| flyaruondtheglob.com/click?trvid=14315&extid=807442668291371008&var1=6769758&var2=android&var3=android14&var4=&var5=opera |  3.126.48.135 | | 1.3 kB |
URL flyaruondtheglob.com/click?trvid=14315&extid=807442668291371008&var1=6769758&var2=android&var3=android14&var4=&var5=opera IP3.126.48.135:0
File typeHTML document, ASCII text, with very long lines (439) Hash6dcbad90cc43b188d6a8e37253d314f7 5c4e6ec0848239c75aa295a21286faea3fa5b3cf b7abed16a4a82ed8d1c1cc9debceaee4fae12a1343cbaad049c49a9bb42eb855
GET /click?trvid=14315&extid=807442668291371008&var1=6769758&var2=android&var3=android14&var4=&var5=opera HTTP/1.1
Host: flyaruondtheglob.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 18:23:53 GMT
content-type: text/html; charset=utf-8
content-length: 1326
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
expires: Thu, 01 Jan 1970 00:00:00 UTC
pragma: no-cache
set-cookie: ClickDataNG=H4sIAAAAAAAA_2RTa4vjOBD8K6E_3YHOkRw_Ei1mmcmyx8I8DmZ3uQ8Hh2J1EjGKZPRwnH3890O2NxO4b-6qcqvUXfoOPTqvrAEOLKMZBQLh0iFwSsDH3edf3601PbqAEvheaI8EWq3a108SOBQvA_v2tV33bn0PBKQICJzVrGBluV6tCLTi1Al1MEnNihUrCSi__evu2svZIIKyo6BYsZqAixpTRQk4lMphGx4xHK0EXhLwNrp25EsCWhipzGFWz9UXp4EDELD7PbrE5ayuCOycMO1x1o7cpDyG0Hm-XJ7P52xn7asyh6y1p6UyEofsGE76vVCyyVcbVuf5P5HSvNJih7q5vf2E-0HJ5qO-CGejkX98-gxpfj7Mt-nRxGmonbjYGN6sbKNzaNoLcPjy8gEIRKduvO1Ty2iNDEc8aLsbDY5reB9cr2QzznbygENQslnTuijyqlrnG7aqGaXrie2FY01VV5u6fEPyRhjprJJXZPULYcUVK5rrZ9nYDp0AAqq7k9Kh98Bhw7INzYo8Y2VxS1XTPqJHd3dAE4DDo_2mtBbLMqOL3_5m7N3iQZk4LIZ19W9VvFu4nm-qjP6--BPbV7vMKaOUUbb4qBzu7bBMJKSR7tGhm_pL7FWL19zaZGnsmrLgv17TDikL9uzH_-aG19_vnTDytt-jlahvgSdxwqlup7NgK3Yalx9eHtKlfQcc7rUaFi9WxxRtP4YgmuDSep-eR9-HycvT848fz17bxTYJLkmpwuWGgJQVhyZs07bnYDt1UOahu4GCE8aLdnpJHriJWhNoow_2BPw74BDQGaHHV_v_bACBngKHORipZMBhzkAq87eSpeX2q-ngvgAOUxh-_vwvAAD__4cf1LJUBAAA; Expires=Sun, 26 May 2024 18:23:53 GMT; SameSite=None; Secure
ClickDataNgFall=H4sIAAAAAAAA_2RTa4vjOBD8K6E_3YHOkRw_Ei1mmcmyx8I8DmZ3uQ8Hh2J1EjGKZPRwnH3890O2NxO4b-6qcqvUXfoOPTqvrAEOLKMZBQLh0iFwSsDH3edf3601PbqAEvheaI8EWq3a108SOBQvA_v2tV33bn0PBKQICJzVrGBluV6tCLTi1Al1MEnNihUrCSi__evu2svZIIKyo6BYsZqAixpTRQk4lMphGx4xHK0EXhLwNrp25EsCWhipzGFWz9UXp4EDELD7PbrE5ayuCOycMO1x1o7cpDyG0Hm-XJ7P52xn7asyh6y1p6UyEofsGE76vVCyyVcbVuf5P5HSvNJih7q5vf2E-0HJ5qO-CGejkX98-gxpfj7Mt-nRxGmonbjYGN6sbKNzaNoLcPjy8gEIRKduvO1Ty2iNDEc8aLsbDY5reB9cr2QzznbygENQslnTuijyqlrnG7aqGaXrie2FY01VV5u6fEPyRhjprJJXZPULYcUVK5rrZ9nYDp0AAqq7k9Kh98Bhw7INzYo8Y2VxS1XTPqJHd3dAE4DDo_2mtBbLMqOL3_5m7N3iQZk4LIZ19W9VvFu4nm-qjP6--BPbV7vMKaOUUbb4qBzu7bBMJKSR7tGhm_pL7FWL19zaZGnsmrLgv17TDikL9uzH_-aG19_vnTDytt-jlahvgSdxwqlup7NgK3Yalx9eHtKlfQcc7rUaFi9WxxRtP4YgmuDSep-eR9-HycvT848fz17bxTYJLkmpwuWGgJQVhyZs07bnYDt1UOahu4GCE8aLdnpJHriJWhNoow_2BPw74BDQGaHHV_v_bACBngKHORipZMBhzkAq87eSpeX2q-ngvgAOUxh-_vwvAAD__4cf1LJUBAAA; Expires=Sun, 26 May 2024 18:23:53 GMT
X-Firefox-Spdy: h2
|
|
| flyaruondtheglob.com/double?t=2&d=eyJVUkwiOiJodHRwczovL3d3dy5ib29raW5nLmNvbS9pbmRleC5odG1sP2FpZD0yMzkxNzIyXHUwMDI2bGFiZWw9NFN4MXpWYzh2cjhCXHUwMDI2c3hpZD1GbHlhcm91bmQtSVQiLCJSZWRpcmVjdFdvcmRpbmciOiJZb3UgYXJlIGJlaW5nIGF1dG9tYXRpY2FsbHkgcmVkaXJlY3RlZC4iLCJSZWRpcmVjdFRpdGxlIjoiUmVkaXJlY3Rpb24uLi4iLCJSZWRpcmVjdExpbmtUZXh0IjoiT3IgY2xpY2sgaGVyZSB0byBjb250aW51ZS4iLCJJbnN0YWxsSWQiOjM3MjV9 | 3.126.48.135 | | 761 B |
URL flyaruondtheglob.com/double?t=2&d=eyJVUkwiOiJodHRwczovL3d3dy5ib29raW5nLmNvbS9pbmRleC5odG1sP2FpZD0yMzkxNzIyXHUwMDI2bGFiZWw9NFN4MXpWYzh2cjhCXHUwMDI2c3hpZD1GbHlhcm91bmQtSVQiLCJSZWRpcmVjdFdvcmRpbmciOiJZb3UgYXJlIGJlaW5nIGF1dG9tYXRpY2FsbHkgcmVkaXJlY3RlZC4iLCJSZWRpcmVjdFRpdGxlIjoiUmVkaXJlY3Rpb24uLi4iLCJSZWRpcmVjdExpbmtUZXh0IjoiT3IgY2xpY2sgaGVyZSB0byBjb250aW51ZS4iLCJJbnN0YWxsSWQiOjM3MjV9 IP3.126.48.135:0
File typeHTML document, ASCII text Hash6be5420140dc0c79a7de0511e4dd646e 365d6cf8cc308b47ee6a9eadab1747fdd057c107 ff775ac8b500085ed8f7a8dd411b6534c0f9cef3629be4e8c8f853db3c57620d
GET /double?t=2&d=eyJVUkwiOiJodHRwczovL3d3dy5ib29raW5nLmNvbS9pbmRleC5odG1sP2FpZD0yMzkxNzIyXHUwMDI2bGFiZWw9NFN4MXpWYzh2cjhCXHUwMDI2c3hpZD1GbHlhcm91bmQtSVQiLCJSZWRpcmVjdFdvcmRpbmciOiJZb3UgYXJlIGJlaW5nIGF1dG9tYXRpY2FsbHkgcmVkaXJlY3RlZC4iLCJSZWRpcmVjdFRpdGxlIjoiUmVkaXJlY3Rpb24uLi4iLCJSZWRpcmVjdExpbmtUZXh0IjoiT3IgY2xpY2sgaGVyZSB0byBjb250aW51ZS4iLCJJbnN0YWxsSWQiOjM3MjV9 HTTP/1.1
Host: flyaruondtheglob.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ClickDataNG=H4sIAAAAAAAA_2RTa4vjOBD8K6E_3YHOkRw_Ei1mmcmyx8I8DmZ3uQ8Hh2J1EjGKZPRwnH3890O2NxO4b-6qcqvUXfoOPTqvrAEOLKMZBQLh0iFwSsDH3edf3601PbqAEvheaI8EWq3a108SOBQvA_v2tV33bn0PBKQICJzVrGBluV6tCLTi1Al1MEnNihUrCSi__evu2svZIIKyo6BYsZqAixpTRQk4lMphGx4xHK0EXhLwNrp25EsCWhipzGFWz9UXp4EDELD7PbrE5ayuCOycMO1x1o7cpDyG0Hm-XJ7P52xn7asyh6y1p6UyEofsGE76vVCyyVcbVuf5P5HSvNJih7q5vf2E-0HJ5qO-CGejkX98-gxpfj7Mt-nRxGmonbjYGN6sbKNzaNoLcPjy8gEIRKduvO1Ty2iNDEc8aLsbDY5reB9cr2QzznbygENQslnTuijyqlrnG7aqGaXrie2FY01VV5u6fEPyRhjprJJXZPULYcUVK5rrZ9nYDp0AAqq7k9Kh98Bhw7INzYo8Y2VxS1XTPqJHd3dAE4DDo_2mtBbLMqOL3_5m7N3iQZk4LIZ19W9VvFu4nm-qjP6--BPbV7vMKaOUUbb4qBzu7bBMJKSR7tGhm_pL7FWL19zaZGnsmrLgv17TDikL9uzH_-aG19_vnTDytt-jlahvgSdxwqlup7NgK3Yalx9eHtKlfQcc7rUaFi9WxxRtP4YgmuDSep-eR9-HycvT848fz17bxTYJLkmpwuWGgJQVhyZs07bnYDt1UOahu4GCE8aLdnpJHriJWhNoow_2BPw74BDQGaHHV_v_bACBngKHORipZMBhzkAq87eSpeX2q-ngvgAOUxh-_vwvAAD__4cf1LJUBAAA; ClickDataNgFall=H4sIAAAAAAAA_2RTa4vjOBD8K6E_3YHOkRw_Ei1mmcmyx8I8DmZ3uQ8Hh2J1EjGKZPRwnH3890O2NxO4b-6qcqvUXfoOPTqvrAEOLKMZBQLh0iFwSsDH3edf3601PbqAEvheaI8EWq3a108SOBQvA_v2tV33bn0PBKQICJzVrGBluV6tCLTi1Al1MEnNihUrCSi__evu2svZIIKyo6BYsZqAixpTRQk4lMphGx4xHK0EXhLwNrp25EsCWhipzGFWz9UXp4EDELD7PbrE5ayuCOycMO1x1o7cpDyG0Hm-XJ7P52xn7asyh6y1p6UyEofsGE76vVCyyVcbVuf5P5HSvNJih7q5vf2E-0HJ5qO-CGejkX98-gxpfj7Mt-nRxGmonbjYGN6sbKNzaNoLcPjy8gEIRKduvO1Ty2iNDEc8aLsbDY5reB9cr2QzznbygENQslnTuijyqlrnG7aqGaXrie2FY01VV5u6fEPyRhjprJJXZPULYcUVK5rrZ9nYDp0AAqq7k9Kh98Bhw7INzYo8Y2VxS1XTPqJHd3dAE4DDo_2mtBbLMqOL3_5m7N3iQZk4LIZ19W9VvFu4nm-qjP6--BPbV7vMKaOUUbb4qBzu7bBMJKSR7tGhm_pL7FWL19zaZGnsmrLgv17TDikL9uzH_-aG19_vnTDytt-jlahvgSdxwqlup7NgK3Yalx9eHtKlfQcc7rUaFi9WxxRtP4YgmuDSep-eR9-HycvT848fz17bxTYJLkmpwuWGgJQVhyZs07bnYDt1UOahu4GCE8aLdnpJHriJWhNoow_2BPw74BDQGaHHV_v_bACBngKHORipZMBhzkAq87eSpeX2q-ngvgAOUxh-_vwvAAD__4cf1LJUBAAA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 18:23:53 GMT
content-type: text/html; charset=utf-8
content-length: 761
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
expires: Thu, 01 Jan 1970 00:00:00 UTC
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js |  104.19.177.52 | 200 OK | 2.9 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5355) Hashdf2b513603c3c4aedbd7366aa07309b1 fcc212f92202477f31e4b2c796a65409de1a2bc2 433a9b7ed2172aa877cc638cbe2583eaef8af74a9d30e26d0bd9dbd05e0a364e
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/OtAutoBlock.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:54 GMT
content-type: application/x-javascript
content-length: 2947
cf-ray: 87a89b4ade02569f-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 994
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC5A219320657A
expires: Sat, 27 Apr 2024 18:23:54 GMT
last-modified: Thu, 11 Apr 2024 12:19:02 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: qG47vuVKqisfZ6e8XK7n8Q==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 21591f0d-f01e-003b-7f0a-8c7c27000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js |  143.204.55.102 | 200 OK | 95 B |
URL GET HTTP/2cf.bstatic.com/static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash335be8900580e9c3875dba57334294ae a86597d2ddfa410df13bceca86fdf9a2291fe798 8a882fd19a15567e53a5c3c08d22cdab714fa87734ed92d854c4e8fdf3940b1f
GET /static/js/crossorigin_check_cloudfront_sd/2454015045ef79168d452ff4e7f30bdadff0aa81.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 95
server: nginx
date: Wed, 24 Apr 2024 13:02:21 GMT
last-modified: Wed, 10 Apr 2019 11:21:38 GMT
expires: Fri, 24 May 2024 13:02:21 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "5cadd1c2-5f"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zkf5j01RnLxlyrZHww30lI_nbzi8qyDN82VmB_VLsFl1QQWHKjWLyw==
age: 192093
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/b376a4c8f7809544f3c3100ecadbc9b3ab82d340.css | 143.204.55.102 | 200 OK | 56 kB |
URL GET HTTP/2cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/b376a4c8f7809544f3c3100ecadbc9b3ab82d340.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash48b5eba05a92f0ff4dc9e7366a74165f 8bbb41f6480b0de9350386afd77291b87dcc334c 6ce8cf8eaa84bc93a7dda9710e9d63ef318b0697d6dc1e7492c90ea85fc13926
GET /static/css/index_cloudfront_sd.iq_ltr/b376a4c8f7809544f3c3100ecadbc9b3ab82d340.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 12 Apr 2024 08:57:10 GMT
last-modified: Wed, 28 Feb 2024 12:32:03 GMT
expires: Sun, 12 May 2024 08:57:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"65df27c3-55577"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s2LAcNg1KLR896HR5zPtDKWtJB0eptPeHJdsXGJjJmoS1F0SjM31GA==
age: 1243604
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/f141039c.90df89cd.chunk.css | 143.204.55.102 | 200 OK | 853 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/f141039c.90df89cd.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (737) Hasha6989133be46c199c3e6e22d759a88da 3a026c324ddad4694c38c5608c3a381af1293286 4534dc34824342864e997710ba8c9e2f56170cd75b48865cb7eaee86c60a56bb
GET /psb/capla/static/css/f141039c.90df89cd.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 853
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: fEuzlvlyVhDfFETThDRoOu7d6B9NufJC
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: "a6989133be46c199c3e6e22d759a88da"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -JcJDQtHLWLSDwGmKS5ZBbwrO06_a-nARydTcZbx6hrvJN2-ns2jww==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css | 143.204.55.102 | 200 OK | 1.7 kB |
URL GET HTTP/2cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (7107), with no line terminators Hashf841b7b83eae48fbf4574d3c0d53f4c3 e104126e57648ff6d51bf6ade1357bc03cb500c5 0a5447d9be398da3541fe01668f81b332fd26812c2842aa53deb5c7883d58f73
GET /static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Sat, 20 Apr 2024 09:45:16 GMT
last-modified: Fri, 28 Jul 2023 11:29:02 GMT
expires: Mon, 20 May 2024 09:45:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"64c3a67e-1bc3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -xAHKg388j_bbp9IbL-bytr6lgPpiPSPTBgerte-zRKIS8WfQWKJ8g==
age: 549518
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/0d073a5f.1760100e.chunk.css | 143.204.55.102 | 200 OK | 314 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/0d073a5f.1760100e.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashe6633b5a05bd1cc32bc60aea297490c7 6f5bf51fa455ae30f5c1bc6d8d707afcb9aa83c0 5f9daaca22108d2955f02fb4fec3dfd87c1eaf314eb620bf674e11fa8a0f8b92
GET /psb/capla/static/css/0d073a5f.1760100e.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 314
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: _8Lncozg9KzGdRfDCCnodaZ7ivQOZmNc
accept-ranges: bytes
server: AmazonS3
date: Thu, 25 Apr 2024 19:27:12 GMT
etag: "e6633b5a05bd1cc32bc60aea297490c7"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AUALSNN1tGGs-wQQyGDPdiKtUt1GU7o3IFK7bvXHm3vsoIVwmcJp2Q==
age: 82603
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/searchbox_cloudfront_sd/208ed372e5b3fa6f5a8aa0c5d7fac5e72ade3356.js | 143.204.55.102 | 200 OK | 53 kB |
URL GET HTTP/2cf.bstatic.com/static/js/searchbox_cloudfront_sd/208ed372e5b3fa6f5a8aa0c5d7fac5e72ade3356.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators Hashe68ce27305d2367670bb72e633a52a75 158cbe08ae6891e9ee9e92826e1f7c5d666e0bec 923bf98545d6ab1dd4630d395e4dd7f24239fd2a42538e11c8f79abb57f4c76c
GET /static/js/searchbox_cloudfront_sd/208ed372e5b3fa6f5a8aa0c5d7fac5e72ade3356.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 19 Apr 2024 19:53:22 GMT
last-modified: Mon, 19 Feb 2024 14:15:38 GMT
etag: W/"65d3628a-3be3a"
expires: Sun, 19 May 2024 19:53:22 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I6ZKWrJpdXZAzX5BYN7gOxl9WpCbCYoIPiL6f3a9lyqetGZFfnMiHg==
age: 599432
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/8067d7e4.25886bdc.chunk.css | 143.204.55.102 | 200 OK | 374 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/8067d7e4.25886bdc.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hash016566cf5ecce0a1e5c9c10bd57404ff 8ee2612610b3c7bf3508fd0fcd29b25edf5b10ac e38b7bd2a4207aaaf46438ebe2e49bcb7c98ec9c2225c5a8c805b66fa1e12823
