&v29=D%3DpageName&v36=D%3Dc20&c38=D%3Dv38&v38=Thursday%2C%2010%3A00PM&v39=D%3Dch&c40=Generic%20page&c48=visitor&v48=D%3Dc48&v57=%2B1&v63=Generic%20page&v72=event21&c74=mohgglobalprod&c75=Launch%3A2020.04.26&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
POST /b/ss/mohgglobalprod/1/JS-2.22.0-LBSQ/s7915289832671?AQB=1&ndh=1&pf=1&t=15%2F8%2F2022%2021%3A6%3A35%204%200&mid=01314541234131589704084300655981686543&aamlh=6&ns=mohg&cdp=2&fpCookieDomainPeriods=2&pageName=home%20%3E%3E%20error%20%3E%3E%20404&g=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&ch=home%20-%20error%20-%20404&server=www.mandarinoriental.com&events=event21&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=global&c2=english&c3=responsive&c4=global%7Cenglish%7Cresponsive&c5=New%20Visit&v5=D%3Dc5&c19=Generic%20page&c20=http%3A%2F%2Fmo-com-prd-origin.sitecore.moweb-acc.com%2Fen%2Fritzmadrid&v25=D%3Dc1&v26=D%3Dc2&v27=D%3Dc3&v28=D%3Dc4&v29=D%3DpageName&v36=D%3Dc20&c38=D%3Dv38&v38=Thursday%2C%2010%3A00PM&v39=D%3Dch&c40=Generic%20page&c48=visitor&v48=D%3Dc48&v57=%2B1&v63=Generic%20page&v72=event21&c74=mohgglobalprod&c75=Launch%3A2020.04.26&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&AQE=1 HTTP/1.1
Host: mohg.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.mandarinoriental.com
access-control-allow-credentials: true
date: Thu, 15 Sep 2022 21:06:51 GMT
expires: Wed, 14 Sep 2022 21:06:51 GMT
last-modified: Fri, 16 Sep 2022 21:06:51 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3571858036042924032-4619617757400273749
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DO8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DO8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DO8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Thu, 15 Sep 2022 21:06:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://pixel.sojern.com/idsync/apn?id=0&sjrn_id=O8aavMQf-wG0u46naLDrIkM8rIEyI0dOgl4oyjBp6ig0NGx-AqjWwKSTmNH0eQtt
AN-X-Request-Uuid: f011b244-2d9e-42b8-9e84-f4bee49ecc21
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-66854808-3&cid=1113458513.1663275995&jid=1241616711&_u=aADAAEAAQAAAAC~&z=1011399913
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-66854808-3&cid=1113458513.1663275995&jid=1241616711&_u=aADAAEAAQAAAAC~&z=1011399913
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-66854808-3&cid=1113458513.1663275995&jid=1241616711&_u=aADAAEAAQAAAAC~&z=1011399913 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/954648378/?random=1663275995699&cv=9&fst=1663275600000&num=1&label=owJyCJzi2nkQuo6bxwM&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&frm=0&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&tiba=ERROR%20404&async=1&fmt=3&is_vtc=1&random=4052842409&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/954648378/?random=1663275995699&cv=9&fst=1663275600000&num=1&label=owJyCJzi2nkQuo6bxwM&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&frm=0&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&tiba=ERROR%20404&async=1&fmt=3&is_vtc=1&random=4052842409&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/954648378/?random=1663275995699&cv=9&fst=1663275600000&num=1&label=owJyCJzi2nkQuo6bxwM&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&frm=0&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&tiba=ERROR%20404&async=1&fmt=3&is_vtc=1&random=4052842409&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Sep 2022 21:06:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2612907490748&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663275995968
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2612907490748&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663275995968
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2612907490748&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1663275995968 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1393243145843390
date: Thu, 15 Sep 2022 21:06:51 GMT
akamai-grn: 0.274f2417.1663276011.3378490
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db503d6c6780cb1b8dfeffa10a50eada
51a459bdc02f20576031f526be6788f653095d94
b7a653d3c381c6cea5b6838aea01a7de8ea5c2d8bdf5ff92c4cd5c22829c8e8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 21:06:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ct.pinterest.com/user/?tid=2612907490748&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%7D&cb=1663275995967
