firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash cd8d0809aa5948f2a6ee41d2158861af
098cd24ac587cdc70137af412678526de4d43969
88e6741d6bf076bf7132c7cf98456702cc775476095aafd839888edff52fb03e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Alert, Retry-After, Content-Length, Content-Type
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 25 Oct 2022 09:51:50 GMT
Expires: Tue, 25 Oct 2022 09:55:11 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pTt5zQ2Y6hkeJNFknRzUXJYdWnsAL2IorFksJMaRjMAndaeBTvmTJw==
Age: 246
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13002
Expires: Tue, 25 Oct 2022 13:32:38 GMT
Date: Tue, 25 Oct 2022 09:55:56 GMT
Connection: keep-alive
ntlla.com/
200 OK 329 B IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: ntlla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Tue, 25 Oct 2022 09:55:56 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13812
Expires: Tue, 25 Oct 2022 13:46:08 GMT
Date: Tue, 25 Oct 2022 09:55:56 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PBAY8Oo40C3ke/T7dZ01z5YFFdnA1AQFgzohZbBhShtr7Jow7jyxOg+lFXnzn2z7ATFsDaoqVX8=
x-amz-request-id: G3FQH2G4392DCQZ2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 09:08:53 GMT
age: 2823
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 09:55:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 6f8923631d6f6f443fb0cb48eb719ad3
dc3cd4693ab796392aa172ad765d422091283f5d
6333ac05f2b0fead32009387e072e7a59b4f380cbf7a382f44b0d5137e9e2bb8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3706
Cache-Control: max-age=124250
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:56 GMT
Etag: "6356e68c-117"
Expires: Wed, 26 Oct 2022 20:26:46 GMT
Last-Modified: Mon, 24 Oct 2022 19:25:00 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ntlla.com
Connection: keep-alive
Referer: http://ntlla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:55:56 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 12135460
expires: Sun, 15 Oct 2023 09:55:56 GMT
accept-ranges: bytes
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75fa145509bb0b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 6f8923631d6f6f443fb0cb48eb719ad3
dc3cd4693ab796392aa172ad765d422091283f5d
6333ac05f2b0fead32009387e072e7a59b4f380cbf7a382f44b0d5137e9e2bb8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3706
Cache-Control: max-age=124250
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:56 GMT
Etag: "6356e68c-117"
Expires: Wed, 26 Oct 2022 20:26:46 GMT
Last-Modified: Mon, 24 Oct 2022 19:25:00 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 90720b1606f171b02e58fa86a83771a0
4e8664311209f2c538dbc2daf9eb19a5d6eb3e1a
7e1057a77941532000391df571b61986c973f9795ef7761471774488f0ec2950
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "7E1057A77941532000391DF571B61986C973F9795EF7761471774488F0EC2950"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11203
Expires: Tue, 25 Oct 2022 13:02:39 GMT
Date: Tue, 25 Oct 2022 09:55:56 GMT
Connection: keep-alive
domaincntrol.com/?orighost=http://ntlla.com/
200 OK 22 B URL HTTP/2 domaincntrol.com/?orighost=http://ntlla.com/
IP
File type ASCII text, with no line terminators
Hash cafe65cf246e1aae92124c1954480ad6
0d08cc547c58b2138e1e391931f20a5984067595
cc2201723d394dfd8b3fc6d1e27fc2a17631d3a5f7aefc04bad36d43f285ba9b
GET /?orighost=http://ntlla.com/ HTTP/1.1
Host: domaincntrol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ntlla.com
Connection: keep-alive
Referer: http://ntlla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:55:56 GMT
content-type: text/javascript;charset=UTF-8
content-length: 22
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IE8w9nLRXX4RYGzk8AuKC%2BL%2BYGw08L34WZm%2BLTvxHLAKiP4cZuXbGC4WixzeE0LnCCkVzoh%2Bigi9T3IsFr8DBjPCkvn4ficv5dP90u4M8oSfzdlCztBg6Pl2ZQp60E4zBlA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fa1455fde11c06-OSL
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 25 Oct 2022 09:33:32 GMT
Cache-Control: max-age=3600
Expires: Tue, 25 Oct 2022 10:11:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cjVk8Gi4oa1bg-l86HFrhFd6IEmN-UY30QRdMI5XU7Os1WNoaS0xvQ==
Age: 1344
ocsp.digicert.com/
200 OK 471 B IP
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5873
Cache-Control: max-age=172124
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:57 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:44:41 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LR59nLWDzneRQhUCjA6Umw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 62PL0/wVGsGAjsAoku5TG4/Ls60=
ww2.ntlla.com/
200 OK 1.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (676)
Hash 34df6c99875e3493ec4be3b280b043fc
e9388689fa312ac70b7bcf456706eebc8006aed7
c90692344154fa324038ef4ee871e4111b988f089d74cdac4a68d5f302743e96
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: ww2.ntlla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ntlla.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Tue, 25 Oct 2022 09:55:57 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_CmG/xZ8ZWcXuja4rW7Bu3CNGhgHZJ4oMRrmc+4dvlx+kFINzI5nDvb8eGZBMAdw0M6jjXfRU0B4cdzXdocXvzw==
last-modified: Tue, 25 Oct 2022 09:55:56 GMT
x-cache-miss-from: parking-66c47b9f9b-ppxb4
server: NginX
content-encoding: gzip
ww2.ntlla.com/search/tsc.php?200=NDM0Nzc1ODA1&21=OTEuOTAuNDIuMTU0&681=MTY2NjY5MTc1N2I1MTIxODRjODdhYTNlMmVkMGNjM2MyYzViN2ZkNDFh&crc=81ee4d8fa2716a5b9035ace875307465fda58813&cv=1
200 OK 0 B URL HTTP/1.1 ww2.ntlla.com/search/tsc.php?200=NDM0Nzc1ODA1&21=OTEuOTAuNDIuMTU0&681=MTY2NjY5MTc1N2I1MTIxODRjODdhYTNlMmVkMGNjM2MyYzViN2ZkNDFh&crc=81ee4d8fa2716a5b9035ace875307465fda58813&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tsc.php?200=NDM0Nzc1ODA1&21=OTEuOTAuNDIuMTU0&681=MTY2NjY5MTc1N2I1MTIxODRjODdhYTNlMmVkMGNjM2MyYzViN2ZkNDFh&crc=81ee4d8fa2716a5b9035ace875307465fda58813&cv=1 HTTP/1.1
Host: ww2.ntlla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.ntlla.com/
HTTP/1.1 200 OK
date: Tue, 25 Oct 2022 09:55:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
x-cache-miss-from: parking-66c47b9f9b-pv4dk
server: NginX
img.sedoparking.com/images/js_preloader.gif
200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.ntlla.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 09:55:57 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Tue, 01 Nov 2022 09:55:57 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: a54ae6f61938e00e9aab7a4f6509ffe3
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
img.sedoparking.com/templates/logos/sedo_logo.png
200 OK 1.4 kB URL HTTP/1.1 img.sedoparking.com/templates/logos/sedo_logo.png
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 8277d69112b4d4bb08fd2e4fa08083e3
060aabc4bce09ac176163773c01576a65ea82f79
08f4d61802be4a43691b32906054ce86fe88526f39658fb202b8920ae49debb1
GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.ntlla.com/
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 09:55:57 GMT
Content-Type: image/png
Content-Length: 15086
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Tue, 01 Nov 2022 09:55:57 GMT
X-CFHash: "def00c11b1596db4efee6a9fbe64fc27"
X-CFF: B
Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT
X-CF3: H
CF4Age: 10
x-cf-tsc: 1665141939
CF4ttl: 31536000.000
X-CF2: M
Server: CFS 0215
X-CF-ReqID: a465c4f172ae7f286f1c7e7976dfc478
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww2.ntlla.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DmbVRX42mxPc_0&v=Yzk0OTYyN2Q3NzY3MmZkNzc1ZTBkMjUwYzZmYWQ2YjQJMQl3dzIubnRsbGEuY29tNjM1N2IyYWM5NzI5MTcuNjc0ODMzMzAJd3cyLm50bGxhLmNvbTYzNTdiMmFjOTcyYjcwLjYzOTM4MjY4CTE2NjY2OTE3NTcJYWRfNjNfMA==&l=OAliZWI0ZTBjMTE4YjdhOTBiMzRkOTFjNjY4YjMyYjg3ZQkwCTM1CTAJODAyMGUwNmM3OTUwOTNhMTkxZmQyYTllZDg1MzE0MzQJNDM0Nzc1ODA1CW50bGxhCTAJNjMJNgkyCTE2NjY2OTE3NTcJMC4wMDAzOTUJTgkwCTEJMTgwNQkxMjA1CTQyMjMwODQ2NAk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 311 B URL HTTP/1.1 ww2.ntlla.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DmbVRX42mxPc_0&v=Yzk0OTYyN2Q3NzY3MmZkNzc1ZTBkMjUwYzZmYWQ2YjQJMQl3dzIubnRsbGEuY29tNjM1N2IyYWM5NzI5MTcuNjc0ODMzMzAJd3cyLm50bGxhLmNvbTYzNTdiMmFjOTcyYjcwLjYzOTM4MjY4CTE2NjY2OTE3NTcJYWRfNjNfMA==&l=OAliZWI0ZTBjMTE4YjdhOTBiMzRkOTFjNjY4YjMyYjg3ZQkwCTM1CTAJODAyMGUwNmM3OTUwOTNhMTkxZmQyYTllZDg1MzE0MzQJNDM0Nzc1ODA1CW50bGxhCTAJNjMJNgkyCTE2NjY2OTE3NTcJMC4wMDAzOTUJTgkwCTEJMTgwNQkxMjA1CTQyMjMwODQ2NAk5MS45MC40Mi4xNTQJMA%3D%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 663f87d69d8633d6c18475f747b4a3eb
66dd5224fecc23df4b983d89f2f66e09b3bc1efb
c3d3a7cc3717188258d974f6a03846bad6082eed4af888ad26496423aa914dc1
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DmbVRX42mxPc_0&v=Yzk0OTYyN2Q3NzY3MmZkNzc1ZTBkMjUwYzZmYWQ2YjQJMQl3dzIubnRsbGEuY29tNjM1N2IyYWM5NzI5MTcuNjc0ODMzMzAJd3cyLm50bGxhLmNvbTYzNTdiMmFjOTcyYjcwLjYzOTM4MjY4CTE2NjY2OTE3NTcJYWRfNjNfMA==&l=OAliZWI0ZTBjMTE4YjdhOTBiMzRkOTFjNjY4YjMyYjg3ZQkwCTM1CTAJODAyMGUwNmM3OTUwOTNhMTkxZmQyYTllZDg1MzE0MzQJNDM0Nzc1ODA1CW50bGxhCTAJNjMJNgkyCTE2NjY2OTE3NTcJMC4wMDAzOTUJTgkwCTEJMTgwNQkxMjA1CTQyMjMwODQ2NAk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww2.ntlla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.ntlla.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Tue, 25 Oct 2022 09:55:57 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 25 Oct 2022 09:55:57 GMT
location: http://xml.sedodna.com/click?i=mbVRX42mxPc_0
x-cache-miss-from: parking-66c47b9f9b-hnlxq
server: NginX
xml.sedodna.com/click?i=mbVRX42mxPc_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=mbVRX42mxPc_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=mbVRX42mxPc_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.ntlla.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://q1.quotes.com/38a89230-544b-11ed-b7ba-af10e7d3ac50
Pragma: no-cache
q1.quotes.com/38a89230-544b-11ed-b7ba-af10e7d3ac50
200 OK 170 B URL HTTP/1.1 q1.quotes.com/38a89230-544b-11ed-b7ba-af10e7d3ac50
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 1752fe619186fa726dba57dd55ed813d
1eecc6fff9eddbaa6928eb8bc05a6ab1398c8e95
ec5e71453de0bc0ebaafeb056d8f1868176be24e6a37c198792534caae73bf0c
GET /38a89230-544b-11ed-b7ba-af10e7d3ac50 HTTP/1.1
Host: q1.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.ntlla.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 170
content-type: text/html; charset=utf-8
date: Tue, 25 Oct 2022 09:55:57 GMT
server: nginx
q1.quotes.com/38a89230-544b-11ed-b7ba-af10e7d3ac50?hr=1
302 Found 11 B URL HTTP/1.1 q1.quotes.com/38a89230-544b-11ed-b7ba-af10e7d3ac50?hr=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /38a89230-544b-11ed-b7ba-af10e7d3ac50?hr=1 HTTP/1.1
Host: q1.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 25 Oct 2022 09:55:57 GMT
location: http://bilqi-omv.com/zcvisitor/38baa5b1-544b-11ed-84a4-0abbb0b4269f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
server: nginx
bilqi-omv.com/zcvisitor/38baa5b1-544b-11ed-84a4-0abbb0b4269f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
200 996 B URL HTTP/1.1 bilqi-omv.com/zcvisitor/38baa5b1-544b-11ed-84a4-0abbb0b4269f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bf71adbfd058a8dd309310d25602d50e
de747911435d12d08348d04decb562cf6d0562c0
764e139b27d6741931e3f6a8e1f2ae305f46ebe09ec923184fec106518535176
GET /zcvisitor/38baa5b1-544b-11ed-84a4-0abbb0b4269f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51 HTTP/1.1
Host: bilqi-omv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 25 Oct 2022 09:55:58 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: iOYVWolE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14817
Expires: Tue, 25 Oct 2022 14:02:55 GMT
Date: Tue, 25 Oct 2022 09:55:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14817
Expires: Tue, 25 Oct 2022 14:02:55 GMT
Date: Tue, 25 Oct 2022 09:55:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14817
Expires: Tue, 25 Oct 2022 14:02:55 GMT
Date: Tue, 25 Oct 2022 09:55:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14817
Expires: Tue, 25 Oct 2022 14:02:55 GMT
Date: Tue, 25 Oct 2022 09:55:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:43:49 GMT
age: 7929
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jiu-Z6DMgXxXdZ5BDwjNoq5Y15kBgM894k4EY2qSRZKdvk0bfkn89A==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:16 GMT
age: 43542
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe70105c7-5a5d-48c2-a113-06846e24dff9.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe70105c7-5a5d-48c2-a113-06846e24dff9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e43859d91550f002f2fc145b8a044f40
762e9f0ce9256ff9a54e08d76dca7596d44677df
3d39a87540b716721e9d4e28aa499233ccde5ed4c6e7f1a902010e56572c8f46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe70105c7-5a5d-48c2-a113-06846e24dff9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11822
x-amzn-requestid: 1702783e-fce4-4c9d-96a9-ee0477cff0ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aHpINH1LIAMFZjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634c889a-0cc362f90671a9827f4573f9;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 22:41:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YgdgwWNWat8JCI07iCToqMsVpoWDl54TS0Q6o41OGaCePkGjNfYzjA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 04:08:53 GMT
age: 20825
etag: "762e9f0ce9256ff9a54e08d76dca7596d44677df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 80bab61eeda285e378b86b3efc4f87f9
5c690531e195332c04092ce22e7bdcecccc3c9d5
0c4dec046835501b598b5165acd592c3baeb2d6e21b6ac5fd549e790a802cd02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7977
x-amzn-requestid: 3e217877-33a2-4efc-a21f-b75764a8ced9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3FWGRooAMFagw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570555-2bc77cb653ef022b4aab7f71;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CWRIYnB8Zcc-9L-EdFq_ahTPlv8AMqnBGlZmRTN-0BsZIUWF3eUOfg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:37:08 GMT
age: 44330
etag: "5c690531e195332c04092ce22e7bdcecccc3c9d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49bb46dd-5578-4e72-9aed-dc70960d4c97.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49bb46dd-5578-4e72-9aed-dc70960d4c97.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edae4c2a51941f9d01ea6658430a95b8
ed419179e1460d655f14735e430cbbd76ab2a869
92f280cc9ad01c6901b08269a12908b927877082952ec52fe9a082910c181076
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49bb46dd-5578-4e72-9aed-dc70960d4c97.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7633
x-amzn-requestid: e85011ac-422d-44b3-8af4-32d1c657597f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3D6EYXIAMFRlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054c-4f56cf37570dfcbe64ce4778;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: w3KKBDQzR5-BVF158SvYqzoDTuT1Ayx64lHy02MoBWUkOWR4H3ZTqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:17 GMT
age: 43541
etag: "ed419179e1460d655f14735e430cbbd76ab2a869"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18f72757-5389-44e5-9b3d-fd0ed441e42b.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18f72757-5389-44e5-9b3d-fd0ed441e42b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9cea1dfb80f297f57f615a570d64f730
f0bd82da0a3c7b8cc65fba1e9c4af0760e3ae861
56c57a837b357d24e08ad9eea9836501f83a1ba4b0d2f2fa9b74f65fef9cdef1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18f72757-5389-44e5-9b3d-fd0ed441e42b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7992
x-amzn-requestid: d14e1fb8-46b8-414f-bc03-b7619dc7cb6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ackbGGEaIAMFV8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6354e77a-7fd668d97068c40639ca3d3f;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 07:04:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xELJXviFBSsn0bUsRBJ5YfKsgD1y1sfZkSs6WM7jTh4-HDcxzlc71Q==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 07:37:33 GMT
age: 8305
etag: "f0bd82da0a3c7b8cc65fba1e9c4af0760e3ae861"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bilqi-omv.com/zcredirect?visitid=38baa5b1-544b-11ed-84a4-0abbb0b4269f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 752 B URL HTTP/1.1 bilqi-omv.com/zcredirect?visitid=38baa5b1-544b-11ed-84a4-0abbb0b4269f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (333)