GET /psb/capla/static/css/8067d7e4.25886bdc.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 374
last-modified: Wed, 24 Apr 2024 10:06:21 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: p7nOI0gc9zlLfBu4OYRlr6dmWYwM.kJ3
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: "016566cf5ecce0a1e5c9c10bd57404ff"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vb_5Xz7JiXXHf5hritQ5AtdwbcTETE2opc41T8t-eYAnJ_bYs3fp9w==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png | 143.204.55.102 | 200 OK | 1.6 kB |
URL GET HTTP/2cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 91 x 26, 8-bit/color RGBA, non-interlaced Hash3e32efd25ac0214b375fc8a6a32890f2 cd46a79db7e53e19d5869b3cb3e7aa22ee523479 807c8a1b498e17d227cf48a640b778bdc4398a9852493cb2f40bf0f33651d0dd
GET /static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1628
server: nginx
date: Sat, 30 Mar 2024 18:50:05 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
expires: Mon, 29 Apr 2024 18:50:05 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "5cadd1d3-65c"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FjLyyt52AcofmVltml4B6NfjS-a0RdMpbaC75dKO3o_cw_E0R8knxw==
age: 2331229
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png | 143.204.55.102 | 200 OK | 1.6 kB |
URL GET HTTP/2cf.bstatic.com/static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 91 x 26, 8-bit colormap, non-interlaced Hashb6d0b31340d7a113f63b936e23d06f78 268e3856da737f7e56e679258949ef70ddde47f4 18c62988860a8ffd90bab6376b4fe36a723bd39403c420d3943aa3eb5a0029c5
GET /static/img/tfl/group_logos/logo_priceline/f80e129541f2a952d470df2447373390f3dd4e44.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1591
server: nginx
date: Wed, 10 Apr 2024 22:50:42 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
expires: Fri, 10 May 2024 22:50:42 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "5cadd1d3-637"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: c5a7QIL1Z_09s8GyeGkTW82whYxVImbHfJdxy5X7QnTnW_RjJkHhrg==
age: 1366392
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/4a89d2db.6c0ec4b3.chunk.js | 143.204.55.102 | 200 OK | 375 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/4a89d2db.6c0ec4b3.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash71d148d7e362a60e9a0c56222e4c1c42 efa6833affafa5ee32cc538c0ee386673c92d169 eefd6838a88ff46efd00a91c0c63f124352bac2d328f583e87cafe87056aad31
GET /psb/capla/static/js/4a89d2db.6c0ec4b3.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 375
last-modified: Wed, 24 Apr 2024 13:01:50 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 53Hez9EV2f2DfYi96JuuM8DE.7AZpKCK
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 00:59:31 GMT
etag: "71d148d7e362a60e9a0c56222e4c1c42"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gUvPwfW5RWfB62phAc-hnsSkedFcsrQcSGa0h2wi5vxe9oiaN5pyHw==
age: 62664
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png | 143.204.55.102 | 200 OK | 1.2 kB |
URL GET HTTP/2cf.bstatic.com/static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 79 x 26, 8-bit/color RGBA, non-interlaced Hash6384185cbe9a4f106857a3cb85caea98 0e31a4fe2ce98a8b4fda60687aa71079b4d3a95b 5839f0330821cf08029beddd6d248170da1af16cd7aff253e7bd075d591f5d42
GET /static/img/tfl/group_logos/logo_kayak/83ef7122074473a6566094e957ff834badb58ce6.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1154
server: nginx
date: Mon, 15 Apr 2024 09:33:28 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
expires: Wed, 15 May 2024 09:33:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "5cadd1d3-482"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W0J12nL-ONQr_PJ63lzL2wMt4HaRZyZukcEBLIweb52FEwYrRkcpeA==
age: 982226
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/63bff8e9.4864432d.chunk.js | 143.204.55.102 | 200 OK | 443 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/63bff8e9.4864432d.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (331) Hasha66afbfef1af9029cd7f664f0f3fcac4 c5c8f38763022f77b3c8230dc914b9c293be54f5 9a859ec86b152952569c2952534a3bb7366b588cee1f7da11bd6e45c771c915b
GET /psb/capla/static/js/63bff8e9.4864432d.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 443
date: Thu, 25 Apr 2024 20:23:46 GMT
last-modified: Thu, 25 Apr 2024 16:25:56 GMT
etag: "a66afbfef1af9029cd7f664f0f3fcac4"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 3fJXMjMU5qI7vNBBA4om4lJja1Tx5Hwe
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dCnHEHBWKVCegIpZD9vPVbYymOiVov_cFKLUfyvbfIIRMgP2LBBdcw==
age: 79209
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png | 143.204.55.102 | 200 OK | 2.1 kB |
URL GET HTTP/2cf.bstatic.com/static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 70 x 26, 8-bit/color RGBA, non-interlaced Hash27e71a5124018e16eae0b8897618623d d0d54d88b04edfc71f338c19eab9994632bc6ced 1d6e86e59ab7235a8343f494c8e8da6cc02c5a98a75d682401340e6d06935f20
GET /static/img/tfl/group_logos/logo_agoda/1c9191b6a3651bf030e41e99a153b64f449845ed.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2146
server: nginx
date: Tue, 09 Apr 2024 12:44:34 GMT
last-modified: Thu, 12 Mar 2020 10:15:57 GMT
expires: Thu, 09 May 2024 12:44:34 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "5e6a0bdd-862"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6_5AQpm9lNDzXThNrnyHAqev2WGdEfP5gzg_-Gmh2RzmFKbitYKX4g==
age: 1489160
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png | 143.204.55.102 | 200 OK | 2.3 kB |
URL GET HTTP/2cf.bstatic.com/static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 95 x 26, 8-bit/color RGBA, non-interlaced Hashd05a0ab9bf394439a1584a2b0d44db5c 183c28023d3ba3358a7a5df1db887582ae5340ed b23272a9692c4ec3c020935917e9d096490876c976abec1290bd3cc9aae13974
GET /static/img/tfl/group_logos/logo_opentable/a4b50503eda6c15773d6e61c238230eb42fb050d.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2344
server: nginx
date: Thu, 28 Mar 2024 14:18:54 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
etag: "5cadd1d3-928"
expires: Sat, 27 Apr 2024 14:18:54 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LvgVpb4l7RKWtojmHxKSC3zDhytOWgh9pndrOkjlJAplPZYGOM1_Cw==
age: 2520300
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/851d9d90e70b111207ec88dd198b5ea33b3330f9.css | 143.204.55.102 | 200 OK | 30 kB |
URL GET HTTP/2cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/851d9d90e70b111207ec88dd198b5ea33b3330f9.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashdae3d23d11d452a14d5b43d39fda3537 458f3de294c17819136653e9780f1755034bebd8 372c3a9cf7a9619ce8e71c71dff3dafbf3883f1aa7cd1ecb44981ea5dba3d1cd
GET /static/css/gprof_icons_cloudfront_sd.iq_ltr/851d9d90e70b111207ec88dd198b5ea33b3330f9.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 29 Mar 2024 13:25:10 GMT
last-modified: Wed, 28 Feb 2024 12:32:03 GMT
etag: W/"65df27c3-29126"
expires: Sun, 28 Apr 2024 13:25:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vfi89V1nDIS5HbxRSIb5mpLRhP8d5nYzDMDKFkY1AzOwjP78sdy0Kw==
age: 2437124
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/97a643cd.68498364.chunk.css | 143.204.55.102 | 200 OK | 1.1 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/97a643cd.68498364.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashd29e767cee103d443691a318344ebbd4 54761139b7511667366b1e315fbfd86e97669547 b0c901c0e4e0e56a3b8a4e7e0ff5be0d563c07ac13011c745f2a2ca9459b248b
GET /psb/capla/static/css/97a643cd.68498364.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: aLJJfyB_RuS3tGMfICjBj4zLIbYXIlLT
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:31 GMT
etag: W/"8e698340461dc0ce0f5a8a64360ca2a7"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4ViaJ06CUnpduN8wiSuw-31VFp-hWM2XiHmM2yKQwVqx8XWtXEQ3sA==
age: 84563
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/media/world-map.7d457a5d.png | 143.204.55.102 | 200 OK | 7.4 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/media/world-map.7d457a5d.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 520 x 340, 8-bit colormap, non-interlaced Hasha2bdd966488047aaa17dcebc5238432b 65c52eeb866eb2acbd183e5fb2dccc5205dbb6bf cfc71dcddda21b32c0ac5ba5322bd41612224261fecdc38cd20a45b6b502457c
GET /psb/capla/static/media/world-map.7d457a5d.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/psb/capla/static/css/ebf8c3e3.dbc139b2.chunk.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7367
last-modified: Wed, 24 Apr 2024 13:03:25 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: .ADgNER5T4jtcuG21qDsRJ7XC9tRn8s0
accept-ranges: bytes
server: AmazonS3
date: Thu, 25 Apr 2024 19:51:28 GMT
etag: "a2bdd966488047aaa17dcebc5238432b"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Het0t1VKGc2lIOdNN0dHXCVFfHK2yQ8I8q7aDnFpQNg1QmwIaigcMA==
age: 81148
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2 | 143.204.55.102 | 200 OK | 93 kB |
URL GET HTTP/2cf.bstatic.com/static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2 IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 92724, version 1.0 Hashf132633e65809ec36c0f01b8a29fa457 e68a5b0de3e08ac85a13426ce3d8c13ad21d38ff a98c20990fe3e31203fe2db8384af8e05e7b358cdae3c28b034e1f02b47db630
GET /static/fonts/booking-iconset-original/29bca18dce5a8e111855e31314a9b1d750ea9beb.woff2 HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 92724
server: nginx
date: Fri, 29 Mar 2024 05:38:20 GMT
last-modified: Wed, 10 Apr 2019 11:21:49 GMT
etag: "5cadd1cd-16a34"
expires: Sun, 28 Apr 2024 05:38:20 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: D5Lh65OE--fMIIH5rZ714SHXSwKr_SyehkcUB3u9Q8Ep9Cd-yEDhIA==
age: 2465135
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css | 143.204.55.102 | 200 OK | 53 kB |
URL GET HTTP/2cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash59b9ba105a6857533bbf8c4c3cabef29 e6efdc0b7a1d2c8cd9cd35f6652ff64f3b0b48fc dfe541a6c0c1481c3ebe6b417754ee08d8871ec885dad30f723b89767732ed2c
GET /static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Sat, 30 Mar 2024 09:33:05 GMT
last-modified: Tue, 30 Jan 2024 07:07:17 GMT
etag: W/"65b8a025-129a7"
expires: Mon, 29 Apr 2024 09:33:05 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fzhsrOg9zvx7JKnrT-YNSrF3Igpd4skoYicDea7xrV9RQnuhLHfe6A==
age: 2364649
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/sp_loyalty_cloudfront_sd.iq_ltr/edb3fd4404d691438144c82058c0a9696eb8d272.css | 143.204.55.102 | 200 OK | 44 kB |
URL GET HTTP/2cf.bstatic.com/static/css/sp_loyalty_cloudfront_sd.iq_ltr/edb3fd4404d691438144c82058c0a9696eb8d272.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (14043), with no line terminators Hash2d8c5f86628ba9a57c0768fd59cd5c6f 08c98a7bc8c7a976bda9cef20d96fedb01429ff6 1dd17869c57377123ec2d8543ea8e6419bd5672d1e4edfb5ff41a7b734f316f8
GET /static/css/sp_loyalty_cloudfront_sd.iq_ltr/edb3fd4404d691438144c82058c0a9696eb8d272.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 19 Apr 2024 09:18:57 GMT
last-modified: Fri, 19 Apr 2024 08:49:11 GMT
etag: W/"66223007-36db"
expires: Sun, 19 May 2024 09:18:57 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MtoQrw_Dg4hScVrCxi_4gPpxeEZe4JOUdQoz2yegsfqcdgsdsZ0UmQ==
age: 637497
X-Firefox-Spdy: h2
|
|
| www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT | 143.204.55.27 | 200 OK | 211 kB |
URL User Request GET HTTP/2www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT IP143.204.55.27:443
CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5978) Size211 kB (211416 bytes) Hash338add5ce4c75c7276cd88048b51e842 fb3b24d8f1a21f78e7b4aaef742072b027568b4a baedde6ed82fdcf27e0d26e8499523430b629d96af336d22b88d8a7c6015115b
GET /index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
server: nginx
date: Fri, 26 Apr 2024 18:23:53 GMT
cache-control: private
vary: User-Agent, Accept-Encoding
content-encoding: br