200 OK 378 B URL HTTP/2 ct.pinterest.com/user/?tid=2612907490748&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%7D&cb=1663275995967
IP
File type JSON data\012- , ASCII text, with very long lines (540), with no line terminators
Hash 3552f5f146470ca7ebc456b2595776c5
a4baaddc1ef324c9e169da6b1e21f33210cdf86b
3c8d06b1f641094d99da191134bcff7e255ef67f45967db4a1ec4a9c2f381068
GET /user/?tid=2612907490748&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%7D&cb=1663275995967 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVlURmhNalprTVdVdE1XRTFNeTAwTm1KaUxUbG1OMll0WmpsaE9EaGxNelUxTlRjMA
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.mandarinoriental.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 378
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 7272278668887653
date: Thu, 15 Sep 2022 21:06:51 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1663276011.33784ab
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3829449%26time%3D1663275995623%26url%3Dhttps%253A%252F%252Fwww.mandarinoriental.com%252Fen%252Fritzmadrid%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3829449%26time%3D1663275995623%26url%3Dhttps%253A%252F%252Fwww.mandarinoriental.com%252Fen%252Fritzmadrid%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3829449%26time%3D1663275995623%26url%3Dhttps%253A%252F%252Fwww.mandarinoriental.com%252Fen%252Fritzmadrid%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&d103c144-c37c-4ef1-8878-33bd28fce8d7"; Domain=.linkedin.com; Expires=Fri, 15-Sep-2023 21:06:51 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20220915210651e20d1939-3091-4746-83bd-379dab9db949AQHViidr24VNR6Ndezch0ZIjuqkFpiOr"; Domain=.www.linkedin.com; Expires=Fri, 15-Sep-2023 21:06:51 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjMyNzYwMTE7MjswMjELit5fMCZiwoGuMih0tlMTekFJ+EcxniAVPb207KMagw==; Domain=.linkedin.com; Expires=Tue, 14 Mar 2023 21:06:51 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2383:u=1:x=1:i=1663276011:t=1663362411:v=2:sig=AQGSVfq4WEM2NPvYIQ8r0jseF5agrzxd"; Expires=Fri, 16 Sep 2022 21:06:51 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXovZ/W7UkauHFMMTzyHw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 8BA8EAF48114487E9B3134343DC3F762 Ref B: OSL30EDGE0308 Ref C: 2022-09-15T21:06:51Z
date: Thu, 15 Sep 2022 21:06:51 GMT
content-length: 0
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/conversion.js
200 OK 2.1 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/conversion.js
IP
ASN #23816 Yahoo Japan Corporation
File type ASCII text, with very long lines (5916), with no line terminators
Hash 7f0c66912062f79b500f784ef684772c
593e742f13af825a35b6f53a31ff9c7f657e1577
a2fa9e94110a358da7f9597072da76a107b72ef8700a7626a21cbbb216d51bdf
GET /images/listing/tool/cv/conversion.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 15 Sep 2022 20:57:42 GMT
vary: Accept-Encoding
last-modified: Tue, 25 Jan 2022 16:25:04 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
age: 549
content-length: 2140
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 5676058122532301
date: Thu, 15 Sep 2022 21:06:51 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1663276011.33787a4
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3829449&time=1663275995623&url=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&fa4dde01-a9c7-4ad4-83ee-dec6d44bd43f"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 15-Sep-2023 21:06:51 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2344:u=1:x=1:i=1663276011:t=1663362411:v=2:sig=AQGjVpXT54s2TVQ0zifVbGcGK5wtrq70"; Expires=Fri, 16 Sep 2022 21:06:51 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXovZ/ZwOWsqf7ixEcqxA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E6ED0A81BC894E91B3FCB7F794FA7D09 Ref B: OSL30EDGE0308 Ref C: 2022-09-15T21:06:51Z
date: Thu, 15 Sep 2022 21:06:51 GMT
content-length: 0
X-Firefox-Spdy: h2