Hash 56ebf9a837d5d64ff3c6c3acc96ff2c6
5a78cf25580aa7093b47c0bf5e3f2f81274dd0ec
71bdece4410e21f1327059290c609890cd2868cbc088211612e5ad1d2a30fa8c
GET /zcredirect?visitid=38baa5b1-544b-11ed-84a4-0abbb0b4269f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: bilqi-omv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bilqi-omv.com/zcvisitor/38baa5b1-544b-11ed-84a4-0abbb0b4269f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=15e92720-c079-11ec-bea2-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 25 Oct 2022 09:55:58 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: mZKObbFk
ocsp.digicert.com/
200 OK 278 B IP
Hash 0dc0617006620928849806ff6a722076
c1ce191ec9763afae0b1c021641360ce6e766fca
f1f93d789f277c2d86410befc861c5bb223c534e240654cb16e85541d6a6f4e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2836
Cache-Control: max-age=136726
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:58 GMT
Etag: "63571ab0-116"
Expires: Wed, 26 Oct 2022 23:54:44 GMT
Last-Modified: Mon, 24 Oct 2022 23:07:28 GMT
Server: ECS (amb/6BC8)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 0dc0617006620928849806ff6a722076
c1ce191ec9763afae0b1c021641360ce6e766fca
f1f93d789f277c2d86410befc861c5bb223c534e240654cb16e85541d6a6f4e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2836
Cache-Control: max-age=136726
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:58 GMT
Etag: "63571ab0-116"
Expires: Wed, 26 Oct 2022 23:54:44 GMT
Last-Modified: Mon, 24 Oct 2022 23:07:28 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash 665aa91a5a14623e951552f51af2aa9a
631d1a4eb4a341f240f056aeb59d0961f70aec40
4819d3f2e3072100054ea2838e291bd299f460770b3f76a316b2714478a28e9e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5450
Cache-Control: max-age=105450
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:59 GMT
Etag: "6356964f-117"
Expires: Wed, 26 Oct 2022 15:13:29 GMT
Last-Modified: Mon, 24 Oct 2022 13:42:39 GMT
Server: ECS (amb/6BB1)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 280 B IP
Hash b657a15c6789a0bf05750c6f46fcea8e
d12ce95bcc775d524ab4a61f598f60e1535979af
c81b0ad493d6b75df5e28f2247d2e7bc1269df8a0bb728117b3f1dfd9766d654
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5450
Cache-Control: max-age=105450
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:59 GMT
Etag: "6356964f-117"
Expires: Wed, 26 Oct 2022 15:13:29 GMT
Last-Modified: Mon, 24 Oct 2022 13:42:39 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash f37c538d372f99be24f8a7374999d56b
31b97cada930f4fecb2410c4d90d17f6bc92965f
4f40f773f686a65683ec92333c0da1d65fb4b01a586390099796b7f2cd333ad0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=154742
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:59 GMT
Etag: "63576c25-117"
Expires: Thu, 27 Oct 2022 04:55:01 GMT
Last-Modified: Tue, 25 Oct 2022 04:55:01 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash f37c538d372f99be24f8a7374999d56b
31b97cada930f4fecb2410c4d90d17f6bc92965f
4f40f773f686a65683ec92333c0da1d65fb4b01a586390099796b7f2cd333ad0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=154742
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:59 GMT
Etag: "63576c25-117"
Expires: Thu, 27 Oct 2022 04:55:01 GMT
Last-Modified: Tue, 25 Oct 2022 04:55:01 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b5fa3599a76166bc26ad7bca00201e63
505f8533eb0126a094308d61e1cd2dd668fc709c
d817156761b4fa70b86024590701a670a1c2a5b1c00f3ac28f6b506b186ca5fc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=163346
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:55:59 GMT
Etag: "63578dc1-117"
Expires: Thu, 27 Oct 2022 07:18:25 GMT
Last-Modified: Tue, 25 Oct 2022 07:18:25 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 479 B IP
Hash 84427f8afe0867a8c94775ea3304c2c8
1929b1566884199dc437ba8f87b21ba960eeae48
b8b61bdc5b055bc1c83841ebd6f61be3795a9aaf21929666b8adf0dedddb6d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=163346
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:56:00 GMT
Etag: "63578dc1-117"
Expires: Thu, 27 Oct 2022 07:18:26 GMT
Last-Modified: Tue, 25 Oct 2022 07:18:25 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 735 B IP
Hash 13d980b510809c961542faa0ab2088be
46c8e959e5fed7d68d33e2c110b831501c352bb4
325cd177e2f7636e8f34eb3d53772069e8a1b13983f12e1d809b5c0a3ad061ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:56:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 81182f4b684635f6bdcbdd907ee66f25
a1f2f151df72ede41397c8131bd47a3ce85575b3
be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 19 Oct 2022 23:13:29 GMT
expires: Thu, 19 Oct 2023 23:13:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 470551
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d114ab00b1cfe7f9b4f56c7b3655b55d
641e580d6148329b0c9eb2d49f5f8a30c08f30e9
e5420e919b2c05c148179c7d85a210941be6862b1f65ccfafcfc38d960bf38d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:56:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js
200 OK 6.7 kB URL HTTP/2 cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js
IP
File type ASCII text, with very long lines (37276)
Hash 7a162a3385ec2f2fbe0be1fdd55afde3
5a37630a30526266cdaa387a32f50f20bae5ffd3
f6143442002776683e3fe10ee2b1aa2fa3d3fba2e491ea7eb1044591adb8c515
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:01 GMT
content-type: application/x-javascript
content-length: 6671
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: ehYqM4XsLy++C+H91Vr94w==
last-modified: Thu, 29 Sep 2022 08:34:29 GMT
etag: 0x8DAA1F56D1BE371
x-ms-request-id: b230c9bc-701e-015d-01de-d36eb7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 4595
expires: Tue, 25 Oct 2022 13:56:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa14761af01c06-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 7.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (21747)
Hash 7b4564ae957eef3a8302343f44c5cfb3
296c38b2ae23a31d80201b32a38c02e75de27c91
15155c8652fe9654c2d2813743ae09ff93a469d790d3424a6b090f876b3d9bb2
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:01 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: e0VkrpV+7zqDAjQ/RMXPsw==
last-modified: Tue, 25 Oct 2022 02:33:32 GMT
etag: 0x8DAB6314F1BE415
x-ms-request-id: c8de8dcc-c01e-014f-8023-e85aab000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 627
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa1476cb8c1c06-OSL
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js
200 OK 95 B URL HTTP/2 cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js
IP
File type ASCII text, with no line terminators
Hash 335be8900580e9c3875dba57334294ae
a86597d2ddfa410df13bceca86fdf9a2291fe798
8a882fd19a15567e53a5c3c08d22cdab714fa87734ed92d854c4e8fdf3940b1f
GET /static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 95
server: nginx
date: Mon, 26 Sep 2022 01:55:06 GMT
last-modified: Wed, 10 Apr 2019 11:21:38 GMT
etag: "5cadd1c2-5f"
expires: Wed, 26 Oct 2022 01:55:06 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qlcHLGXd_KUYUJHbG5LMjNgPiX_xMBcNEckgyPwwkO3mKPLOrrzIhg==
age: 2534455
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json
200 OK 2.0 kB URL HTTP/2 cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json
IP
File type JSON data\012- , ASCII text, with very long lines (6106), with no line terminators
Hash 39f38f3bfc0a07ae0cd95267c2f99d73
14b3e0265838d752d5096aef22e223003091b976
4982c65156112674be92fcc6c29caf850639a39f58629a98f351302ce00941c4
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:01 GMT
content-type: application/x-javascript
content-length: 1966
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: OfOPO/wKB64M2VJnwvmdcw==
last-modified: Thu, 29 Sep 2022 08:34:29 GMT
etag: 0x8DAA1F56CF09415
x-ms-request-id: ce7485a4-101e-000d-3dde-d337ea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 4603
expires: Tue, 25 Oct 2022 13:56:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa1476fbe61c06-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d764d45ec91ab0d24d0949879fc1d79b
862aa340ebab62f9642b7d95434c9275b14c6e2c
576f85bb041f98011442d7248cdfae452a16531d01e2241799409b73f9fa035e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4580
Cache-Control: max-age=94891
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:56:01 GMT
Etag: "63567078-118"
Expires: Wed, 26 Oct 2022 12:17:32 GMT
Last-Modified: Mon, 24 Oct 2022 11:01:12 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 280
cdn.cookielaw.org/scripttemplates/6.22.0/otBannerSdk.js
200 OK 76 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash 523e98a35ea92fd6e6d32d6728a8c98e
e0951a7bfa0700679aa41a03394286723e697d93
a746202b022948dfc0461cf24b3be5b01d0c08b924b23545f3cba6e2d15b41a9
GET /scripttemplates/6.22.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:01 GMT
content-type: application/javascript
content-length: 75930
content-encoding: gzip
content-md5: Uj6Yo16pL9bm0y1nKKjJjg==
last-modified: Thu, 19 Aug 2021 02:39:18 GMT
etag: 0x8D962BA8ADAEF03
x-ms-request-id: 18163f5d-b01e-0083-086c-c4784b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6443
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa1477fcd61c06-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/28fe90b0-2a5a-4cf9-8e33-f3878e80e202/en-us.json
200 OK 18 kB URL HTTP/2 cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/28fe90b0-2a5a-4cf9-8e33-f3878e80e202/en-us.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash 7f16e40ce3eb729de2cd642eb8ab4984
90f3968bd0e0afd9329b4858f3a6e2954a0b290b
8ce84bcd36f7922545956c7aa3889234aaf5e843ec7f0e8875fc99c4bcfd201d
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/28fe90b0-2a5a-4cf9-8e33-f3878e80e202/en-us.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:01 GMT
content-type: application/x-javascript
content-length: 18222
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: fxbkDOPrcp3izWQuuKtJhA==
last-modified: Thu, 29 Sep 2022 08:35:11 GMT
etag: 0x8DAA1F58645F23C
x-ms-request-id: 1ec73252-a01e-00be-38de-d3cd6d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 410
expires: Tue, 25 Oct 2022 13:56:01 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa14786d311c06-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otFlat.json
200 OK 3.0 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otFlat.json
IP
File type JSON data\012- , ASCII text, with very long lines (10843)
Hash 792fef665863081a7642f10bc7b22b49
f30de5899ad8675a26c5a1688c543e7044bce0ab
af415b02ce1afa491d86bd1fafa2416302d69906ded37715ca425b6778cd7d9c
GET /scripttemplates/6.22.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:02 GMT
content-type: application/json
content-length: 2950
content-encoding: gzip
content-md5: eS/vZlhjCBp2QvELx7IrSQ==
last-modified: Thu, 19 Aug 2021 02:39:10 GMT
etag: 0x8D962BA867F281F
x-ms-request-id: 1ab7d2f4-a01e-003d-026c-c46dc0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 6224
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa1478ad6b1c06-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
200 OK 4.8 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
IP
Hash 01c8df6bf73202fd89c572b8bb1ee0a0
8805be0507d171c09e443c3bf405cde4a3471887
17d37a000478a9faf7da75a7d142da9f383482f8d03eca8b28075bfc8a5eca3d
GET /scripttemplates/6.22.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:02 GMT
content-type: text/css
content-md5: F/Fs54+x9bQK/ULkNRp4fA==
last-modified: Thu, 19 Aug 2021 02:39:24 GMT
x-ms-request-id: 6bc20948-001e-0159-656c-c49b35000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 9110
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 75fa1478ad6d1c06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png
200 OK 522 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 925ee33071ef712bda608ef3bf50ef13
c7d8844e68d5c9bc0294dc5a69f8550c6d6d39d5
996b0e99fcc7a553eac6f51569be5429b1bf8c071a708289fab808d7660cf74c
GET /static/img/flags/new/48-squared/gb/daba79fdd4066d133e8bf59070fd6819b951c403.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 522
server: nginx
date: Mon, 10 Oct 2022 15:07:52 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-20a"
expires: Wed, 09 Nov 2022 15:07:52 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0bhWBuptM3h8hrgSt8TA29FbRTDWHzt26x4Hdbpqin3vg7oE5XjV3Q==
age: 1277290
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/de/668350ee17050ec21845c27503ae960695f341a9.png
200 OK 146 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/de/668350ee17050ec21845c27503ae960695f341a9.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash ff1fb74ffba22eb6b6e3b91923874a92
498ebb536fd3a0d55b12c53de5c931a8859ca9d0
4c1f1497ae4ade7ce895bc174187b7c5f145d0924c082c86cfed4efda62f305c
GET /static/img/flags/new/48-squared/de/668350ee17050ec21845c27503ae960695f341a9.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 146
server: nginx
date: Mon, 03 Oct 2022 00:05:07 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-92"
expires: Wed, 02 Nov 2022 00:05:07 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EjRm4b1iu-Uw54QnXko0iufbiHGbFs0kPHoCU5K07Y8D1s01UzNfFg==
age: 1936255
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/nl/65e3bcc466c4026a08bdb2671799ca26c3228d19.png
200 OK 133 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/nl/65e3bcc466c4026a08bdb2671799ca26c3228d19.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash d71004d18912ce962c083e4761b4edee
79aacce102a007f191df0fe753117764c1381d87
d5d5badb50d07fe792765fc98388901290efc2cd2014b1afe513321acaa6710f
GET /static/img/flags/new/48-squared/nl/65e3bcc466c4026a08bdb2671799ca26c3228d19.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 133
server: nginx
date: Mon, 26 Sep 2022 05:33:06 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-85"
expires: Wed, 26 Oct 2022 05:33:06 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pysE4LiuQM3G0GZ8vWSbOY19jjoeiMfG1t_6u7gVEDWgsFH4EZyo5w==
age: 2521376
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/fr/c48bc65c9dc57035fa983df37e9732c0f0a2663f.png
200 OK 153 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/fr/c48bc65c9dc57035fa983df37e9732c0f0a2663f.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash d61a768803223e8ecabed2277992e21a
bfd3ddcedb47e691ce233c863d782f0ac7e2e414
8c823b6fe7ed7a0af5f592357f0512e43a86813159f095e7292489ba86c1e6d6
GET /static/img/flags/new/48-squared/fr/c48bc65c9dc57035fa983df37e9732c0f0a2663f.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 153
server: nginx
date: Tue, 27 Sep 2022 04:50:05 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-99"
expires: Thu, 27 Oct 2022 04:50:05 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O5QrCywxo7zIgEl5ryGtkorDR00tV6rvJ0FBglU7J0ln9gf--qBjTQ==
age: 2437557
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/es/b3bd4690290a78b1303198dd6576bdab8d7f9a80.png
200 OK 913 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/es/b3bd4690290a78b1303198dd6576bdab8d7f9a80.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash bf945804423b44b5acd2942719e4baf1
a94db5335a984d9b8633cbcdb22137bac8b4284b
2b311f37975788c34490b9fbd42602b3c2eb24bb87c1d7f4fc7fce70a230815f
GET /static/img/flags/new/48-squared/es/b3bd4690290a78b1303198dd6576bdab8d7f9a80.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 913
server: nginx
date: Wed, 05 Oct 2022 05:32:48 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-391"
expires: Fri, 04 Nov 2022 05:32:48 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wkbqtrhsGypl2OVMHxylp0lm0uTzGsQZf6wR2Jawj1AWc_O92tw52Q==
age: 1743794
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/ar/9cce2b91336709016282f06432a8b6366069e0c2.png
200 OK 476 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/ar/9cce2b91336709016282f06432a8b6366069e0c2.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash d9198265fdc862184216b90209391ce3
6bf0123a310523ff9b392f5ef7bdb159ac3633fa
687a7e5fd4c9d0ecf220bc143a6b473dd3c2bfda30e7ac01fde79d39b5791720
GET /static/img/flags/new/48-squared/ar/9cce2b91336709016282f06432a8b6366069e0c2.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 476
server: nginx
date: Sat, 08 Oct 2022 23:05:32 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-1dc"
expires: Mon, 07 Nov 2022 23:05:32 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EGdmNy-R_6qZLmPnkG459FdCIsbZNjJdYS-k5_D5dBd0ARxDNkQhFQ==