link: <https://cf.bstatic.com/static/css/gprof_icons_cloudfront_sd.iq_ltr/851d9d90e70b111207ec88dd198b5ea33b3330f9.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/incentives_cloudfront_sd.iq_ltr/f1558a6e9832a4eb8cfe1d3d14db176bd3564335.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/index_cloudfront_sd.iq_ltr/b376a4c8f7809544f3c3100ecadbc9b3ab82d340.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/82553e98ffae657c57463aa497e9d8933a2ebe7f.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/c4cea6cc4a62eba0342cfa9f4b20714a610dd010.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/sp_loyalty_cloudfront_sd.iq_ltr/edb3fd4404d691438144c82058c0a9696eb8d272.css>; rel=preload; as=style, <https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css>; rel=preload; as=style
nel: {"max_age":604800,"report_to":"default"}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"group":"default","max_age":604800}
set-cookie: _implmdnbl=2__1__0; path=/; expires=Sun, 28-Apr-2019 18:23:53 GMT; HttpOnly
px_init=0; domain=booking.com; expires=Thu, 20-Oct-2078 12:47:46 GMT; SameSite=Strict; secure; HttpOnly
bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:53 GMT; Secure; HTTPOnly; SameSite=None
pcm_personalization_disabled=0; domain=booking.com; path=/; expires=Wed, 23-Oct-2024 18:23:53 GMT; Secure; HTTPOnly
bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; Domain=.booking.com; Path=/; Expires=Sun, 26 Apr 2026 18:23:53 GMT; HttpOnly; Secure; SameSite=Lax
pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; Domain=.booking.com; Path=/; Expires=Sat, 26 Apr 2025 18:23:53 GMT; HttpOnly; Secure; SameSite=Lax
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: U7xbfsjrFFcH5vCfM4vtCj0zAD4gHw3AO6KC6S2zld2p-AC6vK32Sw==
X-Firefox-Spdy: h2
|
|
| t-cf.bstatic.com/design-assets/assets/v3.109.0/images-flags/Us@3x.png | 143.204.55.102 | 200 OK | 950 B |
URL GET HTTP/2t-cf.bstatic.com/design-assets/assets/v3.109.0/images-flags/Us@3x.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced Hash025b409525836b9e0913038b2556d2cf 187b28fad3a710b3712b56e53be8fc4e142d9abc bf146c2fcd8c33fdea4570acc5f92bc73b337b1efbbb2c318089f7bea5396672
GET /design-assets/assets/v3.109.0/images-flags/Us@3x.png HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 950
last-modified: Tue, 05 Dec 2023 13:24:05 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 05:00:00 GMT
etag: "025b409525836b9e0913038b2556d2cf"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hRZGUiOf9Pm1Vrk5lZCaVCRhQgDC_f-nxYf5iTETuEAHFJc2i9ZVpg==
age: 61193
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/remoteEntry.dc7f0d0c.client.js | 143.204.55.102 | 200 OK | 71 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/remoteEntry.dc7f0d0c.client.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash910e067a3cff46016001b64e87f79608 ba2b719426aca74db3393383b6d615c4ccf4ba6f b4d28fb30601514476465e76936b312cce72d158aae7f729c578debf799c947d
GET /psb/capla/static/js/remoteEntry.dc7f0d0c.client.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 09:16:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: v4BFAUSNSyN.ot5hQOQ6zbN3hRgCHRTL
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 15:41:20 GMT
etag: W/"8cbedc7ac02f42116f4a0bb915e1ff60"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _4iTrFnSHIr8fqefBV5b680BTT8b0fridpKaurjHDlI-8PuupEzuZQ==
age: 9755
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/city/600x600/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= | 143.204.55.102 | 200 OK | 61 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/city/600x600/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, components 3 Hash23ff11552296936ec099e4312df01d82 f7993a3e619c857758d42cd3dfd65c3141784b6d 8d5b30e22e3c0d9c2d508800f4fa057309de7f1eab240a9c2e32c58a200042ed
GET /xdata/images/city/600x600/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 21 Apr 2024 04:54:22 GMT
content-language: 57860
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "9ef8ef8b3d685f8929e0a569f314cb7f2d7c7fbb"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XTQCxtntlhAxNGBnTHETaOk9ixOFBMaBuwJbgM6uCaNv1BOj1560BQ==
age: 480573
X-Firefox-Spdy: h2
|
|
| account.booking.com/privacy-consents/implicit | 54.230.111.55 | 204 No Content | 0 B |
URL OPTIONS HTTP/2account.booking.com/privacy-consents/implicit IP54.230.111.55:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /privacy-consents/implicit HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.booking.com/
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: envoy
date: Fri, 26 Apr 2024 18:23:55 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_sso_session=e30; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:55 GMT; secure; HttpOnly
bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:55 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjdhOWVhNDQyLWQ3YzQtNDc4ZC04ZjczLWE3YWJiYjRmYmM0YSJ9fQ; domain=account.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:55 GMT; SameSite=Lax; secure; HttpOnly
content-security-policy: frame-ancestors https://*.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=f04b815d135f0015&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZb8612iO9R_UYhDOKZTX9f9H49t8PnK2N6xuOIDHFf7bJJ1VO7rR0ox_M0_N2V2zcCXhGcqtYfL4
content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; default-src *.bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=f04b815d135f0015&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZb8612iO9R_UYhDOKZTX9f9H49t8PnK2N6xuOIDHFf7bJJ1VO7rR0ox_M0_N2V2zcCXhGcqtYfL4; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-Uwpdu77U2sbkJ8w' 'report-sample'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: byqB1Yc6IEYigS_X6m_BUXOW4mpcP_WITjoO2OUVbsvK0MXThlQ-hg==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/3c29a897.3b72a564.chunk.css | 143.204.55.102 | 200 OK | 314 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/3c29a897.3b72a564.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hash947cebda090d0c44bcbed31c2248f147 0c0971623cc843d4550df421ced06d8ff4bbad76 0de77ddd00e3d21bc508e9e7345d6f69a522a8fd43685c105087b35d7421c1a1
GET /psb/capla/static/css/3c29a897.3b72a564.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 314
date: Fri, 26 Apr 2024 02:00:31 GMT
last-modified: Thu, 25 Apr 2024 15:01:28 GMT
etag: "947cebda090d0c44bcbed31c2248f147"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: NBn20wIAtKnMEEYgw1fW17PgclF7CDix
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bm3-Jb2cpLBOPG-ooeUcEj-7WQ7mzjmAD5Vs1cm1NNn6qn6YQCYseg==
age: 59005
vary: Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js | 143.204.55.102 | 200 OK | 2.8 kB |
URL GET HTTP/2cf.bstatic.com/static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (9744), with no line terminators Hash7195f60ded6400c64a12e871395b6b82 94aaef127480b92f7d561540725e54d8034e1a4c c8cb0003d4454ca85232fbc283a3beedec1253bf70eb1540284e238d8838785b
GET /static/js/sp-on-maps_cloudfront_sd/1d69e13e40d03fc59f58d76b31735d5d8c37416a.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 19 Apr 2024 09:08:14 GMT
last-modified: Fri, 19 Apr 2024 08:49:11 GMT
etag: W/"66223007-2610"
expires: Sun, 19 May 2024 09:08:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L_j2t5TXeQlT-JHb9mtI29KG3KC-O4JAcdNqxHNEhJc1WwFvmOa63Q==
age: 638140
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/raf_cloudfront_sd/dd5263a943463335a3322cd5682688893b1d054f.js | 143.204.55.102 | 200 OK | 23 kB |
URL GET HTTP/2cf.bstatic.com/static/js/raf_cloudfront_sd/dd5263a943463335a3322cd5682688893b1d054f.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4c1ee672f22e8ba06b942bc78581dc50 85b440ab554c77a746009e0f128bdd40e3270ede d17eec352b9ce852d3e783844509adaab0a59ff869ff39a1c6500a0c5c2066c3
GET /static/js/raf_cloudfront_sd/dd5263a943463335a3322cd5682688893b1d054f.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 19 Apr 2024 09:08:14 GMT
last-modified: Fri, 19 Apr 2024 08:49:11 GMT
etag: W/"66223007-1f33e"
expires: Sun, 19 May 2024 09:08:14 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UMS-M6MPW9eiDYluffkFqtOmX8rJq-nw3Y1LrCPtkSMVM6Zj9W0MCg==
age: 638140
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/540x405/292056369.webp?k=358d8cd9ede268c8a9660de4debc48b68fe5777bddce07972ac30ae28ab8b8f2&o= | 143.204.55.102 | 200 OK | 30 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/540x405/292056369.webp?k=358d8cd9ede268c8a9660de4debc48b68fe5777bddce07972ac30ae28ab8b8f2&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp Hashc8d0ed7998fb0afc25a20d7d4bca99f2 85f8a1f4ae7fe49cd4c9d698b90af188383275da aece92bc21d39bbe612c35ba89dad5621cd74b11cc19099576aa0e225236ec95
GET /xdata/images/xphoto/540x405/292056369.webp?k=358d8cd9ede268c8a9660de4debc48b68fe5777bddce07972ac30ae28ab8b8f2&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Mon, 08 Apr 2024 08:16:27 GMT
content-language: 30498
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "1f14817c780d1c1b251591b8136e75e4c103f32f"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CYng6Fqs75eRVQu07nU6xkBGlNoVJdE9Jgm8pQuzOGXT7tGmfXPpQg==
age: 1591647
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/d8454389.fe247f45.chunk.js | 143.204.55.102 | 200 OK | 76 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/d8454389.fe247f45.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash98aa5986ea5849d363f0240fd5ec71a8 e65eacce89fec65fb8628bfd5016de8c64e1aff5 1e181f4ed92aea9a20f0b6005ba8fcc983e0edc07462a56c448887de0bbed97e
GET /psb/capla/static/js/d8454389.fe247f45.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: bwZUNRWvFykoxfWqZ1rThLQ0zEfaN8k2
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"28ebeb3103c50439766ba4cc679c5cad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 42-znMdVFMmeUSAY1GDbpyr0_Orj52Yym1ypSiOEnOuBvm3M55mTEA==
age: 47753
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/540x405/281113733.webp?k=43768154acdf2261706ad890b1e6196e0b261f88de846c23d3bf5693de202238&o= | 143.204.55.102 | 200 OK | 153 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/540x405/281113733.webp?k=43768154acdf2261706ad890b1e6196e0b261f88de846c23d3bf5693de202238&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp Size153 kB (153342 bytes) Hash558dccad22daf2ee6db14961a76a2eb8 c0a59be6a981835e5d6cae2d2306fbdfbe9deb0b 142ea2523237f0eb17fd26444fd748f56b1492bc19928cc303527f32e51501b4
GET /xdata/images/xphoto/540x405/281113733.webp?k=43768154acdf2261706ad890b1e6196e0b261f88de846c23d3bf5693de202238&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Mon, 08 Apr 2024 08:16:27 GMT
content-language: 49288
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "fade909831cdda8e557d517b4aec62b3721f38e5"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CRxHETOm5R-elY-vCFX3gYSM_xqEsE4FwiJKMYXkIsnArrLvGwnQPQ==
age: 1591647
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=3c29a897&mfe=b-index-lp-web-mfe&lang=en-us&namespace=bYdHKHCe | 54.230.111.39 | 200 OK | 0 B |
URL GET HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=3c29a897&mfe=b-index-lp-web-mfe&lang=en-us&namespace=bYdHKHCe IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /orca/chunk-metadata?chunk=3c29a897&mfe=b-index-lp-web-mfe&lang=en-us&namespace=bYdHKHCe HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-booking-et-serialized-state
Referer: https://www.booking.com/
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Origin
access-control-allow-origin: https://www.booking.com
access-control-allow-credentials: true
access-control-allow-methods: HEAD,OPTIONS,GET,POST
access-control-allow-headers: x-booking-et-serialized-state
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -TwmDACPWSNKqR7C7-O1yaC1VJLN4ny6usiS413YMw4SZZzmztCCUA==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/remoteEntry.6a4f0415.client.js | 143.204.55.102 | 200 OK | 6.8 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/remoteEntry.6a4f0415.client.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (20856) Hash953ca50a7ab51ecd3218a0378e6a90d9 25b22530533b36958a9ed89b3fd30b9317392f54 f9e25729a2b6b176ddeff0d31cac92a5360363da9e288bfb6ba51aa7b4131ecb
GET /psb/capla/static/js/remoteEntry.6a4f0415.client.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 09:45:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 3PKt2jeKoV7BcU6xOyxk7tYiznxwiL5j
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"953ca50a7ab51ecd3218a0378e6a90d9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k7hDUtO-35iclnWoBNwMWd7yEi-WHqjfXvWsX-MH3vbqHSJMR1N8zA==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js | 143.204.55.102 | 200 OK | 183 kB |