mohg.sc.omtrdc.net/b/ss/mohgglobalprod/1/JS-2.22.0-LBSQ/s77784951613150?AQB=1&ndh=1&pf=1&t=15%2F8%2F2022%2021%3A6%3A35%204%200&mid=01314541234131589704084300655981686543&aamlh=6&ns=mohg&cdp=2&fpCookieDomainPeriods=2&pageName=home%20%3E%3E%20error%20%3E%3E%20404&g=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&ch=home%20-%20error%20-%20404&server=www.mandarinoriental.com&events=event23&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=global&c2=english&c3=responsive&c4=global%7Cenglish%7Cresponsive&c5=New%20Visit&v5=D%3Dc5&c13=home%20%3E%3E%20error%20%3E%3E%20404&c19=Generic%20page&c20=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&v25=D%3Dc1&v26=D%3Dc2&v27=D%3Dc3&v28=D%3Dc4&v29=D%3DpageName&v36=D%3Dc20&c38=D%3Dv38&v38=Thursday%2C%2010%3A00PM&v39=D%3Dch&c40=Generic%20page&v40=D%3Dc13&c48=visitor&v48=D%3Dc48&v57=%2B1&v63=Generic%20page&v72=event23&c74=mohgglobalprod&c75=Launch%3A2020.04.26&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 mohg.sc.omtrdc.net/b/ss/mohgglobalprod/1/JS-2.22.0-LBSQ/s77784951613150?AQB=1&ndh=1&pf=1&t=15%2F8%2F2022%2021%3A6%3A35%204%200&mid=01314541234131589704084300655981686543&aamlh=6&ns=mohg&cdp=2&fpCookieDomainPeriods=2&pageName=home%20%3E%3E%20error%20%3E%3E%20404&g=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&ch=home%20-%20error%20-%20404&server=www.mandarinoriental.com&events=event23&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=global&c2=english&c3=responsive&c4=global%7Cenglish%7Cresponsive&c5=New%20Visit&v5=D%3Dc5&c13=home%20%3E%3E%20error%20%3E%3E%20404&c19=Generic%20page&c20=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&v25=D%3Dc1&v26=D%3Dc2&v27=D%3Dc3&v28=D%3Dc4&v29=D%3DpageName&v36=D%3Dc20&c38=D%3Dv38&v38=Thursday%2C%2010%3A00PM&v39=D%3Dch&c40=Generic%20page&v40=D%3Dc13&c48=visitor&v48=D%3Dc48&v57=%2B1&v63=Generic%20page&v72=event23&c74=mohgglobalprod&c75=Launch%3A2020.04.26&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
POST /b/ss/mohgglobalprod/1/JS-2.22.0-LBSQ/s77784951613150?AQB=1&ndh=1&pf=1&t=15%2F8%2F2022%2021%3A6%3A35%204%200&mid=01314541234131589704084300655981686543&aamlh=6&ns=mohg&cdp=2&fpCookieDomainPeriods=2&pageName=home%20%3E%3E%20error%20%3E%3E%20404&g=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&ch=home%20-%20error%20-%20404&server=www.mandarinoriental.com&events=event23&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=global&c2=english&c3=responsive&c4=global%7Cenglish%7Cresponsive&c5=New%20Visit&v5=D%3Dc5&c13=home%20%3E%3E%20error%20%3E%3E%20404&c19=Generic%20page&c20=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&v25=D%3Dc1&v26=D%3Dc2&v27=D%3Dc3&v28=D%3Dc4&v29=D%3DpageName&v36=D%3Dc20&c38=D%3Dv38&v38=Thursday%2C%2010%3A00PM&v39=D%3Dch&c40=Generic%20page&v40=D%3Dc13&c48=visitor&v48=D%3Dc48&v57=%2B1&v63=Generic%20page&v72=event23&c74=mohgglobalprod&c75=Launch%3A2020.04.26&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=0DD8210654E6C7380A4C98A7%40AdobeOrg&AQE=1 HTTP/1.1
Host: mohg.sc.omtrdc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.mandarinoriental.com
access-control-allow-credentials: true
date: Thu, 15 Sep 2022 21:06:51 GMT
expires: Wed, 14 Sep 2022 21:06:51 GMT
last-modified: Fri, 16 Sep 2022 21:06:51 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3571858036593852416-4619369798198902125
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.jp/images/listing/tool/cv/ytag.js
200 OK 9.8 kB URL HTTP/2 s.yimg.jp/images/listing/tool/cv/ytag.js
IP
ASN #23816 Yahoo Japan Corporation
File type ASCII text, with very long lines (32042), with no line terminators
Hash 756de2120f79f1aa501b0e0b490dca58
4a4b8d596749960af503ec1309b6bd821a7bdbf3
128c1c4b2018808bbe4ec25198b92ef894df5a131cf0ca647dbd3ada66ba939e
GET /images/listing/tool/cv/ytag.js HTTP/1.1
Host: s.yimg.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 15 Sep 2022 20:57:11 GMT
vary: Accept-Encoding
last-modified: Tue, 30 Aug 2022 04:48:29 GMT
cache-control: public, max-age=600
content-encoding: gzip
server: ATS
age: 580
content-length: 9790
ats-carp-promotion: 1
x-z-chihaya: r=1