age: 1421430
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/mx/f3a3f562a0185d68fb04b2ec01db2062ca6bdb76.png
200 OK 945 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/mx/f3a3f562a0185d68fb04b2ec01db2062ca6bdb76.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 91f0a044160310ec2a0fdd15a5e9db95
411b206915a7fcbc18ba67bb5013cd4b9c97c5c3
11eb78212272b10379a315971ed01e31ffa796378c12eae4116f47e7bc50bd4f
GET /static/img/flags/new/48-squared/mx/f3a3f562a0185d68fb04b2ec01db2062ca6bdb76.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 945
server: nginx
date: Mon, 03 Oct 2022 22:06:21 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-3b1"
expires: Wed, 02 Nov 2022 22:06:21 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kwyeF_K3EnhA2o2qpNfdWx_kQBZY48W8PSY7-nnh3FyENT7wkcU7dg==
age: 1856981
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 226 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Hash deb437a4df21e544a6992ff28752d439
726b232917c52f74dca58d8c947da04b3984efb1
df979996d1c4568a04d6c7ae0cc99f7a4502f024fbcf64db912d2f7a9905ecbe
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:56:01 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 75fa14779a410b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/it/b8db3771480bd0c7971b9f94cad3640c89521882.png
200 OK 153 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/it/b8db3771480bd0c7971b9f94cad3640c89521882.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 4261fd05fa4ff2f6b27961be52f72502
30b359e2111f9509e89b4740af3aa6be24fcc812
861f2142293eb28de2c5f7c6f0035847ae176dc02470bfa7fbb157bf2b89339d
GET /static/img/flags/new/48-squared/it/b8db3771480bd0c7971b9f94cad3640c89521882.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 153
server: nginx
date: Sat, 01 Oct 2022 20:11:16 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-99"
expires: Mon, 31 Oct 2022 20:11:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3MqvipN2UGZBiobk_7t9k70BE1MKDCxQDSdmNwjiV-MxyUQHCsKkrg==
age: 2036686
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/pt/6542345c7408e3bd0d4c2e8f38d4396bba9b0e69.png
200 OK 1.2 kB URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/pt/6542345c7408e3bd0d4c2e8f38d4396bba9b0e69.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash fc9f3351718ecc0c40483fcc805b7004
24aad85601f4ed40c3cd66921a4d12d965855c13
06ee7ee0128fbc6c5700382476bf91e704ca66f00c2dc2f99fd5b00da0c3fd64
GET /static/img/flags/new/48-squared/pt/6542345c7408e3bd0d4c2e8f38d4396bba9b0e69.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1179
server: nginx
date: Thu, 29 Sep 2022 06:49:45 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-49b"
expires: Sat, 29 Oct 2022 06:49:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: F8kfGnET3Z-DUq0CqCR-C1eTPV-1Kz0Y7VKAWJ4nM9UPPJaYtgzhNg==
age: 2257577
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/br/0cf5e55d996fdcf96a2d31733addf5c10bad1f74.png
200 OK 717 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/br/0cf5e55d996fdcf96a2d31733addf5c10bad1f74.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 26d9170b24250c48a61e05da682d06ee
42c33ea1b9376b9fb627d44fc56822672d5c0ac7
6873da5317b00141936efa7ff6b53e80aa1323ccff9c6a89f846534b725225b0
GET /static/img/flags/new/48-squared/br/0cf5e55d996fdcf96a2d31733addf5c10bad1f74.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 717
server: nginx
date: Mon, 10 Oct 2022 17:57:28 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-2cd"
expires: Wed, 09 Nov 2022 17:57:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QCORRdQ6_nJBP5221HR1hH76dU3dlqnjF9dONpBaqkJnNB_k_CuUpg==
age: 1267114
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/no/827be8d24af5667778b4bc651fe03f738a812b60.png
200 OK 266 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/no/827be8d24af5667778b4bc651fe03f738a812b60.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash ff013df9d8ed912796746aacd4cb18b9
e6bdb0e3516c2edbe53af0157b7db7ed08b7b376
c9b9d24d817a48351e24f4e5499e96a69d1cb8d783f57c9bdd1747cee64e50d8
GET /static/img/flags/new/48-squared/no/827be8d24af5667778b4bc651fe03f738a812b60.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 266
server: nginx
date: Mon, 26 Sep 2022 01:57:05 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-10a"
expires: Wed, 26 Oct 2022 01:57:05 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xbhyjARKj0YDRSLxfEtCkWanzCG1NCtDrXz5JhXu3-1AvnEjT8UqHg==
age: 2534337
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/fi/465d3b73ff07d1d696cb5dd26fbb91097c175e1b.png
200 OK 206 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/fi/465d3b73ff07d1d696cb5dd26fbb91097c175e1b.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 9a822a64512f9ddc675a4225c98c7a3c
53f9de2996c049705b7f67f3e6b644e4e665b3bc
10b4eec5fd4c999a3d217c78ad0037396263602c5ad035613063a2b147231318
GET /static/img/flags/new/48-squared/fi/465d3b73ff07d1d696cb5dd26fbb91097c175e1b.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 206
server: nginx
date: Mon, 26 Sep 2022 18:50:09 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-ce"
expires: Wed, 26 Oct 2022 18:50:09 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ENm0y1K9HXkLJPx0TilS8q476BexwHHWpgkWBEyM-alttFmv_DsDIg==
age: 2473553
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.png
200 OK 198 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 13c8c96bf421d8616a6e22d2932a0b76
09c8720b6e8dec10ae55c6c71b83508a97d7103e
3e94a1d0a60d1870f9117b8b5ec1379df6040dead195531942a48a3ac57d11d9
GET /static/img/flags/new/48-squared/se/5e126775c25a54a24956ddcc72c8bbcaeed20872.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 198
server: nginx
date: Sun, 09 Oct 2022 02:09:43 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-c6"
expires: Tue, 08 Nov 2022 02:09:43 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7ovXOTDfSrmLvEvMS1T34G1ncOs3-cz3VaCEBc9G8iYrPwDbWoQ0nw==
age: 1410379
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/dk/744575dd4e87590a543b7c8cbacaef6c3de4e4d2.png
200 OK 175 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/dk/744575dd4e87590a543b7c8cbacaef6c3de4e4d2.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 3275f76ec51c7d87571ef5a5f3e6ddea
995f9025c29c6ab965c3a29af50ae25c9a390ab0
a60eac8ef0e0d0dddef152891451b215d955373071d2bd32db7d4b2053fbaf08
GET /static/img/flags/new/48-squared/dk/744575dd4e87590a543b7c8cbacaef6c3de4e4d2.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 175
server: nginx
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Mon, 24 Oct 2022 22:06:16 GMT
expires: Wed, 23 Nov 2022 19:34:26 GMT
cache-control: max-age=2592000
etag: "5f55f887-af"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7Ou7OS2QSHDzpWOZJGiTW20E6PtDAOGsHJZfnd3dNuGE9_kkh9Oo8Q==
age: 51696
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/6da0bf621035bb8a2f9c756d6a89dda03b2f7864.js
200 OK 13 kB URL HTTP/2 cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/6da0bf621035bb8a2f9c756d6a89dda03b2f7864.js
IP
File type Unicode text, UTF-8 text, with very long lines (37718)
Hash e886581fc29edc81c540ddf7a05752e2
6457e873e65b1f5cecb3fc65697202b4b778645e
e59276b047ea69ed2c758fda31b711417f35a0e8a952a632db388f38aaa36ff7
GET /static/js/core-deps-inlinedet_cloudfront_sd/6da0bf621035bb8a2f9c756d6a89dda03b2f7864.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Wed, 22 Jun 2022 10:40:45 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 21 Oct 2022 18:53:37 GMT
expires: Sun, 20 Nov 2022 18:53:37 GMT
cache-control: max-age=2592000
etag: W/"62b2f1ad-949e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cZIIwpYf1mYpuV3DXl9yY_jx8FUIZvSrpaRsYK8tcWFvPUrCSzx6VQ==
age: 313344
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/hu/fc7cb24c5c7cb9de74a74fad271d6838daabc4cb.png
200 OK 133 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/hu/fc7cb24c5c7cb9de74a74fad271d6838daabc4cb.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 9206b6715881ae75735ed659e808e94f
eed3ea9303a65b3b7f64f73d1a8499373aa26c0b
70c5cf7c80ec64caf926271a8832ca79342bd1d9203bae584f8c441aee10ddf0
GET /static/img/flags/new/48-squared/hu/fc7cb24c5c7cb9de74a74fad271d6838daabc4cb.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 133
server: nginx
date: Wed, 28 Sep 2022 03:46:42 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-85"
expires: Fri, 28 Oct 2022 03:46:42 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pMeR2jgV0FIwAxgQ_y_cLN4HDr8_2GvhsE5vLmM5P02RXUpq_4bwwg==
age: 2354960
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/ro/2d67b91f7beb87bd9286975da3e6dadc70d9c64b.png
200 OK 153 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/ro/2d67b91f7beb87bd9286975da3e6dadc70d9c64b.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 1b1f1d1d57a2cd65c38748ed1e165aa7
58f0710ccff2655b04eb6ed0a2c86ec64eea5223
881978c2d219d2d9e3f0c5584e489e06e1948d0b4f9c5d7d3104a61ddb2e7372
GET /static/img/flags/new/48-squared/ro/2d67b91f7beb87bd9286975da3e6dadc70d9c64b.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 153
server: nginx
date: Mon, 03 Oct 2022 16:02:43 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-99"
expires: Wed, 02 Nov 2022 16:02:43 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: priu9iwTbVIQQMgdGxde_CLmxSHmuUXslcYqV0NLHZQE5r7NOLa1hg==
age: 1878799
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/jp/9bf7e50bc6dc66599aeede9189ca16de461c60b6.png
200 OK 333 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/jp/9bf7e50bc6dc66599aeede9189ca16de461c60b6.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 0430ec4fbfa9c9d0c02e4040873de949
6f5a96e43c5665af451ae5b0448ed5a7113e40d9
ee8b36adb5cbd88a5819e742a813ae397ace8c319861ad8aa4d9caaae90812a0
GET /static/img/flags/new/48-squared/jp/9bf7e50bc6dc66599aeede9189ca16de461c60b6.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 333
server: nginx
date: Fri, 07 Oct 2022 02:04:00 GMT
last-modified: Mon, 07 Sep 2020 10:40:09 GMT
etag: "5f560e09-14d"
expires: Sun, 06 Nov 2022 02:04:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H7uS_nhiuS42ow3ajin_Ot7a5CvEI3QfyrKR_ZfMRnTrCieA1_8Uyg==
age: 1583522
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/cn/5a221730f540facc62563bfa6192ce155a9f677e.png
200 OK 332 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/cn/5a221730f540facc62563bfa6192ce155a9f677e.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash a12df81751d392f648a2785d2de72a05
39156191b034cde7e591faa6677153fae77e6770
3e3cbba48022f930c07d6bdea530464cca93dd1c5473c2e75548cabd56c3d5bc
GET /static/img/flags/new/48-squared/cn/5a221730f540facc62563bfa6192ce155a9f677e.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 332
server: nginx
date: Thu, 20 Oct 2022 01:44:07 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-14c"
expires: Sat, 19 Nov 2022 01:44:07 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uYP4dulB-6xSz9dOEWo4Kr0eb-nwzoe99qm_aKbXfKaEzAi18hONtg==
age: 461515
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
200 OK 34 kB URL HTTP/2 cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js
IP
File type ASCII text, with very long lines (60582)
Hash 25d7c1d36f212db20ce8d32a0d740435
dfc3bf790e211b3b974081e685185c1922b3c80a
f741229261ff14751e5a823dc65104fc8ed5f6c936aa678f10c7da424bb2505e
GET /static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Wed, 28 Sep 2022 04:08:35 GMT
last-modified: Tue, 28 Jun 2022 15:19:38 GMT
etag: W/"62bb1c0a-19a42"
expires: Fri, 28 Oct 2022 04:08:35 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: v5ELyrzxKYyoWQLrZ4WS-udeHvaPY4tQlCbckYEIY1XrcMcIXCT_cQ==
age: 2353646
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/pl/4d6b6e962b0b049a03924fc618b959395d60ae39.png
200 OK 121 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/pl/4d6b6e962b0b049a03924fc618b959395d60ae39.png
IP
File type PNG image data, 48 x 48, 2-bit colormap, non-interlaced\012- data
Hash f5426bca09243b610e38d3c14e677064
e2ab7e2d6380dc421aa64648c11ddab3b2233e49
2f404d211c6a0c69dcac5b38ae18a1fc57840c4bd330b1bd64def6bf8b748d64
GET /static/img/flags/new/48-squared/pl/4d6b6e962b0b049a03924fc618b959395d60ae39.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 121
server: nginx
date: Sun, 02 Oct 2022 02:33:28 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-79"
expires: Tue, 01 Nov 2022 02:33:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -_iJDala0G8Dn4vn8pkH2naouk5ohao3_K69moGh4ZyQlk5GeAvblg==
age: 2013754
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.png
200 OK 215 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash 0c3be548c24fe302a6765670af14cb20
b14e18e90b32ec75ee248f748dee5aa6d7609822
84b0beb08ce848e9e03e1e2ef34d5cb421a429661bb837750a1c37cb44b05145
GET /static/img/flags/new/48-squared/gr/e0e42a97a7b860fc9be71954262902f2a4e94aa6.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 215
server: nginx
date: Sun, 02 Oct 2022 04:42:29 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-d7"
expires: Tue, 01 Nov 2022 04:42:29 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f6hBDdqD1BAKj1I2wgBTji8aGwKlqlgjRqE--1t1P9-1C4FF4EkPOg==
age: 2006013
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/ru/2277320023a64803843c36ca6aa48ad77523dd0d.png
200 OK 139 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/ru/2277320023a64803843c36ca6aa48ad77523dd0d.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash e788f0359c4ebb5d12da0db2e46b5cae
7ef0e8f52982a8fe7a25e27011fca7716231a52b
6f71c4adcbf4ee888f31ee757fd52cdb61881a9aca9f8a571c00470df055185c
GET /static/img/flags/new/48-squared/ru/2277320023a64803843c36ca6aa48ad77523dd0d.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 139
server: nginx
date: Tue, 11 Oct 2022 02:17:31 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-8b"
expires: Thu, 10 Nov 2022 02:17:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zoPjLTKaYxa-ML9de74gcnQdEOYDc2CBavSi-kSg4Xrs5wEBU4bEKg==
age: 1237111
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/282f83b6049fe9bacd964cb6ea8a6d5447528b14.js
200 OK 2.3 kB URL HTTP/2 cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/282f83b6049fe9bacd964cb6ea8a6d5447528b14.js
IP
File type ASCII text, with very long lines (6029), with no line terminators
Hash 618ac98e360bb87e192c997acc6ad612
13722214139557dc41815a50ecd5524c3117c7be
0aefdd8bdb3573aaec2580bd56cfd80f6fd3d7f36b6127171ad90047ef311898
GET /static/js/error_catcher_bec_cloudfront_sd/282f83b6049fe9bacd964cb6ea8a6d5447528b14.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 29 Sep 2022 06:49:45 GMT
last-modified: Mon, 06 Sep 2021 09:06:05 GMT
etag: W/"6135d9fd-178d"
expires: Sat, 29 Oct 2022 06:49:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5stHgvdRIUIcG1lmSruI9ns69uFEPeR6iZ-R85a98XCJLEAYQDSbqA==
age: 2257576
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/sa/44ab510f37755d1d9d4c4dfa9b1f25bed9b2a95c.png
200 OK 534 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/sa/44ab510f37755d1d9d4c4dfa9b1f25bed9b2a95c.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash c5ba34de4a5b15c8e5966ce4ac6dac7d
d87ca11092c06c059948bca64995703ce9646f98
3f32c4cf32cba619d3e8a5737d713c0d2633fd369f668a8fc038c525e6b20512
GET /static/img/flags/new/48-squared/sa/44ab510f37755d1d9d4c4dfa9b1f25bed9b2a95c.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 534
server: nginx
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 23 Oct 2022 10:43:12 GMT
expires: Tue, 22 Nov 2022 10:43:06 GMT
cache-control: max-age=2592000
etag: "5f55f887-216"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2TdLDR1sAU6xT6XMuQHo06Vb1sb_pnyD7eqyZyRYZw_z1QRU3utN_g==
age: 169976
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/kr/4cb76b458a73ca4c1de034c7623475278d363ce6.png
200 OK 870 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/kr/4cb76b458a73ca4c1de034c7623475278d363ce6.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 52c9301117c90f4f0f02957fb952f163
7e947ebefa1352e7282626e90e68442896c606e6
9f31f4ed393b17f37ea3ec9572bdda6ac8c1a3e3ee410743ac2b69f4717b4425
GET /static/img/flags/new/48-squared/kr/4cb76b458a73ca4c1de034c7623475278d363ce6.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 870
server: nginx
date: Sat, 08 Oct 2022 23:05:33 GMT