URL GET HTTP/2cf.bstatic.com/static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5619), with no line terminators Size183 kB (183001 bytes) Hash023fd7251563f3d53a56e92130146dcc 0e8228ea58a086a73e3fcd8e914b5759affe5e7a 994ec33de4b9253b6abbf26965dafb40c822e0b333e334456be7ff2a6fa638fe
GET /static/js/lazy_load_images_cloudfront_sd/77204d4da4aa41b08b1a4062c8e66e4629550994.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 13 Apr 2024 01:13:19 GMT
last-modified: Tue, 04 Feb 2020 10:19:57 GMT
etag: W/"5e39454d-15f3"
expires: Mon, 13 May 2024 01:13:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: E1ToSU8V2kuK4SYJiezbsU3z1R7kCWepduCAm-r6uLRAA9TG1lJOCw==
age: 1185035
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/540x405/266633264.webp?k=7f9eb9bcfb7cd9189036fd6b28f51eb2373fb877f2b10681ae8abbb7a0c63613&o= | 143.204.55.102 | 200 OK | 59 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/540x405/266633264.webp?k=7f9eb9bcfb7cd9189036fd6b28f51eb2373fb877f2b10681ae8abbb7a0c63613&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp Hash3d38a74112685df38045f8bd08c0255c 05c8a91f8d17f69a54bd1e79d03b8c0359680954 7d0598d837b760d17f45dda6ec0d8a7058bbb569f134582fdfc30d4a16d0d97e
GET /xdata/images/xphoto/540x405/266633264.webp?k=7f9eb9bcfb7cd9189036fd6b28f51eb2373fb877f2b10681ae8abbb7a0c63613&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
server: nginx
content-language: 31784
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 04 Apr 2024 06:50:31 GMT
cache-control: max-age=2592000
etag: "fd71ca1d4ae81d5c5ce8bc184e9100bca098389a"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fhCZL2I6ncy4DySVDLiBZIRXOELgRuAp7gihPnraGtAWlKQnyLha1w==
age: 1942403
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=3c29a897&mfe=b-index-lp-web-mfe&lang=en-us&namespace=bYdHKHCe | 54.230.111.39 | 200 OK | 63 kB |
URL GET HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=3c29a897&mfe=b-index-lp-web-mfe&lang=en-us&namespace=bYdHKHCe IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hashc761798cdb322f739393483f0e760d20 029853e5087c79f5f0022b615737f1a7a87ec5b3 a69d6321c8f99fae2dd3f634dbb8578b0c895b67b2f6892949103537a358a283
GET /orca/chunk-metadata?chunk=3c29a897&mfe=b-index-lp-web-mfe&lang=en-us&namespace=bYdHKHCe HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
x-booking-et-serialized-state: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
vary: Accept-Encoding
referrer-policy: no-referrer
content-encoding: gzip
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3nvzEVtuZ1LleavcBMd-MhqjwGfFJR7n5KDqpcH4yzkR6A1y4kckIA==
X-Firefox-Spdy: h2
|
|
| t-cf.bstatic.com/design-assets/assets/v3.109.0/illustrations-traveller/GlobeGeniusBadge.png | 143.204.55.102 | 200 OK | 20 kB |
URL GET HTTP/2t-cf.bstatic.com/design-assets/assets/v3.109.0/illustrations-traveller/GlobeGeniusBadge.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hash46a2de536918e78228ad39f6c9bced54 bd29519e8b65591aed18adc02a3ed6c8354000a8 d0e96c1281514494c432a9dcd3059ed824047abcf10ad228c6bb7ae7c7d58c0b
GET /design-assets/assets/v3.109.0/illustrations-traveller/GlobeGeniusBadge.png HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 19613
last-modified: Tue, 05 Dec 2023 13:24:03 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 04:21:21 GMT
etag: "46a2de536918e78228ad39f6c9bced54"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7S57pGfbu4rYcM2STSIPWLJxP8JIF4HEaUF-X4Fa0aVero6gnCKfqw==
age: 50556
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| t-cf.bstatic.com/design-assets/assets/v3.109.0/illustrations-traveller/GlobeGeniusBadge.png | 143.204.55.102 | 200 OK | 20 kB |
URL GET HTTP/2t-cf.bstatic.com/design-assets/assets/v3.109.0/illustrations-traveller/GlobeGeniusBadge.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 260 x 260, 8-bit colormap, non-interlaced Hash46a2de536918e78228ad39f6c9bced54 bd29519e8b65591aed18adc02a3ed6c8354000a8 d0e96c1281514494c432a9dcd3059ed824047abcf10ad228c6bb7ae7c7d58c0b
GET /design-assets/assets/v3.109.0/illustrations-traveller/GlobeGeniusBadge.png HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 19613
last-modified: Tue, 05 Dec 2023 13:24:03 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 04:21:21 GMT
etag: "46a2de536918e78228ad39f6c9bced54"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ytk2rgNEiIw8jLp6hmdC3AdeuZsoex5STIFuPQ4I8NgA_YepNoU8sQ==
age: 50556
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png | 143.204.55.102 | 200 OK | 62 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 714 x 471, 8-bit/color RGBA, non-interlaced Hashd8c78bb4aa47ab6ae3df9d9e2fd9501e 8c959e1da33c4eee451ef13e2cd0f8b2327b7f76 34643ff9ca4b3ea1209f72b31dfcf85c0d23a9d389766bd908eff7a8dfd51f8a
GET /psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 62401
last-modified: Wed, 24 Apr 2024 13:01:51 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: CPtggRP3y3LRuBo.MWtjEXcVviADyrcQ
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 05:07:55 GMT
etag: "d8c78bb4aa47ab6ae3df9d9e2fd9501e"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S2RKkiInvuOQeOoQjPsFreTm7ZlI81D4qLspdeigPrZsl5e3OXEUFg==
age: 47762
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=web_shell_ux_header_view,web_shell_ux_header_view_www_non_logged_in&etcg=cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,cCHObEfEITNPfbeQMIaWYUQJFFQccCcCcCC|2&ets=cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3&etgwv= | 143.204.55.27 | 200 OK | 35 B |
URL GET HTTP/2www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=web_shell_ux_header_view,web_shell_ux_header_view_www_non_logged_in&etcg=cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,cCHObEfEITNPfbeQMIaWYUQJFFQccCcCcCC|2&ets=cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3&etgwv= IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hash79a611524d7c43a354c589264cc2376e 2e25649d9a8a208302be0502b47a0e44b07bc7c1 c7a9af81f3467d3c95760df18d0853bda8c191f612fb2e8b2b5c4ed941fbaf1a
GET /js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=web_shell_ux_header_view,web_shell_ux_header_view_www_non_logged_in&etcg=cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,cCHObEfEITNPfbeQMIaWYUQJFFQccCcCcCC|2&ets=cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3&etgwv= HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
X-Booking-Info:
X-Booking-Client-Info:
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-SiteType-Id: 1
X-Booking-Language-Code: en-us
X-Booking-AID: 2391722
X-Booking-Session-Id: 4d672258ec9524675ee4f0efb8bb8f5e
X-Booking-ET-Serialized-State: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=10e2815ebdbf0082&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejK_PBZvsY5jEI0URcbtL4QwL66cKpPGub0
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NB55cMOrgkAHwJkWwBdD3KeexwXyfmUfXBueSaUWYnDWOB1GGGRt2Q==
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otFlat.json | 104.19.177.52 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otFlat.json IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash9b1f8ddf85fb0cbfd926faacb1fc0405 ade7f952c70f07fd3497cd3e8656ca1f28c78633 f4aaa18c55c90588c5e828e56dcc6b2cb0acf9a4280494c7d1a53fc5e3669112
GET /scripttemplates/202403.2.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:56 GMT
content-type: application/json
content-length: 3041
content-encoding: gzip
content-md5: wV78mAWw6KBtzfNUzHQTew==
last-modified: Mon, 22 Apr 2024 06:06:11 GMT
etag: 0x8DC62924F52ADA5
x-ms-request-id: 6f75feb9-c01e-0052-3498-94456b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 990
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a89b5cfca1569f-OSL
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css | 143.204.55.102 | 200 OK | 109 kB |
URL GET HTTP/2cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65487) Size109 kB (108643 bytes) Hashcad5fe4c499f7568e14e7ab6ff9b3361 7cf66966b26c499b535efd53c77f65df7da14338 83f4228d1d92171186e8b8ccce6e69b32ad6b322db4af7e4b6f54ce50e299587
GET /static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 29 Mar 2024 06:34:31 GMT
last-modified: Wed, 10 Apr 2019 11:21:48 GMT
etag: W/"5cadd1cc-375af"
expires: Sun, 28 Apr 2024 06:34:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vGfvlS3WrfFLqd3BZM7tw2H7dv1yGA0a1ZtJx0T3Eqr8QyLIcm05Cw==
age: 2461765
X-Firefox-Spdy: h2
|
|
| www.booking.com/dml/graphql?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT&lang=en-us | 143.204.55.27 | 200 OK | 1.6 kB |
URL POST HTTP/2www.booking.com/dml/graphql?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT&lang=en-us IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hash5ec9bb2d9d290e8a0533afbbbaefe9d7 8287f73bea4b349b8115312cee067bf8ac89345f a151e9bce201b546a04244f34c3e032cefc2a9d4a1db2e6eb92cc98ae46668de
POST /dml/graphql?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT&lang=en-us HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
content-type: application/json
x-booking-context-action-name: index
x-booking-context-aid: 2391722
x-booking-csrf-token: eyJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJjb250ZXh0LWVucmljaG1lbnQtYXBpIiwic3ViIjoiY3NyZi10b2tlbiIsImlhdCI6MTcxNDE1NTgzMywiZXhwIjoxNzE0MjQyMjMzfQ.ejEjq3x4PoJgLFwN1DAdvmIdlbOudoRWFsjO_1psCDji5fTIUTekI6Zu_X9DQZPn42t-q5rS3LVHyjEuM-Wu1g
x-booking-et-serialized-state: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
x-booking-pageview-id: 6a8e815c724901eb
x-booking-site-type-id: 1
x-booking-timeout-budget-ms: 1500
x-booking-timeout-ms: 1500
x-booking-topic: capla_browser_b-index-lp-web-mfe
x-envoy-expected-rq-timeout-ms: 1500
Content-Length: 7115
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A56+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D2391722%26label%3D4Sx1zVc8vr8B%26sxid%3DFlyaround-IT; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 1598
server: nginx
date: Fri, 26 Apr 2024 18:23:57 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2B9VuDs71Qwy46TzkVoIGd3V4ZwQD5KE%2FVfCkID40rJpZuPPtV%2BWSdEJ6M0%2FlVWg9Pt9L2UrY2acEttrq2yH7P1OKwQxKOaT%2FChrmuhcWUzwNI7yUzXZX0SZyIc6sR%2FzcB6Sgf%2FrPmrE%2BIHJ3hJ3bGnRJb%2B8Cz9yzw%3D; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: A-aAvl8TtrLyHUFGV3EnwHeTMXL_bfajS7QOW_pT__35QOPw2SGyuQ==
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=915bfb5a&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX | 54.230.111.39 | 200 OK | 2.5 kB |
URL OPTIONS HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=915bfb5a&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash56de3da6dd51a22b3190a9df94606f84 b12718b474f95abecc5bc456fc78e7359fc343c8 c89d528fe74942145a6c624643d8da6bbbd585a982023ff3d1e66f7f04942fb7
GET /orca/chunk-metadata?chunk=915bfb5a&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
x-booking-et-serialized-state: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
access-control-allow-origin: https://www.booking.com
access-control-allow-credentials: true
referrer-policy: no-referrer
content-encoding: gzip
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: toOQKQNOqFp6nbi46jdAtlYKv7F0XJqWnDmfegvj4c7kABXroGI_rw==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/b9a82cb8.189a666d.chunk.js | 143.204.55.102 | 200 OK | 64 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/b9a82cb8.189a666d.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hasha09145aa594997ee575eeac9a998c8c0 0afe5aacc37d1be814a499844af91e6a69fe4ce2 5adcf6e42035e5c99335f916f33583a69215e2e320a1f6b6a402956519bc475e
GET /psb/capla/static/js/b9a82cb8.189a666d.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 25 Apr 2024 18:58:11 GMT
last-modified: Thu, 25 Apr 2024 15:02:20 GMT
etag: W/"e1a5cb8d4cf3505d3f1c7c4551917e05"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: vcJDWDkshJ30BNj2fUGLjZJx.r7_vJZn
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gzNzWem-1_vg_Mc4aee7B6AjDEi6WUc0Tmv7VweavqPA-466a3VzFw==
age: 84345
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/city/170x136/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= | 143.204.55.102 | 200 OK | 7.1 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/city/170x136/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hashbcabc853805644c852b5e28ceb4da21f 85e9e9be45cd209187f883151d869f07dce4a016 0e9deb49e94a0a7b46e1300d00ff66abc515bf83f77c53d322457e1cce9d3d5c