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1999997976739764&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996709&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%221099175490873287%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22EUR%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22768105457133290%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22THB%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%22360347335913213%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22773962180145479%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1999997976739764&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996709&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%221099175490873287%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22EUR%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22768105457133290%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22THB%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%22360347335913213%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22773962180145479%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1999997976739764&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996709&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%221099175490873287%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22EUR%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22768105457133290%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22THB%22%7D%7D%7D&par[2]=%7B%22extractorID%22%3A%22360347335913213%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&par[3]=%7B%22extractorID%22%3A%22773962180145479%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 21:06:52 GMT
expires: Thu, 15 Sep 2022 21:06:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2027228744003147&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996713&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=2027228744003147&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996713&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=2027228744003147&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996713&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 21:06:52 GMT
expires: Thu, 15 Sep 2022 21:06:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2027228744003147&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996717&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=2027228744003147&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996717&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=2027228744003147&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996717&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 21:06:52 GMT
expires: Thu, 15 Sep 2022 21:06:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1746637695582245&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996711&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1746637695582245&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996711&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1746637695582245&ev=PageView&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996711&sw=1280&sh=1024&v=2.9.81&r=stable&ec=0&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 21:06:52 GMT
expires: Thu, 15 Sep 2022 21:06:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1746637695582245&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996716&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1746637695582245&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996716&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1746637695582245&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996716&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 21:06:52 GMT
expires: Thu, 15 Sep 2022 21:06:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1999997976739764&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996714&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1999997976739764&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996714&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1999997976739764&ev=ViewContent&dl=https%3A%2F%2Fwww.mandarinoriental.com%2Fen%2Fritzmadrid&rl=&if=false&ts=1663275996714&cd[content_name]=home%20%3E%3E%20error%20%3E%3E%20404&cd[content_ids]=%5B%22GLOBAL%22%2C%22Website%22%2C%22Error%22%2C%22404%22%5D&cd[content_type]=product&sw=1280&sh=1024&v=2.9.81&r=stable&ec=1&o=30&fbp=fb.1.1663275996708.496226669&it=1663275996206&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Thu, 15 Sep 2022 21:06:52 GMT
expires: Thu, 15 Sep 2022 21:06:52 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&RedC=c.clarity.ms&MXFR=13705FC8E1DD686702354DE8E5DD66B6
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=13705FC8E1DD686702354DE8E5DD66B6; domain=.clarity.ms; expires=Tue, 10-Oct-2023 21:06:52 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 15 Sep 2022 21:06:52 GMT