last-modified: Mon, 07 Sep 2020 10:40:09 GMT
etag: "5f560e09-366"
expires: Mon, 07 Nov 2022 23:05:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YUP1P5wNzseVk7JYzz1a7LSy9IEQPReS9OqhC_dcm3Mb36TIf-sc8A==
age: 1421429
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/il/fc1907ccd86aa051f7fbe22649d1e31ac6aee016.png
200 OK 325 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/il/fc1907ccd86aa051f7fbe22649d1e31ac6aee016.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 6fedf345605f454aa06cc4d6cdf07c95
566b06216ad282e7b0a34b23803f9f459cf0fa8c
6ad5ceae28b78a9253cc023db0dc2dc95684e086c9c69672f4d61c64b483adf5
GET /static/img/flags/new/48-squared/il/fc1907ccd86aa051f7fbe22649d1e31ac6aee016.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 325
server: nginx
date: Fri, 30 Sep 2022 21:26:36 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-145"
expires: Sun, 30 Oct 2022 21:26:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xlIkaKDYgwwWlMDOYC4HcoFqu0GNDC8RLnRlEj2a7TYYeH8A2Fkzow==
age: 2118566
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/lv/393103a26c1d5f1fbd7d9674732bbdfc42296399.png
200 OK 142 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/lv/393103a26c1d5f1fbd7d9674732bbdfc42296399.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash ddb2ed817fb9ff1e8fa103e303126d92
db7c6839bb7acec47406626cd0db92f5ae203a7f
90f140a70c71755fed1d533e2f837406fb1a6dde2d18d4318d65fb90bad9332c
GET /static/img/flags/new/48-squared/lv/393103a26c1d5f1fbd7d9674732bbdfc42296399.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 142
server: nginx
date: Tue, 27 Sep 2022 06:15:26 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-8e"
expires: Thu, 27 Oct 2022 06:15:26 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RXEKgdn0kbdB_UMCHAu-ecmJX3K70_Ifh-kDYLKfAxONGFWRLxaDHw==
age: 2432436
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/ua/2ea50f1c1fb480c4557a5578f71657fc3152c3a1.png
200 OK 134 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/ua/2ea50f1c1fb480c4557a5578f71657fc3152c3a1.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash f4db0dc55878fe02bb1efff8fc8dfe00
233ad877840f93216679c862e72be0d38a3c1132
4d5747ee4bfc01093d27ec5833305780e8797e361214269f85ca824274d7b4ed
GET /static/img/flags/new/48-squared/ua/2ea50f1c1fb480c4557a5578f71657fc3152c3a1.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 134
server: nginx
date: Tue, 04 Oct 2022 02:15:00 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-86"
expires: Thu, 03 Nov 2022 02:15:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2l2I3k2j9-dlOnzsXpXxUinRkIHQ3uBKQTKKoRNf1wvqPk1r-RQ5xg==
age: 1842062
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/landingpage_cloudfront_sd/1bf399220c9931431f658f6574069285b9123c71.js
200 OK 80 kB URL HTTP/2 cf.bstatic.com/static/js/landingpage_cloudfront_sd/1bf399220c9931431f658f6574069285b9123c71.js
IP
File type ASCII text, with very long lines (51645)
Hash 39799750fb8f3d2b7b797d2c5c7711a8
682adf12cfe63179490de196894e3a6bd46f5ebb
a5a788d6c56cc14c7c8bdd3618deee35743f7fcfb65d97b46b73bea6ca5d4ae5
GET /static/js/landingpage_cloudfront_sd/1bf399220c9931431f658f6574069285b9123c71.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 20 Oct 2022 11:18:19 GMT
last-modified: Thu, 20 Oct 2022 10:56:21 GMT
etag: W/"63512955-67fd9"
expires: Sat, 19 Nov 2022 11:18:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lSWqcJs0Nm3m3GsvjojHPXfdJ-5oIvRw43fVD2xYbWYoRG8NPQaMeQ==
age: 427062
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/in/20aa535a5d3c505dd02fea275ed1a36c0fb1fe08.png
200 OK 344 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/in/20aa535a5d3c505dd02fea275ed1a36c0fb1fe08.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash d393a8574f0e51fce295082d390baad2
bd9f6c20fc33d74ca2b49e828721298c1beaabe7
fe628ee3822daace85b0d6b50b24295b25406735b724d65ac7813d3a23e35bb2
GET /static/img/flags/new/48-squared/in/20aa535a5d3c505dd02fea275ed1a36c0fb1fe08.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 344
server: nginx
date: Thu, 06 Oct 2022 03:41:29 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-158"
expires: Sat, 05 Nov 2022 03:41:29 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hmOphGIJGf0PuuaMvnhVPf869KcDH8NkICLkQe82D34e9-g538GlIA==
age: 1664073
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/my/6d811cf6127cea0a957ca0243546a03339fa19ac.png
200 OK 499 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/my/6d811cf6127cea0a957ca0243546a03339fa19ac.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 822b7bd88d4723227ae587567f978918
767884bb4c8904e55bd5c943aec9a867984137b4
e5f05ae53de8b16cc10e8bc868e9c5d9786930973bdce663ee64d206c04388ef
GET /static/img/flags/new/48-squared/my/6d811cf6127cea0a957ca0243546a03339fa19ac.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 499
server: nginx
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 21 Oct 2022 12:47:14 GMT
expires: Sun, 20 Nov 2022 12:47:14 GMT
cache-control: max-age=2592000
etag: "5f55f887-1f3"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JakNXT5bcoxZ4_CPvQ2IsCgQYzIcglvvSSGWHzvI1BAvCTSPv4xqjw==
age: 335328
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/th/53a76d6856962953d739d07ac61f04adee50a3d1.png
200 OK 150 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/th/53a76d6856962953d739d07ac61f04adee50a3d1.png
IP
File type PNG image data, 48 x 48, 4-bit colormap, non-interlaced\012- data
Hash ff949a5fc9c52cbb395e15afd6cbbf53
a63fbcbe8300ee1a16399b46c1fd300f1b9e6b8b
67b2c242d9fb8390f051c11070e23792de15f513d53175ce7730484a7c789ef9
GET /static/img/flags/new/48-squared/th/53a76d6856962953d739d07ac61f04adee50a3d1.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 150
server: nginx
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 23 Oct 2022 04:15:34 GMT
expires: Tue, 22 Nov 2022 01:54:06 GMT
cache-control: max-age=2592000
etag: "5f55f887-96"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oteb3RUMns3SXA1jahiMZE7VLHjsV8O3HOeP5qRCKbnkos582ONHxA==
age: 201716
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/searchbox_cloudfront_sd/4168b019311f7d5adc94b3c04f814da15114a200.js
200 OK 51 kB URL HTTP/2 cf.bstatic.com/static/js/searchbox_cloudfront_sd/4168b019311f7d5adc94b3c04f814da15114a200.js
IP
File type Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Hash e070f4f7d231ef53fe4d1907ce5f44d2
e2bf2dd52b10a0132ee8e1a0cd38129baa2b56c7
6b6b4929f63ae38c3cf1857c6dcefaea02ca8f5b3ff2f9872ac2a16a778b879c
GET /static/js/searchbox_cloudfront_sd/4168b019311f7d5adc94b3c04f814da15114a200.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 25 Oct 2022 06:45:31 GMT
last-modified: Tue, 25 Oct 2022 06:20:16 GMT
etag: W/"63578020-396dc"
expires: Thu, 24 Nov 2022 06:45:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z4EUEtJHtmwIUc8gzQSb4aHIH7E-HEEC_D3jMBNUb5t_eOwIuYRVPg==
age: 11430
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/hr/e7a46f4dad977aecafa6a3680972e0c137a1bc41.png
200 OK 815 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/hr/e7a46f4dad977aecafa6a3680972e0c137a1bc41.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 0964eedc0f19b195664c3f75bb22c6ab
22b1a1a6062e7f5fcad6bcb023bb5fd87d22e07d
fff82225f56361a415858aa788a2d640331f82f6d9462ac9dbcf39e9023b5a6f
GET /static/img/flags/new/48-squared/hr/e7a46f4dad977aecafa6a3680972e0c137a1bc41.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 815
server: nginx
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Mon, 24 Oct 2022 05:04:19 GMT
expires: Wed, 23 Nov 2022 05:04:19 GMT
cache-control: max-age=2592000
etag: "5f55f887-32f"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lWtFYUpXi6hQ2W93KybzaTs2xc_M1O_OUSbHrPF09yyQt_ZCiYcZfA==
age: 103903
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/index_cloudfront_sd/225035d407384321db397ab901e9886f12e1d436.js
200 OK 17 kB URL HTTP/2 cf.bstatic.com/static/js/index_cloudfront_sd/225035d407384321db397ab901e9886f12e1d436.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a7b4962f5cec8310788312933722774b
da620d4d414c1c79a779cdeb15c859b44ba6f8a8
2b79f7f9011ad7a8f1e1069f241ba1eecd161b97ad1f5b64a3175222bab37d5f
GET /static/js/index_cloudfront_sd/225035d407384321db397ab901e9886f12e1d436.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 21 Oct 2022 10:35:45 GMT
last-modified: Fri, 21 Oct 2022 10:30:50 GMT
etag: W/"635274da-12af9"
expires: Sun, 20 Nov 2022 10:35:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VH4Ct9M7Pm6kqtXcEd_RM08PqS_U-vjSl30ORlg-y8EoJYk5nTEZ9Q==
age: 343216
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js
200 OK 2.3 kB URL HTTP/2 cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js
IP
File type ASCII text, with very long lines (5619), with no line terminators
Hash d025c75b5983e2df1c2e5e4bfa14f01c
28693cc4b22ed320c8879ec1372517d60876fa8e
1bd65db0ba7be60714bf3cfd85da8250d020045ba42fa0c70ff13882ff71fb11
GET /static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Wed, 28 Sep 2022 00:19:58 GMT
last-modified: Tue, 04 Feb 2020 10:19:57 GMT
etag: W/"5e39454d-15f3"
expires: Fri, 28 Oct 2022 00:19:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5mkJ_DedppB_JkGqiykV7b7mFi7u8ZtVq7Q1qBDO5XpHKe8hBwmOHA==
age: 2367363
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/rs/c1bc4fc1d782713cfec17a071dadca6b755a233e.png
200 OK 1.4 kB URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/rs/c1bc4fc1d782713cfec17a071dadca6b755a233e.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash b9379a24299e89e8a3a7f67e055583f3
9fcee25113376edc2308bd7e28d30a4a924cbd58
b2d098301fdd75a1c93c85f1f349262d5f7ca3de8a6eaad518095258c19e8a1b
GET /static/img/flags/new/48-squared/rs/c1bc4fc1d782713cfec17a071dadca6b755a233e.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1386
server: nginx
date: Tue, 27 Sep 2022 02:42:42 GMT
last-modified: Mon, 07 Sep 2020 10:40:08 GMT
etag: "5f560e08-56a"
expires: Thu, 27 Oct 2022 02:42:42 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vvEHK1H9t9Y7wKA12Y0yxRTNfzd_z9Vn3cxZs7Ru4pCpf4zWhMuAFw==
age: 2445200
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/si/f0619cdd45548522566c6d72a660ddc011906184.png
200 OK 442 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/si/f0619cdd45548522566c6d72a660ddc011906184.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 05cbcc07c185368a084a9309aa914d61
8e11596590eacbb80269c99400b4a87e02e2583b
211e73d3bad99d5286e8f2378547adbf522b0f047e45aeed0d5dea6741488444
GET /static/img/flags/new/48-squared/si/f0619cdd45548522566c6d72a660ddc011906184.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 442
server: nginx
date: Fri, 30 Sep 2022 00:25:04 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-1ba"
expires: Sun, 30 Oct 2022 00:25:04 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wYB1Uy9jHrj5_wXE8inJqMHrxR9t4DqP2sIc2Zc3rKnb6RHYcXA7eA==
age: 2194258
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/vn/90b17da2aafaebce7b0c34189747e1e10dba8041.png
200 OK 333 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/vn/90b17da2aafaebce7b0c34189747e1e10dba8041.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 3a0135828216d13780bbd76bc0d6617c
613be32ee6beabb7a18a107f6c9bdd0c5d6dada9
37cb08ba3ee531e1f6b5a8a3fbf4be6013a3a9a0442286b07aeb2c947530cf04
GET /static/img/flags/new/48-squared/vn/90b17da2aafaebce7b0c34189747e1e10dba8041.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 333
server: nginx
date: Wed, 12 Oct 2022 14:37:24 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-14d"
expires: Fri, 11 Nov 2022 14:37:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MC66vuz68UmFTvg1pk4NSQdKkor7qVMA90hqxUGxaUpgGGfqC22xWA==
age: 1106318
X-Firefox-Spdy: h2
cf.bstatic.com/libs/privacy-consent/releases/2.1.32/customer/cookie-banner.min.js
200 OK 3.6 kB URL HTTP/2 cf.bstatic.com/libs/privacy-consent/releases/2.1.32/customer/cookie-banner.min.js
IP
File type ASCII text, with very long lines (8638), with no line terminators
Hash 17aa6997e2c35f16ba1c2d291b5bb99e
b7d59389e7cf180c228b48d2c1c4605f6e4ffa6e
0ce5b9a54f90e3adabc3b78ae99d1bf484ccd357b403fdf8c50ab17ff700eeb0
GET /libs/privacy-consent/releases/2.1.32/customer/cookie-banner.min.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 07 Oct 2022 23:03:11 GMT
last-modified: Tue, 04 Oct 2022 23:02:37 GMT
etag: W/"633cbb8d-21be"
expires: Sun, 06 Nov 2022 23:03:11 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -68BAZgDHblGKaDpR1sQmPSNs0efnTbhPrDr6S6UAGt9AvakyEwHMg==
age: 1507970
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/new/48-squared/is/7d644655f895f8e346b964dc18cf5b6608a98d52.png
200 OK 298 B URL HTTP/2 cf.bstatic.com/static/img/flags/new/48-squared/is/7d644655f895f8e346b964dc18cf5b6608a98d52.png
IP
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 227c1e1707b8caf0b17266f188b3b099
294b9da49254731a4cb0fe538d9bc8ef44d1dd92
e1e54eb27d785ff86901a728964f40183e845b8301f9196e163e5fe919bcfb5f
GET /static/img/flags/new/48-squared/is/7d644655f895f8e346b964dc18cf5b6608a98d52.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 298
server: nginx
date: Wed, 19 Oct 2022 00:19:18 GMT
last-modified: Mon, 07 Sep 2020 09:08:23 GMT
etag: "5f55f887-12a"
expires: Fri, 18 Nov 2022 00:19:18 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 47n-lX2rBhVEKENYmiFp_Dmp2c5nVJNz-m3XbviJTgVN3ef-giedqw==
age: 553004
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/square250/644297.webp?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o=
200 OK 15 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/square250/644297.webp?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ce0484a62e175f311523b75f140b4211
eba0d06f0c622ecf224822c856430ad707ebdfc1
edf0c0cf1cb6689a78e3b4cd11ff14de3c5947583b589dfbb87379023a484991
GET /xdata/images/city/square250/644297.webp?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 14598
server: nginx
date: Fri, 07 Oct 2022 02:35:47 GMT
etag: "b88b8b88d0888e4a8d560357ccc344e677460984"
expires: Sun, 06 Nov 2022 02:35:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: absDWg2gxS5fy_tsb2_R6ttWD_gXWDzcwV0KKUMZirW9tEw6ktfr4w==
age: 1581615
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/square250/644293.webp?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o=
200 OK 11 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/square250/644293.webp?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e61daadd9f2361db8bea014c640fc26b
8e637a06e40e6d0d780cf55b0982fd82d2dfbacc
941706cdc14e54f8ec6c3bacc8b5bad26dd5553d0bbd34490450e67387acb132
GET /xdata/images/city/square250/644293.webp?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 10668
server: nginx
date: Sat, 01 Oct 2022 07:10:25 GMT
etag: "36b7d511921391dc2c637f7b2e95ba00aeec76fc"
expires: Mon, 31 Oct 2022 07:10:25 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W-I_4ZGapq-c4jTjcxUz89V4fh7UtfNk1xCJFVrtsue0m7Vv1YB5CQ==
age: 2083537
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/square250/740935.webp?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o=
200 OK 10 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/square250/740935.webp?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f46894a16ebb993b489c7eb4947b2321
a3ebffea1f61cb837f7512345ea899a5908cbf0a
ea3005e0d81b1ad9fded26293f7442ee24413818af379d68bed7d717e8b5f7f2
GET /xdata/images/city/square250/740935.webp?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 10180
server: nginx
date: Sat, 01 Oct 2022 03:36:57 GMT
etag: "0b191dd423ea0ef6e4762bc18f717f94b808fa2c"
expires: Mon, 31 Oct 2022 03:36:57 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xuOCNc0ia7eCJe4M5xZOGLkgiERyAaa86YTwn6sD__yQJwpwFDcQbQ==
age: 2096345
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/0beba9fc333c503aa155b077036cbfb92b62b5bb.css
200 OK 40 kB URL HTTP/2 cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/0beba9fc333c503aa155b077036cbfb92b62b5bb.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cd6e82e5bf6552d8c3d436a503eb80a3
cd11213a63d0d2a2522eb0cbe76c603bb1b1a253
004e36149fb48a5ff6e4834c11b24ba472c93e9c01d98511a3ad83fde6268f87
GET /static/css/gprof_icons_cloudfront_sd.iq_ltr/0beba9fc333c503aa155b077036cbfb92b62b5bb.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 18 Oct 2022 10:06:11 GMT
last-modified: Tue, 18 Oct 2022 09:55:44 GMT