GET /xdata/images/city/170x136/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7131
server: nginx
content-language: 7131
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 29 Mar 2024 06:49:23 GMT
cache-control: max-age=2592000
etag: "60f73638035955e1146cb48ccdf11c7523940a2c"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RSlSx5OqWND5rh3WzRea7oO2JIVQ7hA5bB2KNA0hqsnt0y35iqx0Ag==
age: 2460874
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/ace575b5.f3f69686.chunk.js | 143.204.55.102 | 200 OK | 122 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/ace575b5.f3f69686.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size122 kB (122124 bytes) Hash81a85c5d490e97b2bb92350df025194a a8ad4bc8b353ced34ced2c1bb24272c03965edec ba202e8fd0079582c358edeab9b1513ccd488817036ace3cef5b75a3640933f2
GET /psb/capla/static/js/ace575b5.f3f69686.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 0nYO4GaT34ANl6aBemSiA2DDF7LM6IZN
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:25:24 GMT
etag: W/"f3385bf6f79f8c5882899b6b23f62355"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QAcrsFuXPg6vRK9vjcGntyrgFZUofNcuV_uwcX6qY1LnqA4clO3PJQ==
age: 86311
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/f141039c.1c2abb24.chunk.js | 143.204.55.102 | 200 OK | 13 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/f141039c.1c2abb24.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10609) Hash6373ae89ed2b9b79abeff0e4e13f68a7 ff553513e9bff9e35518ede617adc95fe06f77da d41d630c0452791cbcd8cc993b9ec0b0e99c3c080912d31db4ef97c20e8db323
GET /psb/capla/static/js/f141039c.1c2abb24.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 26 Apr 2024 00:56:43 GMT
last-modified: Thu, 25 Apr 2024 16:25:57 GMT
etag: W/"6373ae89ed2b9b79abeff0e4e13f68a7"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: bcfAZgu.6x3xXMoCSLszsSBHhx1JN4gG
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VLL2b1N1jFfhFWakYhrRUn4R2dqYzzR-AIRKccOIRsK9mZmrc6kJJw==
age: 62832
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| www.booking.com/js_tracking?ver=2&lang=en-us&sid=1f98284b2f440f1beb4210dd000dd6fe&stype=1&ref_action=index&aid=2391722&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZw-HqomS2cQuuJH039lXS-axFHjBRRKyRqe0fGss5Yx2eUU2_G62-p9owosjKhTMMiFbsgbXGf8CtLnmJnILrMiI1bJ1K5o3mGfoktX1QqyOVDyKAWzX-ys6DZeHQy6qOTY8Jc-UDSzjUNfU-5pxXbMInoINj_rcO8RgK_2D8CA28qbHfzdrkHH0rdKytiXWT2lXOlpiY3lLu6FFaheziJXBLq86njAG16ZEoWXWQJTz52hMvbGTTa037An4QVHfabK2G95S6co96xwwCWWa2w | 143.204.55.27 | 200 OK | 6.3 kB |
URL GET HTTP/2www.booking.com/js_tracking?ver=2&lang=en-us&sid=1f98284b2f440f1beb4210dd000dd6fe&stype=1&ref_action=index&aid=2391722&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZw-HqomS2cQuuJH039lXS-axFHjBRRKyRqe0fGss5Yx2eUU2_G62-p9owosjKhTMMiFbsgbXGf8CtLnmJnILrMiI1bJ1K5o3mGfoktX1QqyOVDyKAWzX-ys6DZeHQy6qOTY8Jc-UDSzjUNfU-5pxXbMInoINj_rcO8RgK_2D8CA28qbHfzdrkHH0rdKytiXWT2lXOlpiY3lLu6FFaheziJXBLq86njAG16ZEoWXWQJTz52hMvbGTTa037An4QVHfabK2G95S6co96xwwCWWa2w IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hasha8cbc2a69cb364e3322c43b67091182d 2c59c914aa19b73d0ff0886d5f5cafe114290890 ebf24bf8ec2946dfbcf400529496ea83e8727a66039c62d2caf3539c9861541d
GET /js_tracking?ver=2&lang=en-us&sid=1f98284b2f440f1beb4210dd000dd6fe&stype=1&ref_action=index&aid=2391722&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZw-HqomS2cQuuJH039lXS-axFHjBRRKyRqe0fGss5Yx2eUU2_G62-p9owosjKhTMMiFbsgbXGf8CtLnmJnILrMiI1bJ1K5o3mGfoktX1QqyOVDyKAWzX-ys6DZeHQy6qOTY8Jc-UDSzjUNfU-5pxXbMInoINj_rcO8RgK_2D8CA28qbHfzdrkHH0rdKytiXWT2lXOlpiY3lLu6FFaheziJXBLq86njAG16ZEoWXWQJTz52hMvbGTTa037An4QVHfabK2G95S6co96xwwCWWa2w HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
X-Booking-AID: 2391722
X-Booking-CSRF: eSksZgAAAAA=eSj9daPbIVj0H6aWmp0pEL4CGQLakVvQ7vn1ApoTj5AoI18mbG0JA4bNcasyWlVQla3X708ycDJh4oPSVmQm9fR2Rs-8rrmA9UzvpFrpNKHnAm8ZRe4xJ4mTRxWujm5G8BB-DZDKrjLVICC1CbKM4Q5ixzBMsh19FsUrz-aV_E2RVJ9LFgJXlho8aU0weaQeGONZtODBmTuBcGe0
X-Booking-Info: 1865390,1932080,1932100,1932110,1939730,1943090,1946400,1958000,1959390,1960640,1969470,1969990,1970010,1970670,cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,1932110|1,1970670|1,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3
X-Booking-Client-Info: cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6
X-Booking-Label: 4Sx1zVc8vr8B
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-Session-Id: 1f98284b2f440f1beb4210dd000dd6fe
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=c995815eaee0044d&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejJZ0QU62kHeEp07rHvR-iBM17hdaJDMirs
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NDJwinLlsPwXZgLLp1U9zxjUavNhDiz6UItjInySO6DzpMZp8nTVdA==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/remoteEntry.498c893a.client.js | 143.204.55.102 | 200 OK | 9.9 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/remoteEntry.498c893a.client.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18747) Hashfcf01531d5da6cebd0312a6745319f7f 4325598ce0103efaffe5441fabbef1a0eb7bcd5e fe354284257e0363ca9627d55be93e445f7ecedda966479f0adba7af404d31c0
GET /psb/capla/static/js/remoteEntry.498c893a.client.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 07:32:11 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: lrVHaATPa4SAmoBlcaK9mcgyGTUNFl4w
server: AmazonS3
content-encoding: br
date: Fri, 26 Apr 2024 10:17:58 GMT
etag: W/"fcf01531d5da6cebd0312a6745319f7f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lJEmd3mBwvNVd61rUewyhNM0mhPHSeXLWpkTqNf43xZSHUyV--LiEQ==
age: 29157
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/737551.jpg?k=ad4ef19a2b979ef794b56d1901e6937b874b4726a4085d8ddbe795f5c6bfed73&o= | 143.204.55.102 | 200 OK | 6.2 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/737551.jpg?k=ad4ef19a2b979ef794b56d1901e6937b874b4726a4085d8ddbe795f5c6bfed73&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash033e02e916d5f3791fb0edcde629ef86 d5cc83fc9698814ff92bf752ac0cbb004439f614 1815ead7ea4f562bb51ec2e39ee38db0e120120d1f8b98096dc60583c493e4d4
GET /xdata/images/city/170x136/737551.jpg?k=ad4ef19a2b979ef794b56d1901e6937b874b4726a4085d8ddbe795f5c6bfed73&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6204
server: nginx
content-language: 6204
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 30 Mar 2024 06:11:33 GMT
cache-control: max-age=2592000
etag: "695c818f24fef509fad771a67c8002e1622b09f9"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -6JBpWQSX3qq5H_vX0hBZLUciCmGPB9hCu7GkMAerUx4cy-nMJLhnQ==
age: 2376744
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/6b631c3f.4ad2f2c7.chunk.js | 143.204.55.102 | 200 OK | 28 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/6b631c3f.4ad2f2c7.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashb72ff7cde228170d889fa3a6060320ab dd53cd70c8fa9b11c394c5879234851864669288 ba7f31de1de3c9b7fd4cab4c5b1c8a922af06f9deef0f31919a1473cde733780
GET /psb/capla/static/js/6b631c3f.4ad2f2c7.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:50 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: tSjPVOb_qnGgT1UJKTMKUwj7h9vgCdUE
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:25:24 GMT
etag: W/"8222121ade8cc64dad7e00376c36088a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: slkTlM1RgmzN6ml_IebS6lMorZ35kL-Otmf5LssvhjM1_lCRuNqbPw==
age: 86311
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/city/170x136/930853.jpg?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= | 143.204.55.102 | 200 OK | 7.0 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/city/170x136/930853.jpg?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hasha74c25791bb6960282adb0b0bfac4614 5d6cb72e147c07299ae8aa66d6b7d8c8f1e1414b a8d86240545c19cd5081d6a4dcd1c8ab8138fd88154bd9c281914216444ead84
GET /xdata/images/city/170x136/930853.jpg?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7004
server: nginx
date: Sun, 07 Apr 2024 11:24:13 GMT
etag: "7b2c48bc6b9bd8a3d2a38e8a2caf3e3541c6e001"
content-language: 7004
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5IeQKNqT6FSFEshtxmUAUqQpcf_AGszaPf5fecf0zsHcRUZdm3DG7w==
age: 1666784
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/remoteEntry.e35d0cc2.client.js | 143.204.55.102 | 200 OK | 11 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/remoteEntry.e35d0cc2.client.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashbab667aab13051d781429900cb99288e 51c9d8bda8952b4897e79b63fa167a6312a4a76e 3d5e71188d69f8d7ffe1623b6471378111410728fbdec45ee89e4bf16bd3d9e3
GET /psb/capla/static/js/remoteEntry.e35d0cc2.client.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 14:30:33 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: zj5bgW9n6FGDvb0lcBJYutWx_lSsArm4
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 15:46:04 GMT
etag: W/"f9437e93baac18c73da482980b072728"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7_5SROaINEU8JWms5hj9BSX_f8_5Hl7dJT245GKvaVHAkwoysMO6ug==
age: 9471
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| privacyportal-eu.onetrust.com/request/v1/consentreceipts | 104.18.32.137 | 200 OK | 0 B |
URL POST HTTP/2privacyportal-eu.onetrust.com/request/v1/consentreceipts IP104.18.32.137:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerLet's Encrypt Subjectonetrust.com FingerprintFB:9C:14:70:9B:22:FB:F6:B7:C3:39:38:9A:34:8E:2F:64:0E:DF:44 ValidityFri, 19 Apr 2024 23:13:49 GMT - Thu, 18 Jul 2024 23:13:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /request/v1/consentreceipts HTTP/1.1
Host: privacyportal-eu.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.booking.com/
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:57 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE,OPTIONS,HEAD
access-control-allow-headers: content-type
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a89b5eadab56ca-OSL
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css | 143.204.55.102 | 200 OK | 109 kB |
URL GET HTTP/2cf.bstatic.com/static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65487) Size109 kB (108587 bytes) Hashcad5fe4c499f7568e14e7ab6ff9b3361 7cf66966b26c499b535efd53c77f65df7da14338 83f4228d1d92171186e8b8ccce6e69b32ad6b322db4af7e4b6f54ce50e299587
GET /static/css/fonticons_clean/base64/woff/5d61b8a7156073e5e3e9741f65dda44ae3eef7d2.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 29 Mar 2024 06:34:31 GMT
last-modified: Wed, 10 Apr 2019 11:21:48 GMT
etag: W/"5cadd1cc-375af"
expires: Sun, 28 Apr 2024 06:34:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7h3PGpnyo-2GdKazrKL2wc9tTl4Mr9S9Nun0X76SvFns2NSkL4V_1A==
age: 2461765
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/remoteEntry.54675ecb.client.js | 143.204.55.102 | 200 OK | 12 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/remoteEntry.54675ecb.client.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash89f27b504f44d56e342685e41946c941 5adb725089d7fcb59190a1229ef1fc2283e57da6 5b96a3e65b077833dafe9ed2c3e02e3697fd162cd1baef9c52bbd25f86477f5c
GET /psb/capla/static/js/remoteEntry.54675ecb.client.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 05:36:01 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 85oRpPoQ79u.qNmyKE1CFWSUe3kwm_kq
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 16:10:20 GMT
etag: W/"ba19a0fc851de0507c920ce00488a14e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: apY0VyGEoe3reiAp-RcfmzFhVxPor-9e6PEt1FW9JqaSjsg6jabsYw==
age: 8015
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/region/170x136/48107.jpg?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o= | 143.204.55.102 | 200 OK | 4.8 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/region/170x136/48107.jpg?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash618f36c6dca24c1e13f65743924ad4d6 1cdfec657ca8b3ce961107de24a0a3c467cfc161 fc9631742c03f76f2df1dc803bff39e7c53ae024541dcfbed7b8c05f45dbf180
GET /xdata/images/region/170x136/48107.jpg?k=bc7ff9cf4d26882ff93f92643455885a88b9b0ae37b9ed109687ad0890af2dfd&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4829
server: nginx
date: Sun, 31 Mar 2024 14:27:54 GMT
etag: "1f2e06af21700f3a8c1ef023dbce26ff576102bf"
content-language: 4829