content-length: 0
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&RedC=c.clarity.ms&MXFR=13705FC8E1DD686702354DE8E5DD66B6
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&RedC=c.clarity.ms&MXFR=13705FC8E1DD686702354DE8E5DD66B6
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&RedC=c.clarity.ms&MXFR=13705FC8E1DD686702354DE8E5DD66B6 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&MUID=0C053CA616D36D710A8E2E8617266C05
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0C053CA616D36D710A8E2E8617266C05; domain=c.bing.com; expires=Tue, 10-Oct-2023 21:06:52 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C2786124BCF3452985C7E9D39602BFFA Ref B: OSL30EDGE0211 Ref C: 2022-09-15T21:06:52Z
date: Thu, 15 Sep 2022 21:06:51 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&MUID=0C053CA616D36D710A8E2E8617266C05
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&MUID=0C053CA616D36D710A8E2E8617266C05
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=7B2A2FD8A3BC4CC48CEC16DACE40DFAE&MUID=0C053CA616D36D710A8E2E8617266C05 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 13 Sep 2022 19:54:52 GMT
accept-ranges: bytes
etag: "8d3298b0aac7d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 15-Sep-2022 21:16:52 GMT; path=/; SameSite=None; Secure;
date: Thu, 15 Sep 2022 21:06:52 GMT
content-length: 42
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.40/clarity.js
200 OK 23 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54745)
Hash 6a87d835543a151541da0ae963173dd7
80bac2abc74d2fa93a63ff82514fd64ee8caf9a0
c806647a143cb92f41ed1e60c6be245cd4e78b447c90adbed881ca54ecfa7337
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8bd4806fdad30"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 07JMjYwAAAAD0hG/yrUT+TqFmnWgiJbU1RFhCMzBFREdFMDIxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 15 Sep 2022 21:06:52 GMT
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 124449
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.mandarinoriental.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Thu, 15 Sep 2022 21:06:52 GMT
X-Firefox-Spdy: h2
privacyportal-de.onetrust.com/request/v1/consentreceipts
201 Created 0 B URL HTTP/2 privacyportal-de.onetrust.com/request/v1/consentreceipts
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Generic/Spear Phishing
POST /request/v1/consentreceipts HTTP/1.1
Host: privacyportal-de.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 6496
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Thu, 15 Sep 2022 21:06:57 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74b454440fd2b4fd-OSL
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/5163411
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/uet/5163411
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/uet/5163411 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=c37aed93aa4f4376bc5ff03bed48b971.20220915.20230915; expires=Fri, 15 Sep 2023 21:06:52 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:3d284f99-f285-495c-ac33-dedd7ecf1ac8
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 07JMjYwAAAADHxXqCD1BhQo83L/z5Zj0/RFhCMzBFREdFMDIxNAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 15 Sep 2022 21:06:51 GMT
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 0 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Referer: https://www.mandarinoriental.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:49 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74b454149a06b51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
IP
GET /scripttemplates/6.22.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mandarinoriental.com/
Origin: https://www.mandarinoriental.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Sep 2022 21:06:50 GMT
content-type: text/css
content-md5: F/Fs54+x9bQK/ULkNRp4fA==
last-modified: Thu, 19 Aug 2021 02:39:24 GMT
x-ms-request-id: f760b03e-e01e-0057-79e5-be316b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 333
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74b4541bebf20b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
23.53.52.112
107.178.244.119
23.38.200.197
52.49.84.111
182.22.31.124
104.18.21.226
93.184.220.29
13.36.218.177
185.89.211.132