etag: W/"634e7820-28c36"
expires: Thu, 17 Nov 2022 10:06:11 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FSEiex5lWkT7-CRwUBnQDHjxKOtYXbrk-GYaBroEXNrnUe0CGC3zFw==
age: 604190
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/bcbfc6f443eed5b9c9774dec5b8bb834b6cab779.css
200 OK 15 kB URL HTTP/2 cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/bcbfc6f443eed5b9c9774dec5b8bb834b6cab779.css
IP
File type ASCII text, with very long lines (6253), with no line terminators
Hash 3817539a41fb43d9464ac75633d50e16
a867c7b2fe824ea7257d334683b047f26d659a73
f5b54b7cfef30cedbbbc6fd4848bcb0e40248f65994e77abba0abf1e5d8c45b5
GET /static/css/incentives_cloudfront_sd.iq_ltr/bcbfc6f443eed5b9c9774dec5b8bb834b6cab779.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Thu, 06 Oct 2022 15:42:43 GMT
last-modified: Thu, 06 Oct 2022 13:03:16 GMT
etag: W/"633ed214-186d"
expires: Sat, 05 Nov 2022 15:42:43 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3zztcWdlbZ5pVE5cdesZuNuUtcNCbcA_4hyUbsVqB9EkjYSqOX_v7g==
age: 1620798
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/5e24449c9ba58a852c0d84309b6175389f581224.css
200 OK 71 kB URL HTTP/2 cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/5e24449c9ba58a852c0d84309b6175389f581224.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9665ca1c04a90bfc304a12c29b12193b
5394fda1de9fd2a842f36eaf3abedc16bd1ea264
1a2ce99144f48b4d8ec6dbca27c6a8d1bd9f24ace7c9e16e0de34abdb5d7b951
GET /static/css/main_cloudfront_sd.iq_ltr/5e24449c9ba58a852c0d84309b6175389f581224.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Thu, 06 Oct 2022 13:21:45 GMT
last-modified: Thu, 06 Oct 2022 13:03:16 GMT
etag: W/"633ed214-77847"
expires: Sat, 05 Nov 2022 13:21:45 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Fy0-1CxAFpCnLs6x8kU9QxE_PJmBjDhguJzcthQfPdyu1upRgTIHPQ==
age: 1629255
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/region/square250/48107.webp?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o=
200 OK 8.2 kB URL HTTP/2 cf.bstatic.com/xdata/images/region/square250/48107.webp?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 771aeeaab19a95606d95d745b82c71a5
e0ea1f6e9d3213d1c9dc5776630581343c008efe
34ab25e12e5af40fb0361fbc2791c2b95ca19ff49f723c0670d1536e94167899
GET /xdata/images/region/square250/48107.webp?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8182
server: nginx
date: Sun, 02 Oct 2022 05:34:02 GMT
etag: "969c089a0ea2277787f9305b5be7f1ad66d8df57"
expires: Tue, 01 Nov 2022 05:34:02 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FDJ-cU-MWAeEU9hW5r_v4KXGkza4me9vo_UaibRkOXrQDA2SWomRDw==
age: 2002920
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/square250/930853.webp?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o=
200 OK 12 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/square250/930853.webp?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0867b4a18dd02f341467ac3cd9c87624
6dfa10bfc60382146a1cbdcdeaa1d2bf94ca8fe6
abac49fbb301fb90860cc5c950d292473ac3db44a6fc2e62398e61bf2bf7655f
GET /xdata/images/city/square250/930853.webp?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 12010
server: nginx
date: Mon, 03 Oct 2022 07:10:33 GMT
etag: "eff6bdb1dbd875baf37e546d4f939f3b963a3a2e"
expires: Wed, 02 Nov 2022 07:10:33 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Zv2faoUwt2TDX9Gey1TJ0Uy-4fECpUA12t7dL4E-m1G-GQnIoRZhFQ==
age: 1910729
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/square250/967857.webp?k=5733a245dbb186ec0986c0a5c533acc704650d51cdfed7410cf0bcef375e5bc4&o=
200 OK 12 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/square250/967857.webp?k=5733a245dbb186ec0986c0a5c533acc704650d51cdfed7410cf0bcef375e5bc4&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 57d087e34bf07df0e6df2f13d870f2e2
47462553409d660454e9bee14f3f442d7e757e13
d504a989b326836c6718ca6acb3806f60ad3e5a2cc48824a7b1c6d41691e8654
GET /xdata/images/city/square250/967857.webp?k=5733a245dbb186ec0986c0a5c533acc704650d51cdfed7410cf0bcef375e5bc4&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 12264
server: nginx
date: Wed, 05 Oct 2022 04:02:14 GMT
etag: "66664e4c8d9889405819baeda42956281e2f73ce"
expires: Fri, 04 Nov 2022 04:02:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JdKdMI5IhNbVFaIRyavnJEamVRFxHcY2n_5VGHd6_3ycPvyy5EMIgA==
age: 1749228
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/fe53fa28a9fb35778228159487f58bd9dd895f9f.css
200 OK 26 kB URL HTTP/2 cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/fe53fa28a9fb35778228159487f58bd9dd895f9f.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9ff5cbc326a4cafaeb9bfecb048fe214
3a1e1959c1df36b7155fb03816a8f3f7565acf20
5c168d82f2a86bd630120e4f6c1a7ca74be2baaf7ac3b922acc79fc96f1ca59f
GET /static/css/main_exps_cloudfront_sd.iq_ltr/fe53fa28a9fb35778228159487f58bd9dd895f9f.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 25 Oct 2022 06:45:30 GMT
last-modified: Tue, 25 Oct 2022 06:20:15 GMT
etag: W/"6357801f-1f528"
expires: Thu, 24 Nov 2022 06:45:30 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QnVBMLE76ORl7ZZuASLKSXi4PmDMDgyzzYrBbQ_eq7jKNHMRX1SLFA==
age: 11430
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/24/no/6193a14e4d59f814f46ee6313cdd6e11811abeb3.png
200 OK 405 B URL HTTP/2 cf.bstatic.com/static/img/flags/24/no/6193a14e4d59f814f46ee6313cdd6e11811abeb3.png
IP
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash be6379111ab8866c20c123b85af97d42
819ba2a2c986ed6f4ff309661b5c27ac172228df
fecd6ef10eb5111323f3b1bb9d8e99e37a881abe33ae37f8e74f046c3634b25f
GET /static/img/flags/24/no/6193a14e4d59f814f46ee6313cdd6e11811abeb3.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 405
server: nginx
date: Tue, 04 Oct 2022 02:59:16 GMT
last-modified: Wed, 10 Apr 2019 11:21:53 GMT
etag: "5cadd1d1-195"
expires: Thu, 03 Nov 2022 02:59:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M7Lba8lsax2BqwzEFP6IGREU3A4LCzQlHdUeu3Zg_LKiYwmfxsW4DQ==
age: 1839406
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/bf2a35b52281e77942b5ebad9911f4fe65ceb55c.css
200 OK 52 kB URL HTTP/2 cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/bf2a35b52281e77942b5ebad9911f4fe65ceb55c.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 397c4e0ed6dca6982392f7ee2854d0ad
6b6d60d8355c49f18bd1bc34e610966c73c0eb00
3fe3a1e4d9de5256392f1c1085aa143a86c9520f4330fb530bb351c2928fbbff
GET /static/css/index_cloudfront_sd.iq_ltr/bf2a35b52281e77942b5ebad9911f4fe65ceb55c.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 25 Oct 2022 06:47:59 GMT
last-modified: Tue, 25 Oct 2022 06:20:16 GMT
etag: W/"63578020-56bea"
expires: Thu, 24 Nov 2022 06:47:59 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aiIEjeT7d60W9djBtByfB9vJqUQD8_jYqIGXKVb95vTwCsuuxu8tGA==
age: 11281
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/e8153762b916a887a953370963ec9f1cf7eab5e7.css
200 OK 12 kB URL HTTP/2 cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/e8153762b916a887a953370963ec9f1cf7eab5e7.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 10b39d7f0ee1e78b9c73e13f323a1ded
5da43396cfb747c5f973c39c10f54ebf7911c9bb
ad00cb607e743a1f706050dc45019697fedd0c085628811f526ca50dbdad5941
GET /static/css/xp-index-sb_cloudfront_sd.iq_ltr/e8153762b916a887a953370963ec9f1cf7eab5e7.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Thu, 06 Oct 2022 15:42:59 GMT
last-modified: Thu, 06 Oct 2022 13:03:17 GMT
etag: W/"633ed215-11a36"
expires: Sat, 05 Nov 2022 15:42:59 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Aaw-gHlwystN3OaNy6yPBALKwNiZEZE5C6zFBOuz2txi9lsDXCaQAA==
age: 1620782
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/24/es/a14721d7698af5131b08bd34227508c729ab11bc.png
200 OK 490 B URL HTTP/2 cf.bstatic.com/static/img/flags/24/es/a14721d7698af5131b08bd34227508c729ab11bc.png
IP
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash d2d4c6110399a8b2c4c1ea09b7f8eded
f846d4aee888c73998150452c3bde5ff71f7a0e7
630bbc6535a3d0cee406f52ee3664265adc2eaa51227fb8a3ff5c70af9e79b3a
GET /static/img/flags/24/es/a14721d7698af5131b08bd34227508c729ab11bc.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 490
server: nginx
date: Thu, 06 Oct 2022 02:45:42 GMT
last-modified: Wed, 10 Apr 2019 11:21:53 GMT
etag: "5cadd1d1-1ea"
expires: Sat, 05 Nov 2022 02:45:42 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wDpysTOLm65AYl1SUPAQMaKtiATaFfN9bgOv_rmTdwqEo7ru63CM0g==
age: 1667420
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/flags/24/it/b539a003f197845e447b9d00d91cd74dd57bf3dd.png
200 OK 436 B URL HTTP/2 cf.bstatic.com/static/img/flags/24/it/b539a003f197845e447b9d00d91cd74dd57bf3dd.png
IP
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash 1416ab6009ad93f86e9cfc23a54e0c40
0578e45fadd1da2c26a4d5fe814a9239ff5eae97
88bb107350d5324906a2cf2b95847879ecf6bb09502d1186c38daaf15268830f
GET /static/img/flags/24/it/b539a003f197845e447b9d00d91cd74dd57bf3dd.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 436
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:53 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 23 Oct 2022 04:12:10 GMT
expires: Tue, 22 Nov 2022 03:46:48 GMT
cache-control: max-age=2592000
etag: "5cadd1d1-1b4"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gLpHH2n467lP1Mh9xGKbQ6L-M-_RxHBXAOvOGtUuiZ1_8Wi3cs4xFw==
age: 194954
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/genius-globe-with-badge_desktop/d807514761b3684aedebced9265c5548a063b7a0.png
200 OK 7.5 kB URL HTTP/2 cf.bstatic.com/static/img/genius-globe-with-badge_desktop/d807514761b3684aedebced9265c5548a063b7a0.png
IP
File type PNG image data, 160 x 160, 8-bit colormap, non-interlaced\012- data
Hash 06184b155b03a3035384042b32a67174
3458ca2a84896f0f5c39e3fb705b5c51b41c6553
b0999281a9703706445e24c253b75e9e36fc0d5d76f01b0842f902b08f00c2dd
GET /static/img/genius-globe-with-badge_desktop/d807514761b3684aedebced9265c5548a063b7a0.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7455
server: nginx
last-modified: Tue, 21 Sep 2021 07:46:56 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 22 Oct 2022 19:04:31 GMT
expires: Mon, 21 Nov 2022 12:08:21 GMT
cache-control: max-age=2592000
etag: "61498df0-1d1f"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3xh4a0lBGvD1JsGQ684ccDkLHALTIKeC0wGqjI0ZeC4fUqsNllErLw==
age: 251261
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png
200 OK 1.6 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png
IP
File type PNG image data, 91 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e32efd25ac0214b375fc8a6a32890f2
cd46a79db7e53e19d5869b3cb3e7aa22ee523479
807c8a1b498e17d227cf48a640b778bdc4398a9852493cb2f40bf0f33651d0dd
GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1628
server: nginx
date: Mon, 26 Sep 2022 01:55:24 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
etag: "5cadd1d3-65c"
expires: Wed, 26 Oct 2022 01:55:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jkmgfeFPEIpjRBVIXuGyAMxpgGJ0NtSqVb5mq_NCo6PYsDtI14WXbA==
age: 2534438
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png
200 OK 1.6 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png
IP
File type PNG image data, 91 x 26, 8-bit colormap, non-interlaced\012- data
Hash b6d0b31340d7a113f63b936e23d06f78
268e3856da737f7e56e679258949ef70ddde47f4
18c62988860a8ffd90bab6376b4fe36a723bd39403c420d3943aa3eb5a0029c5
GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1591
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 23 Oct 2022 18:10:35 GMT
expires: Tue, 22 Nov 2022 18:10:35 GMT
cache-control: max-age=2592000
etag: "5cadd1d3-637"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oUev8kcC3_Y54drRK8QUfIDNFqlSsF3vBAZ4uHTwvWwGHTP9NTW0Ew==
age: 143127
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png
200 OK 1.2 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png
IP
File type PNG image data, 79 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 6384185cbe9a4f106857a3cb85caea98
0e31a4fe2ce98a8b4fda60687aa71079b4d3a95b
5839f0330821cf08029beddd6d248170da1af16cd7aff253e7bd075d591f5d42
GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1154
server: nginx
date: Mon, 26 Sep 2022 07:51:28 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
etag: "5cadd1d3-482"
expires: Wed, 26 Oct 2022 07:51:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TavoM7Fj9rMX17_W_EMj2HbOzI2MgxlohtaOatwU5FZ_hb7oTZBE4w==
age: 2513074
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/main_cloudfront_sd/ba880e84545dd9bd3237ed4557cef2bb089ba93f.js
200 OK 2.1 kB URL HTTP/2 cf.bstatic.com/static/js/main_cloudfront_sd/ba880e84545dd9bd3237ed4557cef2bb089ba93f.js
IP
Hash 27e71a5124018e16eae0b8897618623d
d0d54d88b04edfc71f338c19eab9994632bc6ced
1d6e86e59ab7235a8343f494c8e8da6cc02c5a98a75d682401340e6d06935f20
GET /static/js/main_cloudfront_sd/ba880e84545dd9bd3237ed4557cef2bb089ba93f.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 20 Oct 2022 11:18:19 GMT
last-modified: Thu, 20 Oct 2022 10:56:20 GMT
etag: W/"63512954-86991"
expires: Sat, 19 Nov 2022 11:18:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h0-HX9bJGdE5JM7z8vK35pQpg-yEpAXsH5UQTXr6aoUgL4ase2bAkA==
age: 427062
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_rentalcars/6bc5ec89d870111592a378bbe7a2086f0b01abc4.png
200 OK 3.2 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_rentalcars/6bc5ec89d870111592a378bbe7a2086f0b01abc4.png
IP
File type PNG image data, 109 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 38784d782a29a302dab9135d63aef953
04db0e863a35062a355c4b2ea9585ec83c4ffc3e
8561e200a6a57195e480ed9d893b14579ef6acdeabfbb3fe22b5e4ec9b84b455
GET /static/img/tfl/group_logos/logo_rentalcars/6bc5ec89d870111592a378bbe7a2086f0b01abc4.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3221
server: nginx
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 23 Oct 2022 00:20:38 GMT
expires: Tue, 22 Nov 2022 00:20:38 GMT
cache-control: max-age=2592000
etag: "5cadd1d3-c95"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ndloduuRL3I2ud83ZM2XydW0nNLksm5jMDcz5zU4aGHEIGakyhBetA==
age: 207324
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png
200 OK 2.3 kB URL HTTP/2 cf.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png
IP
File type PNG image data, 95 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash d05a0ab9bf394439a1584a2b0d44db5c
183c28023d3ba3358a7a5df1db887582ae5340ed
b23272a9692c4ec3c020935917e9d096490876c976abec1290bd3cc9aae13974
GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2344
server: nginx
date: Sun, 25 Sep 2022 21:44:58 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
etag: "5cadd1d3-928"
expires: Tue, 25 Oct 2022 21:44:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sSdzODQF03ta_5BGx7b3u0pE-YfArmpZW_gZVsowbhtesS-TmHBqeQ==
age: 2549464
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png
200 OK 73 B URL HTTP/2 cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png
IP
File type PNG image data, 1 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash ff823944bc0bb9e4bf87f0ad14f687d1
4b68ba281b9ab171611569bf78971df6970efbc1
6153929734ec12ec07072f327c1112301828497e4dd356ca261461b0b7ba9621
GET /static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 73
server: nginx
date: Sun, 02 Oct 2022 01:50:26 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
etag: "5cadd1d3-49"
expires: Tue, 01 Nov 2022 01:50:26 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iEUge4hYXRKjAO1H2gwpS6JvYrYxEL3KuxkLc8FCV1u6EN1jxKQdpA==
age: 2016336
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/540x270/740930.webp?k=58e6fd52fcf3174223967fc1629c1de15a9ca9de10347618038d042b56e0f968&o=
200 OK 24 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/540x270/740930.webp?k=58e6fd52fcf3174223967fc1629c1de15a9ca9de10347618038d042b56e0f968&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 540x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 33732427eae17faad3950d16a56bd1d4
b71ec639fd23492877892527f81334c568aa5597
c93462cc65dbadac1456b7c6428ff3f9e08eba808c7372f420144fa56307b75b
GET /xdata/images/city/540x270/740930.webp?k=58e6fd52fcf3174223967fc1629c1de15a9ca9de10347618038d042b56e0f968&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 23600
server: nginx
date: Thu, 20 Oct 2022 18:16:16 GMT
etag: "4ecb0d30f9af3c76296c1b459a8e30ac04d6aeed"