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OdvtgUMDiIA9BdYrvdXWHZSDvvQqHD0s1ZV8JSLa5vRUdr_EB2S9aw==
age: 2260563
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/f41dcaf5.e0e8868c.chunk.js | 143.204.55.102 | 200 OK | 6.4 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/f41dcaf5.e0e8868c.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashcaca0679de3d11a696af722ecf6a264d 59ad45b7545224c5126e289ff5f72c4a3a060efa ed6251a3f13d448f20cbe8bae16190d5204d17a2a8226dbcaff8b94a8d62554f
GET /psb/capla/static/js/f41dcaf5.e0e8868c.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:51 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: qqhHE8GQ45jq2tOWwTlM3q6I4AT8Kc53
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 19:51:05 GMT
etag: W/"96dc2ce12a9168780adb0c37f8777852"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JmdMRkX8rlFi-e7xybAJe6lWOoV04kC-um7QSTmvtm7xqTbubjv9aA==
age: 81170
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/city/170x136/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= | 143.204.55.102 | 200 OK | 7.1 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/city/170x136/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hashbcabc853805644c852b5e28ceb4da21f 85e9e9be45cd209187f883151d869f07dce4a016 0e9deb49e94a0a7b46e1300d00ff66abc515bf83f77c53d322457e1cce9d3d5c
GET /xdata/images/city/170x136/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7131
server: nginx
content-language: 7131
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 29 Mar 2024 06:49:23 GMT
cache-control: max-age=2592000
etag: "60f73638035955e1146cb48ccdf11c7523940a2c"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f2jnFYu7BOxFBtBaqxCpCQ2ljr7ad20UW2IcZHAkB4lxcKqb99tERg==
age: 2460874
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/671694.jpg?k=cd1e3603afe4edd09f829675efb1cdc9a5925bed25a642bfc4d909602c231624&o= | 143.204.55.112 | 200 OK | 6.3 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/671694.jpg?k=cd1e3603afe4edd09f829675efb1cdc9a5925bed25a642bfc4d909602c231624&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash566ef663c31a7da2e19277c795aab0fa bcbc6af34645cb84bec41718185ab14768d36a31 207cf1ee36b9118a68d6b33bbef91c4eb9bd28edcabae628828b20a375f409c9
GET /xdata/images/city/170x136/671694.jpg?k=cd1e3603afe4edd09f829675efb1cdc9a5925bed25a642bfc4d909602c231624&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6341
server: nginx
content-language: 6341
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Tue, 09 Apr 2024 06:05:43 GMT
cache-control: max-age=2592000
etag: "498d6d5b65e81aa8199ff4e9ae444d1081d082a3"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 41WYOrUkTw9cBHZXrE68glirPX9K8HGySKwvcWWsP2089GbjxgI-Hw==
age: 1513094
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/city/170x136/930853.jpg?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= | 143.204.55.102 | 200 OK | 7.0 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/city/170x136/930853.jpg?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hasha74c25791bb6960282adb0b0bfac4614 5d6cb72e147c07299ae8aa66d6b7d8c8f1e1414b a8d86240545c19cd5081d6a4dcd1c8ab8138fd88154bd9c281914216444ead84
GET /xdata/images/city/170x136/930853.jpg?k=85cc355550cdcf1ca77d1a7a635f4294e09dee696051866597a63fd7edd7af5a&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7004
server: nginx
date: Sun, 07 Apr 2024 11:24:13 GMT
etag: "7b2c48bc6b9bd8a3d2a38e8a2caf3e3541c6e001"
content-language: 7004
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vSnw-h2qspbyDn9zZGQ8mjsTuGuVLRBlZXJnlWoLsGHJ8VPRwVbUAw==
age: 1666784
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/282e5b08.8cbe0db2.chunk.js | 143.204.55.102 | 200 OK | 48 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/282e5b08.8cbe0db2.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash880ab5cbeaae874913db7c71203d99be c7378a4a5f22a50b9990f87e0e171eb203868d7d 6b3752c2db5e892840e043327677214348f67782c7d0ef594af72e72d57b5562
GET /psb/capla/static/js/282e5b08.8cbe0db2.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 8jm8_1SxSEBKdvhclJV8Gza5U6LTnEE3
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"bcee6f2e3989d72b4130c4c1dab60271"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AvITqRS9ie_-YaDZHBSOgxNuHThuPMII4DWpwaiojl9SWFT81mpYMg==
age: 47753
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/644310.jpg?k=472fefd4c3c0aef36deb16adb91c965923d8b1078ab29056802f95aead0586bf&o= | 143.204.55.112 | 200 OK | 6.5 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/644310.jpg?k=472fefd4c3c0aef36deb16adb91c965923d8b1078ab29056802f95aead0586bf&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hashd8fc03a58b76828aa4d541100bd52964 ec876001abc6b7de78aada1dc0460f898269aa1e 08d047a4f12afcccef76d06b51501b8cbec55e66f828a08bedb06434b7249502
GET /xdata/images/city/170x136/644310.jpg?k=472fefd4c3c0aef36deb16adb91c965923d8b1078ab29056802f95aead0586bf&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6544
server: nginx
content-language: 6544
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 28 Mar 2024 06:03:52 GMT
cache-control: max-age=2592000
etag: "dc256fcd9293261238443518cc03ae92aad2431e"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DHn9PDnxFbpeJHSMUGLQ7ht19HJWDusSjPwdd6q_LF5sQfkgp8GHBA==
age: 2550005
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/967857.jpg?k=5733a245dbb186ec0986c0a5c533acc704650d51cdfed7410cf0bcef375e5bc4&o= | 143.204.55.112 | 200 OK | 5.9 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/967857.jpg?k=5733a245dbb186ec0986c0a5c533acc704650d51cdfed7410cf0bcef375e5bc4&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash974a5478069b3972c9d477165b0704bc 66e215dcdd7180200eb06c2e430c44946a10b6d0 b335582be21d666553adacdaa635dbeb6c92e93f0e8172fa7848ceb60008b1cf
GET /xdata/images/city/170x136/967857.jpg?k=5733a245dbb186ec0986c0a5c533acc704650d51cdfed7410cf0bcef375e5bc4&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5863
server: nginx
date: Tue, 16 Apr 2024 10:12:56 GMT
content-language: 5863
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "8fb9b3e2a7f5dccf0a6d0a7392f409b135d2f3af"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eQwDslVLrJlLhJ0nt_088bYUGCrwQdWJhn9B2lh03GibkLQsT7O4sQ==
age: 893461
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/967864.jpg?k=a98989bf56eeff2512cea0b0f4ec6aae0906b781cfb154d0cc574e906b8da18b&o= | 143.204.55.112 | 200 OK | 4.1 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/967864.jpg?k=a98989bf56eeff2512cea0b0f4ec6aae0906b781cfb154d0cc574e906b8da18b&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash24ee7c3511b2915ebf7cfd1ea1ec453f 36ab0e8a9940439ade7531eed218115c9048a3e2 e1d15a3f6846e2f65104101dfa58c50a94a2584e1a0a789b23748cabd7fcf622
GET /xdata/images/city/170x136/967864.jpg?k=a98989bf56eeff2512cea0b0f4ec6aae0906b781cfb154d0cc574e906b8da18b&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4062
server: nginx
date: Sun, 14 Apr 2024 14:59:22 GMT
etag: "2a2dfed680c3e471aff1f9c53b18abd67c3291cc"
content-language: 4062
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WCI5opiTiI-nAAfkkRM0wXZy8vqLtGHYh5EDQDqjs4RhRnwXYhZjWQ==
age: 1049075
X-Firefox-Spdy: h2
|
|
| www.booking.com/dml/graphql?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT&lang=en-us | 143.204.55.27 | 200 OK | 2.4 kB |
URL POST HTTP/2www.booking.com/dml/graphql?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT&lang=en-us IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hash10a5d9aa52f26e7341eb0a5a344571bb 28bad2ff0372eddf25990fc52c95931cd5b0bb2a 89e8106d8660c56fe4ca77a417ebc5f9981e7084045ac2df68efea5777601132
POST /dml/graphql?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT&lang=en-us HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
content-type: application/json
x-booking-context-action-name: index
x-booking-context-aid: 2391722
x-booking-csrf-token: eyJhbGciOiJIUzUxMiJ9.eyJpc3MiOiJjb250ZXh0LWVucmljaG1lbnQtYXBpIiwic3ViIjoiY3NyZi10b2tlbiIsImlhdCI6MTcxNDE1NTgzMywiZXhwIjoxNzE0MjQyMjMzfQ.ejEjq3x4PoJgLFwN1DAdvmIdlbOudoRWFsjO_1psCDji5fTIUTekI6Zu_X9DQZPn42t-q5rS3LVHyjEuM-Wu1g
x-booking-et-serialized-state: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
x-booking-pageview-id: 6a8e815c724901eb
x-booking-site-type-id: 1
x-booking-timeout-budget-ms: 1500
x-booking-timeout-ms: 1500
x-booking-topic: capla_browser_b-index-lp-web-mfe
x-envoy-expected-rq-timeout-ms: 1500
Content-Length: 2005
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A56+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.booking.com%2Findex.html%3Faid%3D2391722%26label%3D4Sx1zVc8vr8B%26sxid%3DFlyaround-IT; BJS=-
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 2370
server: nginx
date: Fri, 26 Apr 2024 18:23:57 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzltX6xhe6bQYu2XZ%2F3eUkJ8NiGh6DMkeAW%2BLi8qPv0NO7hKeWsoacF1USB%2FIvEMIV9c7k7rBhuMqRTTImhZTaQbIAEJPjSxJRJSZV3gCTaq6wxqqhlMwE8ar8U9luIHnjLSSvRgSALiNnifLF9jhlPgI0ObSnqi3cg%3D; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mBF5mWp9_EPtZqU5l58P_QTKJyk89fBca4_Ayxcuz8YemavaBNNmGA==
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o= | 143.204.55.112 | 200 OK | 13 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashd93a3cfd575431388417218c821211d3 9b0d3213477937037ac19b0df7fd68f454ca6627 b1fddecaf7c5b5a6dc509dc86b2d563259eea641ff338b028f5a46401c116426
GET /xdata/images/xphoto/263x210/45450283.jpeg?k=44ef0e355cff36883935e4c99b5c01b035eabebad278d22363210b2fe40b2791&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:23:00 GMT
content-language: 12945
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "7dcfcd553f0c70776bfeef049bb49be408eca4dd"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xyAYEb1nWZSXCiSW7l9AXKr7KFruiT8t_We03m8emBD0gDyzciEbPg==
age: 194457
X-Firefox-Spdy: h2
|
|
| www.booking.com/c360/v1/track | 143.204.55.27 | 200 OK | 48 B |
URL POST HTTP/2www.booking.com/c360/v1/track IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hasha16f69b7933c91e379ae219304e8237c 82fd1a506507dfe277057b5adfddea6c4a2db401 1e55e23e0aa45f62c2d2328653fc846bbff06b432b314ae11029c27430efc5a3
POST /c360/v1/track HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
Content-Type: application/json
X-Booking-Platform: www
X-Booking-SiteType-Id: 1
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-Session-Id: undefined
X-Booking-ET-Seed: undefined
X-Booking-AID: 2391722
X-Booking-Label: undefined
X-Booking-CSRF: undefined
X-Booking-Language-Code: en-us
Content-Length: 1740
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzltX6xhe6bQYu2XZ%2F3eUkJ8NiGh6DMkeAW%2BLi8qPv0NO7hKeWsoacF1USB%2FIvEMIV9c7k7rBhuMqRTTImhZTaQbIAEJPjSxJRJSZV3gCTaq6wxqqhlMwE8ar8U9luIHnjLSSvRgSALiNnifLF9jhlPgI0ObSnqi3cg%3D; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; pcm_consent=consentedAt%3D2024-04-26T18%3A23%3A57.593Z%26countryCode%3DNO%26expiresAt%3D2024-10-23T18%3A23%3A57.593Z%26implicit%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr%26consentId%3D54894813-b88e-4c4f-96d1-aa019443e21f%26analytical%3Dfalse%26marketing%3Dfalse; cors_js=1; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6ImJSQWVIZUZxZzExZXBsSkh1YzBJNld6eUZ0U2oxazJrbEwwWUdWMVcwT0UiLCJhIjoxfV19; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A57+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&backfilled_at=1714155837729&backfilled_seed=1; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D; OptanonAlertBoxClosed=2024-04-26T18:23:57.170Z; bkng_sso_auth_1714155837=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 48
server: nginx
date: Fri, 26 Apr 2024 18:23:57 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBtYokf%2FVSxjuFMpMDXWB0dJfpyCRarYg7fZv7P6wD3ScHd6mOO2wZjSQE%2B0Tzfj0Zd%2FRebZr%2B%2BOkbtpMnxj%2FUDT81MBEazpSHIGu%2BaexlVuoPPC%2FtTCnDjoKZIsOLbv9gGypzuEnRV5MPA%2BKHIT93UwZxAFGk0%2FsPY%3D; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NlaqCg5dbAFKGXXM2WVunQgzPTeJevd123ppGSTwApDduh0VYoT19A==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/0a098284.fcb66bca.chunk.js | 143.204.55.102 | 200 OK | 93 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/0a098284.fcb66bca.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash65b8894da997268eee2ac104a4b56c5b 41c97f34d97ca89840fe32069d968d5d97f53a18 d464987c6a040da30b02e8e956413ca582e54133084e56d5f1ae70fcfb79b09a
GET /psb/capla/static/js/0a098284.fcb66bca.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: y1wPFpL5gM9rPnrnYIbk81ULPoEruERe
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 00:59:31 GMT
etag: W/"3d56bddb275788d0b134078ac3306cca"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SWEy_d-HFBgf68nA2RND-qHpMTu2Rd1jYuyF7fh4DSQIvlHITwiZxQ==
age: 62664
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/d9560671.ac2ecfa6.chunk.js | 143.204.55.102 | 200 OK | 47 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/d9560671.ac2ecfa6.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash689c9b7fd615aa3284759df0c76f73a4 2ce4dd99060be1010b9a0d63508012481b0b3675 c02c6e0a65b723404bc1a06663d5f193a5ce050bc06d9f9d8d4b0e56dc5bdd73
GET /psb/capla/static/js/d9560671.ac2ecfa6.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: W2e1YdWnCCJMrp2Kzk7iEYHTtZin5CJB
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"84efd90809f2f8f803e8a8da55545759"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fMIqWud61CR3bZ5I3R9FvTh7fvxKJLkty_eE8YvqCjQPY3dTa9rO1Q==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/5f127cf4.d3a42aee.chunk.js | 143.204.55.102 | 200 OK | 129 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/5f127cf4.d3a42aee.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Size129 kB (128804 bytes) Hashf1a3f760a569ea132c9e541fe1e1f3cf d7fc8cdeed1cd76b37c9c3bcc72d7192857cdaa3 a01c1c2ef3b5e8ec1353e631697fc398e114f65b65ccf30a8182ffeeef27b407
GET /psb/capla/static/js/5f127cf4.d3a42aee.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: _Nih_wKf3Jn502j3NqCZmNQgZl50.Z2g
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"e492b6c768fb432220b4f40c286fbb4d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zAxyeKA5ZW4LVxJEPn-NhcQXF12WxnyenSG2wIcLMG1N5vzkOT0_uA==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| privacyportal-eu.onetrust.com/request/v1/consentreceipts | 104.18.32.137 | 200 OK | 77 kB |
URL POST HTTP/2privacyportal-eu.onetrust.com/request/v1/consentreceipts IP104.18.32.137:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerLet's Encrypt Subjectonetrust.com FingerprintFB:9C:14:70:9B:22:FB:F6:B7:C3:39:38:9A:34:8E:2F:64:0E:DF:44 ValidityFri, 19 Apr 2024 23:13:49 GMT - Thu, 18 Jul 2024 23:13:48 GMT
File typegzip compressed data, from Unix Hash145430d48d7bb7bc05b17621638d31a0 b31a53ffa6fd6b89cc50516e93f34ac49d2dfab8 2047d7b3ecf6f97364e7f102765e4e9bd26e4f19c11d257c78f074649f9a1140
POST /request/v1/consentreceipts HTTP/1.1
Host: privacyportal-eu.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 11164
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:57 GMT
content-type: application/json
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-onetrust-receiptid: dd8f7952-2f6a-47b6-a1d4-45da721ec295
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a89b5f5f6856ca-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o= | 143.204.55.102 | 200 OK | 136 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Size136 kB (135875 bytes) Hash79acc447872dd88ca2054a6672b76bc4 81e2e790638ef9e35cd4324f08d472ef1b904187 8c558f57c51cd4f066a10b4a68cacc608e7ee070e15b9ff08b4270ffb3ef340f
GET /xdata/images/xphoto/263x210/45450068.jpeg?k=41cc7c5449011323aaaaed4e845cb16200b5d540c77a50c1bea90399a1e92d70&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 15735
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "d7d9dce017375f28392f8900463550320ea7975e"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B6TBZnAFg9JoLnFebzX1JNHh-PfuzCeLjuBDHRBIaIK-7oJNJcxjag==
age: 2170369
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450082.jpeg?k=beb101b827a729065964523184f4db6cac42900c2415d71d516999af40beb7aa&o= | 143.204.55.102 | 200 OK | 49 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450082.jpeg?k=beb101b827a729065964523184f4db6cac42900c2415d71d516999af40beb7aa&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash6ab35f2b122997c0c69a25d12943023e 3fea7260bfa3ebed149725a934d2698cb6deb346 3c180e0ac9fe752748f134e254276f9d9a8afc241505422e5fa596f04f22e0b7
GET /xdata/images/xphoto/263x210/45450082.jpeg?k=beb101b827a729065964523184f4db6cac42900c2415d71d516999af40beb7aa&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 10776
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "dc7c5b4b80a5725d17634bed31f74382f04698fd"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8w00qPGDGX9c6_IeQ0-XG3sEjB4vxhw2GN1Mz2o6Z3_wVkUU6s4zEw==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/7943e0ea.e4514c21.chunk.js | 143.204.55.102 | 200 OK | 73 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/7943e0ea.e4514c21.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashc9149bcb4074e7205850a64795fa7b81 bff7e3daad47cfa93fd762c45a6f4c478c25df1a bedbbcc994d8f81d9b8410bcab2e354a543fc2e13b1be4f2836fc2e0ecdc2ebc
GET /psb/capla/static/js/7943e0ea.e4514c21.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: GUwrXPizaS.VUrqldyfn6vjrUf6yMlOa
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"9c09fbd4583bd950c92eddfe7cdda1c5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vWVmHzYkS3ESUKyL4Cndw6KB2MlmRbysXk-T-BbP2vf2MBQ75PtnhQ==
age: 47753
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450095.jpeg?k=cd5e46e632dab722d22217813485efde31fbe82f5f26a624166edccdbe8187bc&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450095.jpeg?k=cd5e46e632dab722d22217813485efde31fbe82f5f26a624166edccdbe8187bc&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash4a3d6681973906a15cf25575a34149c5 5cc846e08d4262f3b8d21a4fda93422e59e77519 911bb77dbdce93cc64009eb78b150865f1c5e6aec0e1d8c1a55ccd6d04154a2d
GET /xdata/images/xphoto/263x210/45450095.jpeg?k=cd5e46e632dab722d22217813485efde31fbe82f5f26a624166edccdbe8187bc&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Thu, 18 Apr 2024 08:38:57 GMT
content-language: 16076
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "dc73c2969c0c57d5e4a2210826ddcf376beb4276"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DzzAjuxZZNYOGUT0_-grhSWwZ-tq8c86z-QFyztQGzpcstB2GZKxDg==
age: 726300
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/82553e98ffae657c57463aa497e9d8933a2ebe7f.css | 143.204.55.102 | 200 OK | 69 kB |
URL GET HTTP/2cf.bstatic.com/static/css/main_cloudfront_sd.iq_ltr/82553e98ffae657c57463aa497e9d8933a2ebe7f.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash09724eafceca136163dab323bbda4167 151160cf3b13a76abe9e969c1613499538f758ea c3be9fbd59decfb2ac8a20d374cb68fcec314e6a6e9587e23bae181ab04596e1
GET /static/css/main_cloudfront_sd.iq_ltr/82553e98ffae657c57463aa497e9d8933a2ebe7f.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Tue, 09 Apr 2024 09:16:00 GMT
last-modified: Tue, 09 Apr 2024 08:42:27 GMT
etag: W/"6614ff73-7d9be"
expires: Thu, 09 May 2024 09:16:00 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1rqVN6YMhjNikkI_gC6nlnCR-vWKmJCGaDPqhNZAPzh3vTrFvTP8hw==
age: 1501674
X-Firefox-Spdy: h2
|
|
| www.booking.com/sendlayoutevents | 143.204.55.27 | 200 OK | 18 B |
URL POST HTTP/2www.booking.com/sendlayoutevents IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hash81a3741954559ea5a2af17ab488aa906 83d235a4128e9828371fad4e5e22d55f168a3d6e 2e7f2cc2c0508d98633eb152c7625085e0cad3a9ca467575ae2b7056e49822dc
POST /sendlayoutevents HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-AID: 2391722
X-Booking-Session-Id: 1f98284b2f440f1beb4210dd000dd6fe
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Booking-Label: 4Sx1zVc8vr8B
X-Booking-CSRF: eSksZgAAAAA=eSj9daPbIVj0H6aWmp0pEL4CGQLakVvQ7vn1ApoTj5AoI18mbG0JA4bNcasyWlVQla3X708ycDJh4oPSVmQm9fR2Rs-8rrmA9UzvpFrpNKHnAm8ZRe4xJ4mTRxWujm5G8BB-DZDKrjLVICC1CbKM4Q5ixzBMsh19FsUrz-aV_E2RVJ9LFgJXlho8aU0weaQeGONZtODBmTuBcGe0
X-Booking-Language-Code: en-us
X-Booking-Client-Info: cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6
X-Booking-Info: 1865390,1932080,1932100,1932110,1939730,1943090,1946400,1958000,1959390,1960640,1969470,1969990,1970010,1970670,cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,1932110|1,1970670|1,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3,cCHObTULHfAFFQZcNHFXbEIdAJOdKNKNKWe|1
X-Requested-With: XMLHttpRequest
Content-Length: 117
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sMGDG3%2B2SOguOKg%2F%2FbkOC1xr08t83eJ2MXkqFW0gm6L60snuIYE%2FOdFp%2BLVd9O%2B%2Bjj8tpqNXwBu22aNmod9agFVyaRNBKd46uaR%2BMwgjP%2B2c%2BUbtpd%2Ffa0DrvcvsoNGAJ4gTjvkDNMt7Il34CabSLL; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; pcm_consent=consentedAt%3D2024-04-26T18%3A23%3A57.593Z%26countryCode%3DNO%26expiresAt%3D2024-10-23T18%3A23%3A57.593Z%26implicit%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr%26consentId%3D54894813-b88e-4c4f-96d1-aa019443e21f%26analytical%3Dfalse%26marketing%3Dfalse; cors_js=1; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6ImJSQWVIZUZxZzExZXBsSkh1YzBJNld6eUZ0U2oxazJrbEwwWUdWMVcwT0UiLCJhIjoxfV19; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A57+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&backfilled_at=1714155837729&backfilled_seed=1; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D; OptanonAlertBoxClosed=2024-04-26T18:23:57.170Z; bkng_sso_auth_1714155837=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 18
server: nginx
date: Fri, 26 Apr 2024 18:24:01 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sMGDG3%2B2SOguOKg%2F%2FbkOC1zqIttEjbSsAj2Z9DLwL%2FLyN8O3pW9ooE2U8Lg8aeD2id8qLa1gziTw%2F0QErZlx4m0U778q3F6gG3mCCZytHwJfPTuHC5BZsF%2BVdp4W06B1HBo9fbeSt%2BtF29nfne31etuyibfVYfkVg%3D; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:24:01 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: q4uj-XgYRc3i_bu6k4DwSR-0bxWS_Gba4hiNiAEKYGPhULyh0usVlA==
X-Firefox-Spdy: h2
|
|
| www.booking.com/sendlayoutevents | 143.204.55.27 | 200 OK | 18 B |
URL POST HTTP/2www.booking.com/sendlayoutevents IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hash81a3741954559ea5a2af17ab488aa906 83d235a4128e9828371fad4e5e22d55f168a3d6e 2e7f2cc2c0508d98633eb152c7625085e0cad3a9ca467575ae2b7056e49822dc
POST /sendlayoutevents HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-AID: 2391722
X-Booking-Session-Id: 1f98284b2f440f1beb4210dd000dd6fe
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Booking-Label: 4Sx1zVc8vr8B
X-Booking-CSRF: eSksZgAAAAA=eSj9daPbIVj0H6aWmp0pEL4CGQLakVvQ7vn1ApoTj5AoI18mbG0JA4bNcasyWlVQla3X708ycDJh4oPSVmQm9fR2Rs-8rrmA9UzvpFrpNKHnAm8ZRe4xJ4mTRxWujm5G8BB-DZDKrjLVICC1CbKM4Q5ixzBMsh19FsUrz-aV_E2RVJ9LFgJXlho8aU0weaQeGONZtODBmTuBcGe0
X-Booking-Language-Code: en-us
X-Booking-Client-Info: cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6
X-Booking-Info: 1865390,1932080,1932100,1932110,1939730,1943090,1946400,1958000,1959390,1960640,1969470,1969990,1970010,1970670,cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,1932110|1,1970670|1,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3,cCHObTULHfAFFQZcNHFXbEIdAJOdKNKNKWe|1
X-Requested-With: XMLHttpRequest
Content-Length: 116
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLblgO%2Fz4BDP5sMGDG3%2B2SOguOKg%2F%2FbkOC1xr08t83eJ2MXkqFW0gm6L60snuIYE%2FOdFp%2BLVd9O%2B%2Bjj8tpqNXwBu22aNmod9agFVyaRNBKd46uaR%2BMwgjP%2B2c%2BUbtpd%2Ffa0DrvcvsoNGAJ4gTjvkDNMt7Il34CabSLL; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; pcm_consent=consentedAt%3D2024-04-26T18%3A23%3A57.593Z%26countryCode%3DNO%26expiresAt%3D2024-10-23T18%3A23%3A57.593Z%26implicit%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr%26consentId%3D54894813-b88e-4c4f-96d1-aa019443e21f%26analytical%3Dfalse%26marketing%3Dfalse; cors_js=1; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6ImJSQWVIZUZxZzExZXBsSkh1YzBJNld6eUZ0U2oxazJrbEwwWUdWMVcwT0UiLCJhIjoxfV19; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A57+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&backfilled_at=1714155837729&backfilled_seed=1; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D; OptanonAlertBoxClosed=2024-04-26T18:23:57.170Z; bkng_sso_auth_1714155837=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
content-length: 18
server: nginx
date: Fri, 26 Apr 2024 18:24:01 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
access-control-allow-credentials: true
access-control-allow-origin: https://www.booking.com