expires: Sat, 19 Nov 2022 18:16:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DOHnMEFK7WnQiFhCyb6j4WZIwLKeJqMQ0iSwaHJy9YB78ICpp55TLA==
age: 401987
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/540x270/844103.webp?k=b4ff3d17a962184dfa8823beec573fa3f679306e8b3fa897b901ba0dedb157bd&o=
200 OK 24 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/540x270/844103.webp?k=b4ff3d17a962184dfa8823beec573fa3f679306e8b3fa897b901ba0dedb157bd&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 540x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8da231dc5119fa2631196021b5b76b79
acc913dd71a600d59d1485aeaf478217e6efb323
0e422d4bd5462f934cf16f7cf8be46278492bc9f35f4765cbb2382ba9233588c
GET /xdata/images/city/540x270/844103.webp?k=b4ff3d17a962184dfa8823beec573fa3f679306e8b3fa897b901ba0dedb157bd&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 24262
server: nginx
date: Sun, 23 Oct 2022 02:17:10 GMT
etag: "54008e3601207ff3ed07c301b8bd26fbfe29ada3"
expires: Tue, 22 Nov 2022 02:17:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kqMUQ3voA61oNl97MiUg7tupss3zIbIvxkZSz7Y4-PWvCRX5EGNggA==
age: 200333
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/540x270/879406.webp?k=dd541d1e78f3b12096d858880a21807954f88849a62946cca580a95ae81c99fb&o=
200 OK 19 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/540x270/879406.webp?k=dd541d1e78f3b12096d858880a21807954f88849a62946cca580a95ae81c99fb&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 540x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b025c3e84da52e3a72be62b260253c10
d5f3416d6ff4cc224478a75718b543399839a02a
c50c5c5c0aa92f4411da494d76937f79499e88e1eb6569835a3946ef08828ee2
GET /xdata/images/city/540x270/879406.webp?k=dd541d1e78f3b12096d858880a21807954f88849a62946cca580a95ae81c99fb&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 18586
server: nginx
date: Sun, 23 Oct 2022 02:28:47 GMT
etag: "b83c16a467e31078a614e9cd1f055daa971d9099"
expires: Tue, 22 Nov 2022 02:28:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZZV89u4taA8qH-ZsOHiOhOqvxbOc_LTbS87irgVwroYVG5Nt1E3aQg==
age: 199636
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/city/540x270/693535.webp?k=39f09e1a64b76dc38b82fae5e51dd9728a68c06b8a0a26c2e6254a80eb792e72&o=
200 OK 23 kB URL HTTP/2 cf.bstatic.com/xdata/images/city/540x270/693535.webp?k=39f09e1a64b76dc38b82fae5e51dd9728a68c06b8a0a26c2e6254a80eb792e72&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 540x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1cf4d8802d8a7c29a1c6a8f84fb42743
f0517ef84d0f9c60d23155359835b7e7f208d000
b75539e7d3b58a9a64ecfc01b01c0829392c6ccd991b3a9479c426bba4c4f6ac
GET /xdata/images/city/540x270/693535.webp?k=39f09e1a64b76dc38b82fae5e51dd9728a68c06b8a0a26c2e6254a80eb792e72&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 23244
server: nginx
date: Wed, 05 Oct 2022 00:30:44 GMT
etag: "ef9f8dcd0c5841de401b3a67cacf6f4cbf3eea00"
expires: Fri, 04 Nov 2022 00:30:44 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0ej4mnYu5CEds1J-w8HHm6BoC-C1xxJPjp0frlls9gIEnG2T0AhmRA==
age: 1761919
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/540x270/65633294.webp?k=13eb1edcf90c9ee12f1f3b130c6435a9ec3175cb0633862a897a10ea25f2f029&o=
200 OK 31 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/540x270/65633294.webp?k=13eb1edcf90c9ee12f1f3b130c6435a9ec3175cb0633862a897a10ea25f2f029&o=
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 540x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 606367d465fa9ffa8f549514869c322b
7e70beeff754fa21a0946def72031833fee1ea50
a4b97277078d575651a3745ddd9a0b4ecdec4c42591e16f2a873f8e680b6dd67
GET /xdata/images/hotel/540x270/65633294.webp?k=13eb1edcf90c9ee12f1f3b130c6435a9ec3175cb0633862a897a10ea25f2f029&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 31426
server: nginx
date: Sun, 23 Oct 2022 04:08:08 GMT
etag: "f72d440f1e08197a502576fac0d9988733f285f1"
expires: Tue, 22 Nov 2022 04:08:08 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: poWFvdBltU_Uuf2iINJQ_Mu6ZBw2Vj7ICWLFq31t_OO_sIw4um4E5Q==
age: 193675
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/genius-banner-world-bg/2b5cdbad7b92073bc396b8b59d0bb421b3a01cba.png
200 OK 7.4 kB URL HTTP/2 cf.bstatic.com/static/img/genius-banner-world-bg/2b5cdbad7b92073bc396b8b59d0bb421b3a01cba.png
IP
File type PNG image data, 520 x 340, 8-bit colormap, non-interlaced\012- data
Hash a2bdd966488047aaa17dcebc5238432b
65c52eeb866eb2acbd183e5fb2dccc5205dbb6bf
cfc71dcddda21b32c0ac5ba5322bd41612224261fecdc38cd20a45b6b502457c
GET /static/img/genius-banner-world-bg/2b5cdbad7b92073bc396b8b59d0bb421b3a01cba.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/bf2a35b52281e77942b5ebad9911f4fe65ceb55c.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7367
server: nginx
last-modified: Tue, 21 Sep 2021 07:46:56 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 23 Oct 2022 05:38:00 GMT
expires: Tue, 22 Nov 2022 05:38:00 GMT
cache-control: max-age=2592000
etag: "61498df0-1cc7"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1kflzEemv3f_Y4opH43Vs4Cl4hq9BBHw28O8efMbVsv80MmbDykKew==
age: 188283
X-Firefox-Spdy: h2
cf.bstatic.com/static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2
200 OK 93 kB URL HTTP/2 cf.bstatic.com/static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 92724, version 1.0\012- data
Hash f132633e65809ec36c0f01b8a29fa457
e68a5b0de3e08ac85a13426ce3d8c13ad21d38ff
a98c20990fe3e31203fe2db8384af8e05e7b358cdae3c28b034e1f02b47db630
GET /static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://cf.bstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 92724
server: nginx
date: Thu, 06 Oct 2022 08:17:37 GMT
last-modified: Wed, 10 Apr 2019 11:21:49 GMT
etag: "5cadd1cd-16a34"
expires: Sat, 05 Nov 2022 08:17:37 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rVrbKIpesuIkah5XYTUD1cQRfmJKSV_VzHge2hDYnIW_Mu8C4NYbWg==
age: 1647506
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/apple-touch-icon/c9b35bf29a75cac2f430f80a5d4bc7fd961d21a7.png
200 OK 2.9 kB URL HTTP/2 cf.bstatic.com/static/img/apple-touch-icon/c9b35bf29a75cac2f430f80a5d4bc7fd961d21a7.png
IP
File type PNG image data, 141 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash eeda6c96402e2a9ec176f43f0ac79e09
9cd713387ba5b2a468ffae40d40ae3718d2d1c49
08a917ae9e017c4b633b3d5920bb8e073968fa14b9bb7e78192fd2761465d0a4
GET /static/img/apple-touch-icon/c9b35bf29a75cac2f430f80a5d4bc7fd961d21a7.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2915
server: nginx
date: Thu, 06 Oct 2022 10:27:58 GMT
last-modified: Wed, 10 Apr 2019 11:21:50 GMT
etag: "5cadd1ce-b63"
expires: Sat, 05 Nov 2022 10:27:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rA8r1PRkl9g6LkmGyCxJpwk1mIugz0T_dvPIVFpKNNc8Pif22sndvA==
age: 1639685
X-Firefox-Spdy: h2
account.booking.com/privacy-consents/implicit
204 No Content 0 B URL HTTP/2 account.booking.com/privacy-consents/implicit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /privacy-consents/implicit HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.booking.com/
Origin: https://www.booking.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 204 No Content
server: envoy
date: Tue, 25 Oct 2022 09:56:03 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; secure; HttpOnly
bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiJiZWM1NDU5Yi02MzNlLTQyZjEtODJiMi1jNDViMzBjMzAyODciLCJzZXNzaW9ucyI6W119fQ; domain=account.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; secure; HttpOnly
content-security-policy: report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=42&pid=fb8345d9538d0491&e=UmFuZG9tSVYkc2RlIyh9YTVpYxb9mtJD3cReeqMXo_5qxpf4W7JwdaPywujlMqYClpEWWnp7GR_-kbA2HXm3PiRWopy3QrKMJMbZhg96Pj4F15TvX2AmS6O-MuirWpTEMqEeDcF3vAzFCIdw7w5r1cnOmIxkNcp8; frame-ancestors https://*.booking.com 'self';
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=41&pid=fb8345d9538d0491&e=UmFuZG9tSVYkc2RlIyh9YTVpYxb9mtJD3cReeqMXo_5qxpf4W7JwdaPywujlMqYClpEWWnp7GR_-kbA2HXm3PiRWopy3QrKMJMbZhg96Pj4F15TvX2AmS6O-MuirWpTEMqEeDcF3vAzFCIdw7w5r1cnOmIxkNcp8; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-nKjXuUGsn6tG9Q3' 'report-sample'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; default-src *.bstatic.com bstatic.com 'self'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; base-uri 'none'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'; object-src 'none';
strict-transport-security: max-age=17280000
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jW1qFlufUMaezClyPokNRNmgD-EAP8B-a29KVBtWkbjH08r-jnWwPg==
X-Firefox-Spdy: h2
www.booking.com/c360/v1/track
200 OK 33 B URL HTTP/2 www.booking.com/c360/v1/track
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ef0949d72ccdcc083647d001c8ba940
ebe4e2284d3892b010623597d0945b6b5cd64448
fe1a912baa83e36855bb934de3f2cfdffe77b1224a552533a4a7f2e984a51e52
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Booking-Pageview-Id: 10d845d8a2ae02e9
X-Booking-AID: 2083685
X-Booking-Session-Id: b0167bbef2f53ed7f1eb403879d0486d
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Booking-Label: 6357b2af9e2ba903bf0a649e
X-Booking-CSRF: 8epXYwAAAAA=JDeZflszFTMyo_P4TGZz_TXKpSUFvsZcc1x8xKFZIUfvwC-nC-xsU0RUwtpbNdQXIqjPKe1rcEl91ixE2JpLFl2gRWowGeWcpyudg1uEgifbECOq9aSaPmXMzEu4dBIgy9mGGTAL7Sy8Ul0x-vbH7D-pOwjlbnQt3-g83ZwTdm9qXU_hGeoLJMeXcxi5piLj8xY8l7ZeFbiBIvdH
X-Booking-Language-Code: en-us
X-Booking-Client-Info: dDfPWKHAdDECLSCNVAELXT
X-Booking-Info: 1588860,1601020,1606170,1606360,1607820,1611780,1613770,1615240,1615680,1615930,1615950,1617290,1617500,1617510,dDfPWKHAdDECLSCNVAELXT,1617500|5,1617290|3,1617290|1,1617510|5
X-Requested-With: XMLHttpRequest
Content-Length: 572
Origin: https://www.booking.com
Connection: keep-alive
Cookie: _pxhd=8Ev3K6zJHbTC7EcdMkWdquQDni-yQD%252FmDZ3Kq4GLYxEXb5BeWBwHp0NtWkEAq2KjOqAg8GUpPh88AdnhM4pKjg%253D%253D%253AzU47FuycbZU5m2such%252FO5ZM53No1tNqRcIZZ6ImES84UQmH9BVF2xAQTyVhqmuKgUBvQ9gAKLHzSYxIHYSV3BnVZ5KVIe8hK5czFw--FDfI%253D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv0TjbhqUlRHMVCnR0%2FCiSiSzg8W%2Blxhj7zVXnM6QPy4PLjOcK7NPca1v3AXoOflETgEOvNosvtQDOlPhsCdMF%2FgKuKmpe%2Bb1TnUU3GvQsNuxHvz%2Be7E0jv48fjfFMzFNmUDTzxpO76phCyXUbrWYjIMi6hHnSZEmA%3D; bkng_frontend_sese_exp=0; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+25+2022+09%3A56%3A01+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=d96ad1bb-aacc-4b1f-8a72-e3b1d962e32b&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en-us.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e%26sid%3Db0167bbef2f53ed7f1eb403879d0486d%26keep_landing%3D1%26sb_price_type%3Dtotal%26&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 33
server: nginx
date: Tue, 25 Oct 2022 09:56:03 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbNyTiRoH3gOB%2F3TjucKQlbePKh254cUGbR4nUtwpbvravLABK%2BQ9aUP7LL6opfXq6DgHy2xwlGCTd1Ae57eEeEJfSNWjWuB6IcjPPUKJaZeyMk%2BUPgtLMjVFsreTDX075wgruRSXeVYFG6%2B1fY1gIxk%3D; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7APlf5sDzTk7m96el6_CaNek2bJVtFQUj5sRlh26POmb32UDuzn3_Q==
X-Firefox-Spdy: h2
www.booking.com/logo?ver=1&sid=b0167bbef2f53ed7f1eb403879d0486d&t=16666917611
200 OK 35 B URL HTTP/2 www.booking.com/logo?ver=1&sid=b0167bbef2f53ed7f1eb403879d0486d&t=16666917611
IP
Hash 79a611524d7c43a354c589264cc2376e
2e25649d9a8a208302be0502b47a0e44b07bc7c1
c7a9af81f3467d3c95760df18d0853bda8c191f612fb2e8b2b5c4ed941fbaf1a
GET /logo?ver=1&sid=b0167bbef2f53ed7f1eb403879d0486d&t=16666917611 HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
Connection: keep-alive
Cookie: _pxhd=8Ev3K6zJHbTC7EcdMkWdquQDni-yQD%252FmDZ3Kq4GLYxEXb5BeWBwHp0NtWkEAq2KjOqAg8GUpPh88AdnhM4pKjg%253D%253D%253AzU47FuycbZU5m2such%252FO5ZM53No1tNqRcIZZ6ImES84UQmH9BVF2xAQTyVhqmuKgUBvQ9gAKLHzSYxIHYSV3BnVZ5KVIe8hK5czFw--FDfI%253D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbNyTiRoH3gOB%2F3TjucKQlbePKh254cUGbR4nUtwpbvravLABK%2BQ9aUP7LL6opfXq6DgHy2xwlGCTd1Ae57eEeEJfSNWjWuB6IcjPPUKJaZeyMk%2BUPgtLMjVFsreTDX075wgruRSXeVYFG6%2B1fY1gIxk%3D; bkng_frontend_sese_exp=0; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+25+2022+09%3A56%3A01+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=d96ad1bb-aacc-4b1f-8a72-e3b1d962e32b&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en-us.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e%26sid%3Db0167bbef2f53ed7f1eb403879d0486d%26keep_landing%3D1%26sb_price_type%3Dtotal%26&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Tue, 25 Oct 2022 09:56:03 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
set-cookie: BJS=-; domain=booking.com; expires=Wed, 26-Oct-2022 09:56:03 GMT; Secure; HTTPOnly
strict-transport-security: max-age=604800
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=746745d9d78600cf&e=UmFuZG9tSVYkc2RlIyh9YbpBYTW1tHKz7j6BieH_jAyJsh6PfjwFTWaPnkw5_EtU; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5vm0UVE10Fy_o62sSD8EWiiTAXeFPnXvs9ObkJvKvq22oH8hprpZWQ==
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/f0c5bad50f9581e91835cd25e88970f5220299a4.css
200 OK 54 kB URL HTTP/2 cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/f0c5bad50f9581e91835cd25e88970f5220299a4.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1731f425347831edda7d70efe9a217be
eea4d8c0a0bcb4134526e74be49c8d9a74c7823e
818fdda7b6f8a9173fa4baee949f426dcddfc32d58c961e1e629f070b1dd14dd
GET /static/css/searchresults_cloudfront_sd.iq_ltr/f0c5bad50f9581e91835cd25e88970f5220299a4.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 25 Oct 2022 06:45:35 GMT
last-modified: Tue, 25 Oct 2022 06:20:16 GMT
etag: W/"63578020-55df0"
expires: Thu, 24 Nov 2022 06:45:35 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: axkAO7DD2by8R-A6RO68-_PD6u5lTnzHH6z4X7Rr4Iz2LgjcJUjPmQ==
age: 11427
X-Firefox-Spdy: h2
www.booking.com/get_handpicked_bh_properties?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total
200 OK 1.1 kB URL HTTP/2 www.booking.com/get_handpicked_bh_properties?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (5221), with no line terminators
Hash dd89fddd7e1ab08daa4337bcd7829c0b
19b6da9e6940f1375017847e17400a129c1ee8b4
1ca73a1d54df6facb803e01f729eb26383cd0b091e82cea738a0bc3e7b2427f2
POST /get_handpicked_bh_properties?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Booking-Pageview-Id: 10d845d8a2ae02e9
X-Booking-AID: 2083685
X-Booking-Session-Id: b0167bbef2f53ed7f1eb403879d0486d
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Booking-Label: 6357b2af9e2ba903bf0a649e
X-Booking-CSRF: 8epXYwAAAAA=JDeZflszFTMyo_P4TGZz_TXKpSUFvsZcc1x8xKFZIUfvwC-nC-xsU0RUwtpbNdQXIqjPKe1rcEl91ixE2JpLFl2gRWowGeWcpyudg1uEgifbECOq9aSaPmXMzEu4dBIgy9mGGTAL7Sy8Ul0x-vbH7D-pOwjlbnQt3-g83ZwTdm9qXU_hGeoLJMeXcxi5piLj8xY8l7ZeFbiBIvdH
X-Booking-Language-Code: en-us
X-Booking-Client-Info: dDfPWKHAdDECLSCNVAELXT,aaTBNZZJRLESPIDNJDPVBC|1,cCHObVZMYCAFFQZcNKNMC|1,cCHObVZMYCAFFQZcNKNMC|2,cCHObVZMYCAFFQZcNKNMC|4,cCHObVZMYCAFFQZcNKNMC|7
X-Booking-Info: 1588860,1601020,1606170,1606360,1607820,1611780,1613770,1615240,1615680,1615930,1615950,1617290,1617500,1617510,dDfPWKHAdDECLSCNVAELXT,1617500|5,1617290|3,1617290|1,1617510|5,aaTBNZZJRLESPIDNJDPVBC|1,cCHObVZMYCAFFQZcNKNMC|1,cCHObVZMYCAFFQZcNKNMC|2,cCHObVZMYCAFFQZcNKNMC|4,cCHObVZMYCAFFQZcNKNMC|7
X-Requested-With: XMLHttpRequest
Content-Length: 43
Origin: https://www.booking.com
Connection: keep-alive
Cookie: _pxhd=8Ev3K6zJHbTC7EcdMkWdquQDni-yQD%252FmDZ3Kq4GLYxEXb5BeWBwHp0NtWkEAq2KjOqAg8GUpPh88AdnhM4pKjg%253D%253D%253AzU47FuycbZU5m2such%252FO5ZM53No1tNqRcIZZ6ImES84UQmH9BVF2xAQTyVhqmuKgUBvQ9gAKLHzSYxIHYSV3BnVZ5KVIe8hK5czFw--FDfI%253D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbNyTiRoH3gOB%2F3TjucKQlbePKh254cUGbR4nUtwpbvravLABK%2BQ9aUP7LL6opfXq6DgHy2xwlGCTd1Ae57eEeEJfSNWjWuB6IcjPPUKJaZeyMk%2BUPgtLMjVFsreTDX075wgruRSXeVYFG6%2B1fY1gIxk%3D; bkng_frontend_sese_exp=0; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+25+2022+09%3A56%3A01+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=d96ad1bb-aacc-4b1f-8a72-e3b1d962e32b&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en-us.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e%26sid%3Db0167bbef2f53ed7f1eb403879d0486d%26keep_landing%3D1%26sb_price_type%3Dtotal%26&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1666691761775; BJS=-; bkng_sso_ses=e30; bkng_sso_session=e30
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 1091
server: nginx
date: Tue, 25 Oct 2022 09:56:04 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
set-cookie: _pxhd=bsUX2YzqFhuLk%2FN7tinTriStKRDugz5hg2-1IotJMoZL7aDj2Co8uLIyucrEcEBqJXNxtxSuVBQgnK-nQ8qsPg%3D%3D%3AK52xsSVJ-XJWXAa1O09Sx0gGPkVNT66nYZqSF%2FFZ5e-s5qB6bF07n9vs9Mi02ZYebBNJkAnIBR8xpxchlIaOFwolm7bxAiL2gau58CID6Do%3D; domain=booking.com; path=/; expires=Wed, 25-Oct-2023 09:56:03 GMT
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkvNxWewKDAjaefYBoDN5Ahi%2BDOwyBoR0plAxZtEG0D3Dqai%2FWkC67ha5JYDz%2FnCAARZgITGx4n6kfumPBpDg5bbTk8MY4ogCHCKjuTj%2FIwF5bLEeWjDJfYJUFbSuHmkg%2F9n%2FdYONYZLQXjonuWeGyEU%3D; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:04 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LWvjfqJK2cESBgMpXUvHK946AYfZSWi2wonULGHZuuUPWe2icdYLXg==
X-Firefox-Spdy: h2
www.booking.com/js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=dDfPWKHAdDECLSCNVAELXT&etg=&etcg=&ets=aaTBNZZJRLESPIDNJDPVBC|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN
200 OK 109 kB URL HTTP/2 www.booking.com/js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=dDfPWKHAdDECLSCNVAELXT&etg=&etcg=&ets=aaTBNZZJRLESPIDNJDPVBC|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN
IP
Size 109 kB (109062 bytes)
Hash 65f5cf8fd5e4bdfb484a7b9743751ff7
fd038b7ab080b66cbd553ef4e1c3ee813214898c
3f46ac12237b474cfd2c6067396fd0523fc6962bd8345b3717aedcdf30dbc74e
GET /js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=dDfPWKHAdDECLSCNVAELXT&etg=&etcg=&ets=aaTBNZZJRLESPIDNJDPVBC|1&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
X-Booking-AID: 2083685
X-Booking-CSRF: 8epXYwAAAAA=JDeZflszFTMyo_P4TGZz_TXKpSUFvsZcc1x8xKFZIUfvwC-nC-xsU0RUwtpbNdQXIqjPKe1rcEl91ixE2JpLFl2gRWowGeWcpyudg1uEgifbECOq9aSaPmXMzEu4dBIgy9mGGTAL7Sy8Ul0x-vbH7D-pOwjlbnQt3-g83ZwTdm9qXU_hGeoLJMeXcxi5piLj8xY8l7ZeFbiBIvdH
X-Booking-Info: 1588860,1601020,1606170,1606360,1607820,1611780,1613770,1615240,1615680,1615930,1615950,1617290,1617500,1617510,dDfPWKHAdDECLSCNVAELXT,1617500|5,1617290|3,1617290|1,1617510|5,aaTBNZZJRLESPIDNJDPVBC|1
X-Booking-Client-Info: dDfPWKHAdDECLSCNVAELXT,aaTBNZZJRLESPIDNJDPVBC|1
X-Booking-Label: 6357b2af9e2ba903bf0a649e
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 10d845d8a2ae02e9
X-Booking-Session-Id: b0167bbef2f53ed7f1eb403879d0486d
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: _pxhd=8Ev3K6zJHbTC7EcdMkWdquQDni-yQD%252FmDZ3Kq4GLYxEXb5BeWBwHp0NtWkEAq2KjOqAg8GUpPh88AdnhM4pKjg%253D%253D%253AzU47FuycbZU5m2such%252FO5ZM53No1tNqRcIZZ6ImES84UQmH9BVF2xAQTyVhqmuKgUBvQ9gAKLHzSYxIHYSV3BnVZ5KVIe8hK5czFw--FDfI%253D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbNyTiRoH3gOB%2F3TjucKQlbePKh254cUGbR4nUtwpbvravLABK%2BQ9aUP7LL6opfXq6DgHy2xwlGCTd1Ae57eEeEJfSNWjWuB6IcjPPUKJaZeyMk%2BUPgtLMjVFsreTDX075wgruRSXeVYFG6%2B1fY1gIxk%3D; bkng_frontend_sese_exp=0; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+25+2022+09%3A56%3A01+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=d96ad1bb-aacc-4b1f-8a72-e3b1d962e32b&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en-us.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e%26sid%3Db0167bbef2f53ed7f1eb403879d0486d%26keep_landing%3D1%26sb_price_type%3Dtotal%26&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Tue, 25 Oct 2022 09:56:03 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=93ed45d9db2d00ae&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejKpbRiSUc6YXicpZ6mWl2Rk7jnBCyilNQs;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EdypXMQk6aFnL4cdYqXy_-GAwmUWqhCnnXPPKCzTnmuMdFrzmLbJkw==
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/max500/87429279.jpg?k=c42e70f7026958ba62b91d68267c207fca4dce772d603a2e7159405a55e223d0&o=
200 OK 32 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/max500/87429279.jpg?k=c42e70f7026958ba62b91d68267c207fca4dce772d603a2e7159405a55e223d0&o=
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3\012- data
Hash 808ef736ed272748f80b939a59f16752
dc2246927d74ba8acf8d6ef67ddcf0391037bad2
802a894ab3d21ded4be599b1838d7ba362b76f73d2a97246c3ba549beca17da5
GET /xdata/images/hotel/max500/87429279.jpg?k=c42e70f7026958ba62b91d68267c207fca4dce772d603a2e7159405a55e223d0&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 31978
server: nginx
date: Sat, 08 Oct 2022 02:01:18 GMT
etag: "f73f091001b81a7d43e43377146baad6449160c0"
expires: Mon, 07 Nov 2022 02:01:18 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lCDn-xhSblkwlcCWsUdZZ-D8svG-PFzsHNALMbX6MzyTCXPv7T7SIA==
age: 1497286
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/max500/7991107.jpg?k=b4c80a2ce0a0649879fc9e78efaadbc8be9bb79ae661aff7f37262ef872586a0&o=
200 OK 30 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/max500/7991107.jpg?k=b4c80a2ce0a0649879fc9e78efaadbc8be9bb79ae661aff7f37262ef872586a0&o=
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3\012- data
Hash cbda63a57d3646ed8f117072b1a7d4c8
3b215a419594ab16b85f8b1853efe39a47cec57d
f85581f3685415e0fab14388422e6e8548e70d9eaebb817e9df7bb5c2a90e382
GET /xdata/images/hotel/max500/7991107.jpg?k=b4c80a2ce0a0649879fc9e78efaadbc8be9bb79ae661aff7f37262ef872586a0&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 29977
server: nginx
date: Mon, 10 Oct 2022 09:49:53 GMT
etag: "7ae8d27f0ae40eae476e14b453c1b8a027416140"
expires: Wed, 09 Nov 2022 09:49:53 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FQ0_UScAWsMzpOlsQKnVIQ6_-ojAzyB32RnQrQNwk2BjdGBUzebEZg==
age: 1296371
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/max500/40890517.jpg?k=cd55de5463af8988f78fd675904a43d02f77570debe9977c4c1fe658030b6d29&o=
200 OK 27 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/max500/40890517.jpg?k=cd55de5463af8988f78fd675904a43d02f77570debe9977c4c1fe658030b6d29&o=
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, components 3\012- data
Hash 3ff43b5dfa58bd7120e3f37d25c4a715
2d6f220cc6488ad64c52c23dd3b83715b5a8b23f
ed5985882cd76d462dc3864223d1b05a8d5094cd186daf204a07432b4996d1b8
GET /xdata/images/hotel/max500/40890517.jpg?k=cd55de5463af8988f78fd675904a43d02f77570debe9977c4c1fe658030b6d29&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 27025
server: nginx
date: Thu, 20 Oct 2022 04:22:49 GMT
etag: "358c0639eb96e5b3735f4af5d15c0edc1d0bc369"
expires: Sat, 19 Nov 2022 04:22:49 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gsaUvsQNJ59Nlh7pJ0ifATuN6ajxFschsa4mC1HyNosMirgrlTG3lw==
age: 451995
X-Firefox-Spdy: h2
cf.bstatic.com/libs/perimeterx/px.v7.6.9.min.js
200 OK 109 kB URL HTTP/2 cf.bstatic.com/libs/perimeterx/px.v7.6.9.min.js
IP
File type ASCII text, with very long lines (65402)
Size 109 kB (108671 bytes)
Hash 390cf96365f6885932494cb1c2c78501
e78a6fd33ab8aa7ff15e646d89972a9deffe6002
93606b39247f1582e3850110a9046b1cf68ae3d49339f48d5ed8f35b7b97fa9f
GET /libs/perimeterx/px.v7.6.9.min.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Wed, 28 Sep 2022 03:37:20 GMT
last-modified: Wed, 21 Sep 2022 00:42:35 GMT
etag: W/"632a5dfb-39901"
expires: Fri, 28 Oct 2022 03:37:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AdQBFa2MjvjriPvQU1kNbU0uDN3Wz94VYb4jXQBaZbmu3Lp5ljAKlw==
age: 2355524
X-Firefox-Spdy: h2
cf.bstatic.com/xdata/images/hotel/max500/95656033.jpg?k=9b09d1fa19486e9e792c3406db580f92b736ed12ea924fb365d1ed21b60fc2da&o=
200 OK 32 kB URL HTTP/2 cf.bstatic.com/xdata/images/hotel/max500/95656033.jpg?k=9b09d1fa19486e9e792c3406db580f92b736ed12ea924fb365d1ed21b60fc2da&o=
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3\012- data
Hash c890e88752979ea1cc9d16c6c5723fcb
20180b87e619db8edd72ce33bed96381d675b46c
e50e4c41b6d4e972dacdb48cff0aef7dc6e607be73073f6c7417a037eb82bffb
GET /xdata/images/hotel/max500/95656033.jpg?k=9b09d1fa19486e9e792c3406db580f92b736ed12ea924fb365d1ed21b60fc2da&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32295
server: nginx
date: Wed, 28 Sep 2022 01:31:55 GMT
etag: "90bac7b8f05a6ae35d21c5b1f340bf3a889e86d0"
expires: Fri, 28 Oct 2022 01:31:55 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gDDIeNO-Zlt7qhTxBgrqAtyVv27E-wTozQMtCigbvIU-dLKF9GAr_Q==
age: 2363049
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/join/bh_carousel_more_background/5132764897ca62019efeefc5ad9c296227434ba9.jpg
200 OK 47 kB URL HTTP/2 cf.bstatic.com/static/img/join/bh_carousel_more_background/5132764897ca62019efeefc5ad9c296227434ba9.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 353x433, components 3\012- data
Hash 3471913b5eaf34016f7f8fd2b795353a
830765f7fccc5bc5a6e6ac6d57648c1f48e86c72
22d1b410f2a9e346185c14dbd28e358bab1edc3d1929751534c39b93010ee131
GET /static/img/join/bh_carousel_more_background/5132764897ca62019efeefc5ad9c296227434ba9.jpg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/bf2a35b52281e77942b5ebad9911f4fe65ceb55c.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 47062
server: nginx
date: Sat, 01 Oct 2022 02:23:37 GMT
last-modified: Mon, 08 Jul 2019 08:40:15 GMT
etag: "5d23016f-b7d6"
expires: Mon, 31 Oct 2022 02:23:37 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ipwTWORykr9nWW9hWLJvsb50LuteTV97hB2xq-Fuw28YiDursTsDTA==
age: 2100747
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4fe08d6ffc931438b886eb80f073ad2e
dae5e9eb8bd9053329d24a55b8017c8162cb21d2
49a26dbac4208540e0d361219db57bea3922a33b0fd692212fec7a61727d387c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:56:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash dd219ac5671544f7ec306d871289993c
8621b28c6875f6ddf67f031a7969ad53ad5dc245
1229275f5d84fca5e3da95f92433f4aeb242e5cc12e6b7391df11404ff4bbf87
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 09:56:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 05:38:14 GMT
Expires: Mon, 31 Oct 2022 05:38:13 GMT
Etag: "8621b28c6875f6ddf67f031a7969ad53ad5dc245"
Cache-Control: max-age=502328,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fa14877f190afe-OSL
cf.bstatic.com/static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js
200 OK 14 kB URL HTTP/2 cf.bstatic.com/static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js
IP
File type Unicode text, UTF-8 text, with very long lines (52155), with no line terminators
Hash c70d1e5c263662d9279383a36d21a956
09aa1063140f35193706100866ea851dacf4bc10
f4f9e41cee5ea2b7394542ff26c1f4300baab2e9dd13674f51ea6fc7f755123d
GET /static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Tue, 12 Jan 2021 10:06:38 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 21 Oct 2022 18:53:48 GMT
expires: Sun, 20 Nov 2022 18:53:48 GMT
cache-control: max-age=2592000
etag: W/"5ffd74ae-cbbc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: C20t--VVA-22faqOzbgqBYtWntVGTpylzLA0VTQ_Wc0lP7A2rdMyJQ==
age: 313335
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 538 B IP
File type gzip compressed data, max compression\012- data
Hash 9d3bb0ac2e9d8a68106e92a19dc63b57
310fce87bcf4b935e959abf6043cd5b556685c02
38dea71a8b17f6979e668543702e52da426c28287d06aa9070631bea2c3b1e9d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 09:56:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 05:38:14 GMT
Expires: Mon, 31 Oct 2022 05:38:13 GMT
Etag: "8621b28c6875f6ddf67f031a7969ad53ad5dc245"
Cache-Control: max-age=502328,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fa148968ac0afe-OSL
ocsp.digicert.com/
200 OK 280 B IP
Hash 33742d0378b4c6d3df2a22be1c3cb6e5
4c96b18806634081c0d136b7d4d35ce19e6402e7
fc52edf0534f5c46e97254f1a3046a479df2fc9130fa3d1a64cc5550ce49bf71
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6220
Cache-Control: max-age=90028
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 09:56:04 GMT
Etag: "63565714-118"
Expires: Wed, 26 Oct 2022 10:56:32 GMT
Last-Modified: Mon, 24 Oct 2022 09:12:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 280
www.booking.com/en/index.en.html?aid=2083685&label=6357b2af9e2ba903bf0a649e
302 Found 0 B URL HTTP/2 www.booking.com/en/index.en.html?aid=2083685&label=6357b2af9e2ba903bf0a649e
IP
GET /en/index.en.html?aid=2083685&label=6357b2af9e2ba903bf0a649e HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 25 Oct 2022 09:56:01 GMT
location: /en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
nel: {"report_to":"default","max_age":604800}
report-to: {"group":"default","endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":604800}
set-cookie: _pxhd=SjRgwRaFrl5YQBCGAtYVH1rWSeGOv9DWw%252FEmwmLpg%252FcLXJ1xMqxlKR1c-wfDH0xbkNPBOoP2jrtYFTssLIlRJQ%253D%253D%253A1m0-JZ2VemP59Jl1yy6ILDY7sH6wDSaz2csQRA61Ar6YK9MSoxfSAEW8%252F7gUxQPyngRDg4StcZUk-RF%252Fq%252FSV7eCtsnBLTasAexEI5YYIZm8%253D; domain=booking.com; path=/; expires=Wed, 25-Oct-2023 09:56:01 GMT
px_init=0; domain=booking.com; expires=Thu, 17-Oct-2075 19:52:02 GMT; SameSite=Strict; secure; HttpOnly
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5u%2FnPFAZhH69zYglumd%2BvIokDEHM%2BSlIXpSdXSWn4Gskdgfp2tJ5soniPF%2FLyvwAdhhtjAbumXOnuS2G7BkTzfmN9cohi5%2FNIBkusP2W0ZgCISvvpdvvcjFfpMWa%2BHa%2BMKAtsPmiP%2BL7NA4XuSLB%2FoHXAd9PYu%2Bpl8%3D; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:01 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5UbA_D4TLIgz86xzPRgmXFBGbtARqd4FNg4LLqS4P6RPVmdgXRxMLQ==
X-Firefox-Spdy: h2
account.booking.com/privacy-consents/implicit
200 OK 0 B URL HTTP/2 account.booking.com/privacy-consents/implicit
IP
POST /privacy-consents/implicit HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Content-type: application/json;charset=UTF-8
Content-Length: 36
Origin: https://www.booking.com
Connection: keep-alive
Cookie: _pxhd=8Ev3K6zJHbTC7EcdMkWdquQDni-yQD%252FmDZ3Kq4GLYxEXb5BeWBwHp0NtWkEAq2KjOqAg8GUpPh88AdnhM4pKjg%253D%253D%253AzU47FuycbZU5m2such%252FO5ZM53No1tNqRcIZZ6ImES84UQmH9BVF2xAQTyVhqmuKgUBvQ9gAKLHzSYxIHYSV3BnVZ5KVIe8hK5czFw--FDfI%253D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBv0TjbhqUlRHMVCnR0%2FCiSiSzg8W%2Blxhj7zVXnM6QPy4PLjOcK7NPca1v3AXoOflETgEOvNosvtQDOlPhsCdMF%2FgKuKmpe%2Bb1TnUU3GvQsNuxHvz%2Be7E0jv48fjfFMzFNmUDTzxpO76phCyXUbrWYjIMi6hHnSZEmA%3D; bkng_frontend_sese_exp=0; cors_js=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
server: envoy
date: Tue, 25 Oct 2022 09:56:03 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjA2MDUzNmJlLWUxN2UtNGYxYy1iMzQzLTBiYWNiMDNiZWU4YiJ9fQ; domain=account.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; secure; HttpOnly
bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; secure; HttpOnly
bkng_sso_session=e30; domain=.booking.com; path=/; expires=Sun, 24-Oct-2027 09:56:03 GMT; secure; HttpOnly
content-security-policy: frame-ancestors https://*.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=42&pid=116445d92900101d&e=UmFuZG9tSVYkc2RlIyh9YTVpYxb9mtJD3cReeqMXo_5qxpf4W7JwdaPywujlMqYClpEWWnp7GR_-kbA2HXm3PvFWRdnUFAhBYMXFCJXDh48JHUCCGzkjlgOcpV9tqBK3jwiKYK80_i-0z45TzVBdhEFft59taAqE;
content-security-policy-report-only: object-src 'none'; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-sXW34hdzzyDBkKQ' 'report-sample'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'; base-uri 'none'; default-src *.bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=41&pid=116445d92900101d&e=UmFuZG9tSVYkc2RlIyh9YTVpYxb9mtJD3cReeqMXo_5qxpf4W7JwdaPywujlMqYClpEWWnp7GR_-kbA2HXm3PvFWRdnUFAhBYMXFCJXDh48JHUCCGzkjlgOcpV9tqBK3jwiKYK80_i-0z45TzVBdhEFft59taAqE; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com;
strict-transport-security: max-age=17280000
content-encoding: gzip
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uK5e40zPXRHRxT2QzBZFE8ioaiy9RAsKkqLdCylZ2dak6OikES_JeQ==
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/atlas_cloudfront_sd/9eeefcddbd75f40b8c0554fab1cdc8efe98ab238.js
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/atlas_cloudfront_sd/9eeefcddbd75f40b8c0554fab1cdc8efe98ab238.js
IP
GET /static/js/atlas_cloudfront_sd/9eeefcddbd75f40b8c0554fab1cdc8efe98ab238.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 21 Oct 2022 03:54:18 GMT
last-modified: Fri, 21 Oct 2022 03:09:15 GMT
etag: W/"63520d5b-1d196"
expires: Sun, 20 Nov 2022 03:54:18 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Om08UYXPtAS6K8rH1Qgyg9xpBYIzKr9UhEDzGkJdB71MUlaUiPO7rw==
age: 367305
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/raf_cloudfront_sd/b9e5b0bcf00cff69d910550bedf9b680172d2b89.js
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/raf_cloudfront_sd/b9e5b0bcf00cff69d910550bedf9b680172d2b89.js
IP
GET /static/js/raf_cloudfront_sd/b9e5b0bcf00cff69d910550bedf9b680172d2b89.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
last-modified: Fri, 16 Sep 2022 13:33:46 GMT
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sun, 16 Oct 2022 13:49:03 GMT
expires: Tue, 15 Nov 2022 13:49:03 GMT
cache-control: max-age=2592000
etag: W/"63247b3a-1db04"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h9yYYFq6DY22PCSpvaKhQ14DGO8jiL49yJ_YZAFws4i2CnhYcrVtbA==
age: 763619
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb21a2cc89.js
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb21a2cc89.js
IP
GET /static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb21a2cc89.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 07 Oct 2022 06:07:10 GMT
last-modified: Tue, 04 Feb 2020 10:19:58 GMT
etag: W/"5e39454e-8f6c"
expires: Sun, 06 Nov 2022 06:07:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MXOkA48SHXaONpLn0INGQlgiH5-gwtKQ9y-HkctPh8yybwMdwS-_WA==
age: 1568933
X-Firefox-Spdy: h2
track.hawkaffinity.com/?sig=3RQAlpmLlDzLvSmL2DGByITM0xwZ4Z2LmtGZlRJMjtQVMaUqcWKqwI2psAUqeXG3rWzmmEabmxSIAuKDH1HBEqILzcIonuzJc1RZwEHG4OQEnOKBfATon1zJ2ywrMMzJgcSn5xJM1tzoZOGAKcIAJ5JJ1AKowOGB5kxAAu0LjVSFukH2uEKLRkzpIIzp1AJMG16t&hsh=696f1484f9a3ea44fb9a9e102afe0c35601023ba9984f38c
200 OK 0 B URL HTTP/2 track.hawkaffinity.com/?sig=3RQAlpmLlDzLvSmL2DGByITM0xwZ4Z2LmtGZlRJMjtQVMaUqcWKqwI2psAUqeXG3rWzmmEabmxSIAuKDH1HBEqILzcIonuzJc1RZwEHG4OQEnOKBfATon1zJ2ywrMMzJgcSn5xJM1tzoZOGAKcIAJ5JJ1AKowOGB5kxAAu0LjVSFukH2uEKLRkzpIIzp1AJMG16t&hsh=696f1484f9a3ea44fb9a9e102afe0c35601023ba9984f38c
IP
GET /?sig=3RQAlpmLlDzLvSmL2DGByITM0xwZ4Z2LmtGZlRJMjtQVMaUqcWKqwI2psAUqeXG3rWzmmEabmxSIAuKDH1HBEqILzcIonuzJc1RZwEHG4OQEnOKBfATon1zJ2ywrMMzJgcSn5xJM1tzoZOGAKcIAJ5JJ1AKowOGB5kxAAu0LjVSFukH2uEKLRkzpIIzp1AJMG16t&hsh=696f1484f9a3ea44fb9a9e102afe0c35601023ba9984f38c HTTP/1.1
Host: track.hawkaffinity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bilqi-omv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 09:55:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9E%2FDXcalaztIIH9clNE1m0DbYv6bsbDdI4iuDVGsi6mvF1LDu2oDfQ7K%2FRUGFgXa7Fx13X69QxncbtMA3SAyd2pf2XJgr4NwLUEyCb5omKffaLd%2Fil7oLNJ21uNejYr5YOjIUV3HJVVD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fa1463f9a8b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/cross_product_index/toggle/fb6f63d62231f9fe552d79b5448620b2e63c726e.svg
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/img/cross_product_index/toggle/fb6f63d62231f9fe552d79b5448620b2e63c726e.svg
IP
GET /static/img/cross_product_index/toggle/fb6f63d62231f9fe552d79b5448620b2e63c726e.svg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/e8153762b916a887a953370963ec9f1cf7eab5e7.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Sun, 02 Oct 2022 04:46:56 GMT
last-modified: Wed, 10 Apr 2019 11:21:51 GMT
etag: W/"5cadd1cf-5e7"
expires: Tue, 01 Nov 2022 04:46:56 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OxYeYvcvM-GnthFfxZDDPeT5ACOUMsU60HmAdEU3zC4Biy88LglbYA==
age: 2005747
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/d30eef4dc5202875d4c3301b8a0e8ff09f9a0e28.js
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/d30eef4dc5202875d4c3301b8a0e8ff09f9a0e28.js
IP
GET /static/js/sp-on-maps_cloudfront_sd/d30eef4dc5202875d4c3301b8a0e8ff09f9a0e28.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Mon, 10 Oct 2022 00:12:58 GMT
last-modified: Thu, 19 May 2022 11:44:13 GMT
etag: W/"62862d8d-25ae"
expires: Wed, 09 Nov 2022 00:12:58 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G083zLH8oG5MNmwESNp16PL3mFGXl2OzZHVLOA0kq1MWdugrgticXQ==
age: 1330984
X-Firefox-Spdy: h2
cf.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css
IP
GET /static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Thu, 06 Oct 2022 15:21:43 GMT
last-modified: Wed, 10 Apr 2019 11:21:34 GMT
etag: W/"5cadd1be-13ac"
expires: Sat, 05 Nov 2022 15:21:43 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cwMzHgyjdG56ixXxEn5Ud3LStwlXOAQOGwLwlBtSp9VbfNV9CsgrkA==
age: 1622060
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
200 OK 0 B URL HTTP/2 accounts.google.com/gsi/client
IP
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 25 Oct 2022 09:56:04 GMT
date: Tue, 25 Oct 2022 09:56:04 GMT
cache-control: private, max-age=1800
content-security-policy: script-src 'nonce-KO1eB0Mwl9MN4rN90RmvNw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.booking.com/js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=&etg=&etcg=&ets=&etgwv=js_index_www_time_on_page_seconds|4&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN
200 OK 0 B URL HTTP/2 www.booking.com/js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=&etg=&etcg=&ets=&etgwv=js_index_www_time_on_page_seconds|4&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN
IP
GET /js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=&etg=&etcg=&ets=&etgwv=js_index_www_time_on_page_seconds|4&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
X-Booking-AID: 2083685
X-Booking-CSRF: 8epXYwAAAAA=JDeZflszFTMyo_P4TGZz_TXKpSUFvsZcc1x8xKFZIUfvwC-nC-xsU0RUwtpbNdQXIqjPKe1rcEl91ixE2JpLFl2gRWowGeWcpyudg1uEgifbECOq9aSaPmXMzEu4dBIgy9mGGTAL7Sy8Ul0x-vbH7D-pOwjlbnQt3-g83ZwTdm9qXU_hGeoLJMeXcxi5piLj8xY8l7ZeFbiBIvdH
X-Booking-Info: 1588860,1601020,1606170,1606360,1607820,1611780,1613770,1615240,1615680,1615930,1615950,1617290,1617500,1617510,dDfPWKHAdDECLSCNVAELXT,1617500|5,1617290|3,1617290|1,1617510|5,aaTBNZZJRLESPIDNJDPVBC|1,cCHObVZMYCAFFQZcNKNMC|1,cCHObVZMYCAFFQZcNKNMC|2,cCHObVZMYCAFFQZcNKNMC|4,cCHObVZMYCAFFQZcNKNMC|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4
X-Booking-Client-Info: dDfPWKHAdDECLSCNVAELXT,aaTBNZZJRLESPIDNJDPVBC|1,cCHObVZMYCAFFQZcNKNMC|1,cCHObVZMYCAFFQZcNKNMC|2,cCHObVZMYCAFFQZcNKNMC|4,cCHObVZMYCAFFQZcNKNMC|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4
X-Booking-Label: 6357b2af9e2ba903bf0a649e
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 10d845d8a2ae02e9
X-Booking-Session-Id: b0167bbef2f53ed7f1eb403879d0486d
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: _pxhd=bsUX2YzqFhuLk%2FN7tinTriStKRDugz5hg2-1IotJMoZL7aDj2Co8uLIyucrEcEBqJXNxtxSuVBQgnK-nQ8qsPg%3D%3D%3AK52xsSVJ-XJWXAa1O09Sx0gGPkVNT66nYZqSF%2FFZ5e-s5qB6bF07n9vs9Mi02ZYebBNJkAnIBR8xpxchlIaOFwolm7bxAiL2gau58CID6Do%3D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbXpFeYC4TUhC2Bxpad7rBkvNxWewKDAjaefYBoDN5Ahi%2BDOwyBoR0plAxZtEG0D3Dqai%2FWkC67ha5JYDz%2FnCAARZgITGx4n6kfumPBpDg5bbTk8MY4ogCHCKjuTj%2FIwF5bLEeWjDJfYJUFbSuHmkg%2F9n%2FdYONYZLQXjonuWeGyEU%3D; bkng_frontend_sese_exp=0; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+25+2022+09%3A56%3A02+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=d96ad1bb-aacc-4b1f-8a72-e3b1d962e32b&interactionCount=1&landingPath=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en-us.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e%26sid%3Db0167bbef2f53ed7f1eb403879d0486d%26keep_landing%3D1%26sb_price_type%3Dtotal%26&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1666691761775; BJS=-; bkng_sso_ses=e30; bkng_sso_session=e30; pxcts=3d504b8f-544b-11ed-aa6d-4457734d564c; _pxvid=3cd8ad10-544b-11ed-b7bd-624147537442; _pxff_ddtc=1; _pxde=d2fc6e49008f8ac22c3a5a308889110304e85f8d47c0973194a3f1d438af8562:eyJ0aW1lc3RhbXAiOjE2NjY2OTE3NjQ2NDgsImZfa2IiOjAsImlwY19pZCI6W119; lastSeen=1666691762802
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Tue, 25 Oct 2022 09:56:04 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=b3b745da5db701f3&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejLdTaIAMsecEZFBoTWt8JZhTndv9Ea-Oz4; frame-ancestors 'none';
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZMY_GKphE1gcAn_FOl5YvyEFY3HFk_qCBS5-8piMM6LATEQ1CckiLA==
X-Firefox-Spdy: h2
trk.buyent.xyz/aff_c?offer_id=10742&aff_id=101167
302 Found 0 B URL HTTP/2 trk.buyent.xyz/aff_c?offer_id=10742&aff_id=101167
IP
GET /aff_c?offer_id=10742&aff_id=101167 HTTP/1.1
Host: trk.buyent.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hawkaffinity.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 25 Oct 2022 09:55:59 GMT
content-type: text/html; charset=iso-8859-1
cache-control: no-cache, no-store, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
location: /aff_r?offer_id=10742&aff_id=101167&url=https%3A%2F%2Fji.hotelcomparly.com%2Fa%2Fbk%3Ftransaction_id%3D1021375ea2416d1a649ea30f80bd0c&urlauth=341509599103273404880518230314
p3p: CP="NOI CUR OUR NOR INT"
pragma: no-cache
set-cookie: enc_aff_session_10742=ENC03628fb4abd91b2a01ea475c7222a62ff2897eb2fa736726c2e6cb07c2ec133a4820b630762bf87365f37c6ede17171182fe3f5a06a04b715c0acf4b9454a2fc9153e472e760d46225444939f3a3618e58e660a1f18a40460c0a81fe0d2ed1773a3ec057e992b92742e04360a1d77f45d583fcf17ef4fa998d092f5a093f119bdf0bd3376788b60c7e3d56288f9fae1e58a8e1d2df601a9df68e267854408719372178a8d5; expires=Tue, 08 Nov 2022 09:55:59 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Thu, 18 Sep 2025 20:35:59 GMT; path=/; SameSite=None; Secure
tracking_id: 1021375ea2416d1a649ea30f80bd0c
access-control-allow-origin: *
x-request-id: 4ebdbba355fb2e7ffa252ad6a6e29078
access-control-allow-headers: Tune-SDK-Version
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dh35TtTP5%2F%2BjyyKEFTN%2BA0cVsIdslZYwA2K07lQBq39QC3El24dWKrlRc0sQ93WSW0AJCLucmFSfPPYAs0VUx9KeJPT%2B2ZkmVpuTPxAHrP%2BhnwGH0vh7XfC20OWoHPYgxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fa14671fdcb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ji.hotelcomparly.com/a/bk?transaction_id=1021375ea2416d1a649ea30f80bd0c
302 Found 0 B URL HTTP/2 ji.hotelcomparly.com/a/bk?transaction_id=1021375ea2416d1a649ea30f80bd0c
IP
GET /a/bk?transaction_id=1021375ea2416d1a649ea30f80bd0c HTTP/1.1
Host: ji.hotelcomparly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 25 Oct 2022 09:55:59 GMT
content-type: text/html; charset=utf-8
location: https://www.directrentalhouse.com/?ref=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: OPTIONS, HEAD, GET, POST, PUT, PATCH, DELETE
referrer-policy: no-referrer
referer-policy: no-referrer
vary: Accept, Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PI7XrsJUUXQdktg2pGhFyHnLEIZgS6F8wRNPbydHIn1HGbKqQQtC8rEuk%2B7px3V3BroWeGA3oGkStVvNychxkONjfIosN%2F6l2aPRyjxMc6xPgNBr2qUQ93d4pvviDjjQYg%2Fr3aUQFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fa1469acfab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/genius_vip_cloudfront_sd/f980dbafa6b20d980f25ca835a161e7cece00d9d.js
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/genius_vip_cloudfront_sd/f980dbafa6b20d980f25ca835a161e7cece00d9d.js
IP
GET /static/js/genius_vip_cloudfront_sd/f980dbafa6b20d980f25ca835a161e7cece00d9d.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sun, 09 Oct 2022 01:48:07 GMT
last-modified: Thu, 30 Jun 2022 09:12:43 GMT
etag: W/"62bd690b-c32"
expires: Tue, 08 Nov 2022 01:48:07 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bUYJI2O5hCTsx5Aspw6B4DsedESIUAX8abi4l03OZMsQ9vIkONDUIg==
age: 1411675
X-Firefox-Spdy: h2
cf.bstatic.com/static/img/cross_product_index/accommodation/07ca5cacc9d77a7b50ca3c424ecd606114d9be75.svg
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/img/cross_product_index/accommodation/07ca5cacc9d77a7b50ca3c424ecd606114d9be75.svg
IP
GET /static/img/cross_product_index/accommodation/07ca5cacc9d77a7b50ca3c424ecd606114d9be75.svg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/e8153762b916a887a953370963ec9f1cf7eab5e7.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Thu, 29 Sep 2022 12:57:26 GMT
last-modified: Wed, 10 Apr 2019 11:21:51 GMT
etag: W/"5cadd1cf-7f2"
expires: Sat, 29 Oct 2022 12:57:26 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -YL9Y7UZK4-wjuqlxTuDnbceba60NhEPunQiokLSr8JFsQ1KZ_a-tQ==
age: 2235517
X-Firefox-Spdy: h2
cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/1b5c622fa0d83c6d856f903f0c88cdd2287f7d30.js
200 OK 0 B URL HTTP/2 cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/1b5c622fa0d83c6d856f903f0c88cdd2287f7d30.js
IP
GET /static/js/atlas_cst_cloudfront_sd/1b5c622fa0d83c6d856f903f0c88cdd2287f7d30.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 20 Oct 2022 11:18:20 GMT
last-modified: Thu, 20 Oct 2022 10:56:19 GMT
etag: W/"63512953-8bfc4"
expires: Sat, 19 Nov 2022 11:18:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ga-fYmZBGlCIKsAdQ17pulMiFsEGfaHHIiUc32_2F43Jds8cnQAtdg==
age: 427063
X-Firefox-Spdy: h2
www.booking.com/js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=&etg=&etcg=&ets=cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN
200 OK 0 B URL HTTP/2 www.booking.com/js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=&etg=&etcg=&ets=cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN
IP
GET /js_tracking?sid=b0167bbef2f53ed7f1eb403879d0486d&lang=en-us&pid=10d845d8a2ae02e9&stype=1&ref_action=index&ver=2&aid=2083685&ete=&etg=&etcg=&ets=cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YS58edUrZ1xvCo0oGRdel3w0BWLjTb1zpQTJ_UmtLlegDk726Yuchaeo_grboQDGJb-WNZQY2pIIPNsCQ6RrVm0HJAQCZMvL441P5970AHR17mW6ypjRQZ64xMJ-pK7di-3ji_Wrw47zdZ5eKiXTZi_i2y4Is1z_eR0uM1tDnFz6bYZU7m6Pz4teKWy2f2FPjZSItS5p6-z8b4D1rTmUSoGrIRnl97hm2f8q_fOP__N8ViIh5QUQhdBq_IVpDwZb5jC9dMS63HoU6zP1v0Ns_dFGfgZO6ygrAdEzqJOz4i5lFF8_xfSuk2gGA3xvmO6rOllvZorDLxdN HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/en/index.en-us.html?aid=2083685&label=6357b2af9e2ba903bf0a649e&sid=b0167bbef2f53ed7f1eb403879d0486d&keep_landing=1&sb_price_type=total&
X-Booking-AID: 2083685
X-Booking-CSRF: 8epXYwAAAAA=JDeZflszFTMyo_P4TGZz_TXKpSUFvsZcc1x8xKFZIUfvwC-nC-xsU0RUwtpbNdQXIqjPKe1rcEl91ixE2JpLFl2gRWowGeWcpyudg1uEgifbECOq9aSaPmXMzEu4dBIgy9mGGTAL7Sy8Ul0x-vbH7D-pOwjlbnQt3-g83ZwTdm9qXU_hGeoLJMeXcxi5piLj8xY8l7ZeFbiBIvdH
X-Booking-Info: 1588860,1601020,1606170,1606360,1607820,1611780,1613770,1615240,1615680,1615930,1615950,1617290,1617500,1617510,dDfPWKHAdDECLSCNVAELXT,1617500|5,1617290|3,1617290|1,1617510|5,aaTBNZZJRLESPIDNJDPVBC|1,cCHObVZMYCAFFQZcNKNMC|1,cCHObVZMYCAFFQZcNKNMC|2,cCHObVZMYCAFFQZcNKNMC|4,cCHObVZMYCAFFQZcNKNMC|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4
X-Booking-Client-Info: dDfPWKHAdDECLSCNVAELXT,aaTBNZZJRLESPIDNJDPVBC|1,cCHObVZMYCAFFQZcNKNMC|1,cCHObVZMYCAFFQZcNKNMC|2,cCHObVZMYCAFFQZcNKNMC|4,cCHObVZMYCAFFQZcNKNMC|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|1,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|7,cCHObVXAZQBJbKYbeQMIaSdFaLbFJdDBKFRURURHe|8,cCHObEfEITNPfbeQMITbENLOLOLMO|1,cCHObEfEITNPfbeQMITbENLOLOLMO|2,cCHObEfEITNPfbeQMITbENLOLOLMO|4
X-Booking-Label: 6357b2af9e2ba903bf0a649e
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 10d845d8a2ae02e9
X-Booking-Session-Id: b0167bbef2f53ed7f1eb403879d0486d
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: _pxhd=8Ev3K6zJHbTC7EcdMkWdquQDni-yQD%252FmDZ3Kq4GLYxEXb5BeWBwHp0NtWkEAq2KjOqAg8GUpPh88AdnhM4pKjg%253D%253D%253AzU47FuycbZU5m2such%252FO5ZM53No1tNqRcIZZ6ImES84UQmH9BVF2xAQTyVhqmuKgUBvQ9gAKLHzSYxIHYSV3BnVZ5KVIe8hK5czFw--FDfI%253D; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2BKiro%2BD%2Fd%2BbNyTiRoH3gOB%2F3TjucKQlbePKh254cUGbR4nUtwpbvravLABK%2BQ9aUP7LL6opfXq6DgHy2xwlGCTd1Ae57eEeEJfSNWjWuB6IcjPPUKJaZeyMk%2BUPgtLMjVFsreTDX075wgruRSXeVYFG6%2B1fY1gIxk%3D; bkng_frontend_sese_exp=0; cors_js=1; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+25+2022+09%3A56%3A01+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&consentId=d96ad1bb-aacc-4b1f-8a72-e3b1d962e32b&interactionCount=0&landingPath=https%3A%2F%2Fwww.booking.com%2Fen%2Findex.en-us.html%3Faid%3D2083685%26label%3D6357b2af9e2ba903bf0a649e%26sid%3Db0167bbef2f53ed7f1eb403879d0486d%26keep_landing%3D1%26sb_price_type%3Dtotal%26&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&implicitConsentCountry=GDPR&implicitConsentDate=1666691761775; BJS=-; bkng_sso_ses=e30; bkng_sso_session=e30
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Tue, 25 Oct 2022 09:56:04 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
strict-transport-security: max-age=604800
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=0e5245d97c780073&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejIBWScLUjHz12QEAey-QR2hVKzcR19PKm8;
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Sqkrl25e0oQIOwmpDyGHHouGqFsYILqa8nA5t2LX_ClcD6gxjgg1fQ==
X-Firefox-Spdy: h2
64.225.91.73
64.190.63.136
104.16.149.64
93.184.220.29
23.36.76.226
5.79.68.236