set-cookie: bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbiKbS0JOgDBJ024KKrv64oFPcaAEJtqw4pYstskYf%2BskXHam08v0OxZAS1X1ereuyn%2BIyKI%2BUkr%2BK5LxvJ5A9bPGqXemuNFmQncirxn8YHN8vTcTuacKZDXeqJYhcczcwVyo4Jlzw%2FW9RSUTxUC6LZcYUGbgG3cmhz5UWnr23rhw%3D; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:24:01 GMT; Secure; HTTPOnly; SameSite=None
strict-transport-security: max-age=2592000; includeSubDomains
x-content-options: nosniff
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 12h8W0tflbZcfI2Vv84DdDn9GluClnIHAIFq4N_Ew8NKv77cjHl27g==
X-Firefox-Spdy: h2
|
|
| services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US | 52.85.243.108 | | 82 B |
URL services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US IP52.85.243.108:0
Hash4f822d39c269d2c47e3174b6c6bad3b7 d56bd07959c766e9c18faa9cf1070548f9236b65 cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3
GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US HTTP/1.1
Host: services.addons.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 82
server: openresty
date: Fri, 26 Apr 2024 18:24:08 GMT
allow: GET, HEAD, OPTIONS
x-amo-request-id: 8e7668000fa943e89d2dacaed90a37d6
content-security-policy: connect-src 'self' https://*.google-analytics.com; default-src 'none'; object-src 'none'; media-src https://videos.cdn.mozilla.net; form-action 'self'; style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; script-src https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; frame-src https://www.recaptcha.net/recaptcha/; child-src https://www.recaptcha.net/recaptcha/; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/; font-src 'self' https://addons.mozilla.org/static-server/; report-uri /__cspreport__
x-frame-options: DENY
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: max-age=3600
public-key-pins: max-age=5184000; includeSubDomains; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="
via: 1.1 google, 1.1 210fa10efb175d891774d170436663b0.cloudfront.net (CloudFront)
etag: "4f822d39c269d2c47e3174b6c6bad3b7"
vary: origin,X-Country-Code,Accept-Language
x-cache: Hit from cloudfront
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 2vv2QBlVAdyzthR-3cvCUx8mTI8ryacQ6322Ii-t6mk03rhhImQZWg==
age: 12
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 42 B |
URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text Hashf8f24fa0c857d8f2ee493e131b85ab62 cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6 e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 18:24:20 GMT
content-type: text/xml; charset=utf-8
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/searchresults_cloudfront_sd/2d45556ba0b719059bb5b9d540a9c0a9d67768b6.js | 143.204.55.102 | 200 OK | 200 kB |
URL GET HTTP/2cf.bstatic.com/static/js/searchresults_cloudfront_sd/2d45556ba0b719059bb5b9d540a9c0a9d67768b6.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Size200 kB (200126 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/searchresults_cloudfront_sd/2d45556ba0b719059bb5b9d540a9c0a9d67768b6.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 19 Apr 2024 09:08:15 GMT
last-modified: Fri, 19 Apr 2024 08:49:11 GMT
etag: W/"66223007-30dbe"
expires: Sun, 19 May 2024 09:08:15 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: e07Ek1-Wop8kH7sAQcbOp5PpGALichIK9TCz5ZdJSmaqrOq7qMVnLw==
age: 638141
X-Firefox-Spdy: h2
|
|
| www.booking.com/js_tracking?ver=2&lang=en-us&sid=1f98284b2f440f1beb4210dd000dd6fe&stype=1&ref_action=index&aid=2391722&pid=6a8e815c724901eb&ete=&etg=cookie_consent_declined_policy_banner&etcg=&ets=&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZw-HqomS2cQuuJH039lXS-axFHjBRRKyRqe0fGss5Yx2eUU2_G62-p9owosjKhTMMiFbsgbXGf8CtLnmJnILrMiI1bJ1K5o3mGfoktX1QqyOVDyKAWzX-ys6DZeHQy6qOTY8Jc-UDSzjUNfU-5pxXbMInoINj_rcO8RgK_2D8CA28qbHfzdrkHH0rdKytiXWT2lXOlpiY3lLu6FFaheziJXBLq86njAG16ZEoWXWQJTz52hMvbGTTa037An4QVHfabK2G95S6co96xwwCWWa2w | 143.204.55.27 | 200 OK | 0 B |
URL GET HTTP/2www.booking.com/js_tracking?ver=2&lang=en-us&sid=1f98284b2f440f1beb4210dd000dd6fe&stype=1&ref_action=index&aid=2391722&pid=6a8e815c724901eb&ete=&etg=cookie_consent_declined_policy_banner&etcg=&ets=&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZw-HqomS2cQuuJH039lXS-axFHjBRRKyRqe0fGss5Yx2eUU2_G62-p9owosjKhTMMiFbsgbXGf8CtLnmJnILrMiI1bJ1K5o3mGfoktX1QqyOVDyKAWzX-ys6DZeHQy6qOTY8Jc-UDSzjUNfU-5pxXbMInoINj_rcO8RgK_2D8CA28qbHfzdrkHH0rdKytiXWT2lXOlpiY3lLu6FFaheziJXBLq86njAG16ZEoWXWQJTz52hMvbGTTa037An4QVHfabK2G95S6co96xwwCWWa2w IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js_tracking?ver=2&lang=en-us&sid=1f98284b2f440f1beb4210dd000dd6fe&stype=1&ref_action=index&aid=2391722&pid=6a8e815c724901eb&ete=&etg=cookie_consent_declined_policy_banner&etcg=&ets=&etgwv=&m=UmFuZG9tSVYkc2RlIyh9YZw-HqomS2cQuuJH039lXS-axFHjBRRKyRqe0fGss5Yx2eUU2_G62-p9owosjKhTMMiFbsgbXGf8CtLnmJnILrMiI1bJ1K5o3mGfoktX1QqyOVDyKAWzX-ys6DZeHQy6qOTY8Jc-UDSzjUNfU-5pxXbMInoINj_rcO8RgK_2D8CA28qbHfzdrkHH0rdKytiXWT2lXOlpiY3lLu6FFaheziJXBLq86njAG16ZEoWXWQJTz52hMvbGTTa037An4QVHfabK2G95S6co96xwwCWWa2w HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
X-Booking-AID: 2391722
X-Booking-CSRF: eSksZgAAAAA=eSj9daPbIVj0H6aWmp0pEL4CGQLakVvQ7vn1ApoTj5AoI18mbG0JA4bNcasyWlVQla3X708ycDJh4oPSVmQm9fR2Rs-8rrmA9UzvpFrpNKHnAm8ZRe4xJ4mTRxWujm5G8BB-DZDKrjLVICC1CbKM4Q5ixzBMsh19FsUrz-aV_E2RVJ9LFgJXlho8aU0weaQeGONZtODBmTuBcGe0
X-Booking-Info: 1865390,1932080,1932100,1932110,1939730,1943090,1946400,1958000,1959390,1960640,1969470,1969990,1970010,1970670,cCHObTULHfAFFQZcfHSdFaLbFFRURURHe|1,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,1932110|1,1970670|1,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6,dDfPWPHDDZSOBJbKYfNIfPTDWe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|1,YTTHbXeeVJWcFKJPFNJQVVEbMKXe|5,cCHObVZMYCMKdFEVJTNIKdFHaO|1,cCHObVZMYCMKdFEVJTNIKdFHaO|3,NAFLeOeJcQEcVOdWNeYZdfdbJae|1,cCHObKdBdUHINPSXeHDALOLOLMO|1,cCHObKdBdUHINPSXeHDALOLOLMO|5,cCeIVOMPWAEeIcFARSYSbZDQSXbaTaTaET|3,cCeIVOOLfOECVVDFRURURHe|1,cCeIVOOLfOECVVDFRURURHe|2,cCHOGcbREDEZRdRERJBHAOeVATZdSGWFRURURHe|1,BHDTJdReQLOLOLOVZMYCVCMILRVVPKLZZOJNET|1,dLYdCeYBFVedKNKNKPMPSXPUEKdDXFZMIbdYeNYT|1,cCHObdRdJJVdfUSCEcdNHMddKNKNKWe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|1,cCHObdRdJJVdfUJGFDSeBcZFLMFRURURHe|3,cCeIVOTeJUNSMTfIMLebaTaTaET|1,cCeIVOTeJUNSMTaSdNdKNKNKWe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|1,cCHOGAQHSMSXUDeLcffIVXBPKAFRURURHe|5,cCHOGAQPXafJCfSFeMZXZAQeRfXPRQNIKdFHaO|1,cCHObKdBZXZAVCMIQRMebfTIbRZaTaTaET|1,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|1,cCeIVOIYcYCcTUDQZaTaTaET|1,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|2,NAFLeOeJcQEcVOdWNeYZdfdbJae|4,cCHObVZMYCMKdFEVJTNIKdFHaO|4,cCHObVZMYCMKdFEVJTNIKdFHaO|6,cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|9,cCeIVOOLfOECVVDFRURURHe|3,cCeIVOdJEVOAeZTbQNPcZRALOLOLMO|2,cCeIVOTeJUNSMTfIMLebaTaTaET|2,cCeIVOTeJUNSMTaSdNdKNKNKWe|2,cCHObIKELcMWSRSPFeSICZYUNZdeLEccCcCcCC|4,cCHObCBWaEdIPPSfDcXLYSfDccCcCcCC|3
X-Booking-Client-Info: cCHObKdPHMfFdHMEKBOcaGPaAHFHDQIC|8,HWAJLGbbeLHAFPRFDEYScEUWBZEWaSddKNKNKWe|2,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|1,cCGaYSddOEGcHNAEQfKCePBeZTPSeUFRURURHe|6
X-Booking-Label: 4Sx1zVc8vr8B
X-Booking-Language-Code: en-us
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-Session-Id: 1f98284b2f440f1beb4210dd000dd6fe
X-Booking-SiteType-Id: 1
X-Partner-Channel-Id: 2
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbof7CEiNviT%2FmHzmabJf1Qd91i%2FFu8ICnQb8b0S04wcqlAReCWk%2FKNIlJIv42uo546SAhhx%2FzbhZnyM7bCi0TCAd1R1QZvZCvm4T3ImJF5%2BEynJAohvV6F2ei1RLthf%2F3W%2B33pLgQp%2Bj4jKOK%2F928WB%2BE29qhsYNNurMUk4kc4Gg%3D; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A57+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=1&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&intType=2; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D; OptanonAlertBoxClosed=2024-04-26T18:23:57.170Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
server: nginx
date: Fri, 26 Apr 2024 18:23:57 GMT
vary: Accept-Encoding, User-Agent
content-encoding: br
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=831d815e26c3006a&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejKjS5cNYd-Zce0gWBMjzU3jcOEaOxAJovI
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wGKOHKiF9GlA1B_9D08mahvIphWAVoYjnFYQWQK6q8vnSouABIncbg==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.js | 143.204.55.102 | 200 OK | 50 kB |
URL GET HTTP/2cf.bstatic.com/static/js/core-deps-inlinedet_cloudfront_sd/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/core-deps-inlinedet_cloudfront_sd/9fc72199a3b8ae2b967821deb6fa10d92ce308fc.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Tue, 09 Apr 2024 09:15:59 GMT
last-modified: Tue, 09 Apr 2024 08:42:28 GMT
etag: W/"6614ff74-c4cb"
expires: Thu, 09 May 2024 09:15:59 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Vhe6xtnm7ebZLmf1f4sy4fd4rN3fZA6PE0mF5v81nSisSBwvAVWY4A==
age: 1501675
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/782ad794.7da921a0.chunk.css | 143.204.55.102 | 200 OK | 1.7 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/782ad794.7da921a0.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (1714), with no line terminators Hashba4c99b275e4e97d0e1f0b3128b1322d 8b1f50cc1224ed6af104502a6b568b4d86dfc16a 42f3a29f50538d388356e7285918a7993168ce8036d71e2a4b815898b81e64bc
GET /psb/capla/static/css/782ad794.7da921a0.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Thu, 25 Apr 2024 20:23:46 GMT
last-modified: Thu, 25 Apr 2024 16:25:56 GMT
etag: W/"81671a96ccb9837256c56dc79f226880"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: AbVV4.B4zQCMIbVHPAiDwsfXcrAQsnNf
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: n-wP3_nZetdMj4qoNfnqROZ5HJQxTnhBfpQ13FDl17qKsHjgKIyoJQ==
age: 79209
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/6758081d.ab2a4c1c.chunk.js | 143.204.55.102 | 200 OK | 1.5 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/6758081d.ab2a4c1c.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1554), with no line terminators Hashe9af4c0eba6de90521f53aecaf1308e2 9f34260f3f88f9ec3c8b2d25abc014f542fe8fef fcccbcbde03dd0adec9117620201257dc3f07baad91d654f455040bb6f042071
GET /psb/capla/static/js/6758081d.ab2a4c1c.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:50 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: ODSnnIlzFlDZeQuug3S_wPNBuAuAeZgo
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"e9dc307f20d8d6f88a02a01a0616effb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JAeToeVRLVZjmz-Wj9UqUMnCAOy6YYHbuXKGas_Lbdw6vyeHpyUDWw==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/51ee1383.0a9823ae.chunk.js | 143.204.55.102 | 200 OK | 26 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/51ee1383.0a9823ae.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (26081) Hash644efd3b861e22dab88710ad1f1e6bae e0f784c9be27669ac15f56d6d07e0f0b495bea9f 163ea3e3317b93b6751ac0221532febc93371bf729405e583e9912d5b89533f6
GET /psb/capla/static/js/51ee1383.0a9823ae.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 09:16:52 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 42327NLMoN9vpMJiGVub6OFF60toq.jI
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 15:42:42 GMT
etag: W/"644efd3b861e22dab88710ad1f1e6bae"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GaL2fsNYDcOJwhORJvcqoe3yAC9cDeYY8O8H6g7RaQ7HzK14tK-fdQ==
age: 9674
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040546.jpg?k=7a1af0e15b711550bc7dafc895e0598250e62b0ec8a031da642a74168bae1f39&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040546.jpg?k=7a1af0e15b711550bc7dafc895e0598250e62b0ec8a031da642a74168bae1f39&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash9cf8cf715413e764c0763cc59b5a18d1 f5d54a210fbd49b4312dedf0897ab950c6405dc6 945fa2cae5838afe735163618ce2c80b9411f0f9d8a42c198a25247bcf7c95e6
GET /xdata/images/xphoto/300x240/140040546.jpg?k=7a1af0e15b711550bc7dafc895e0598250e62b0ec8a031da642a74168bae1f39&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-language: 15567
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 13 Apr 2024 08:21:04 GMT
cache-control: max-age=2592000
etag: "cc9e4444d49941bb56895e32716333efa2ce6345"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yAVoOBnWoqCBvb2AWw5idOUyRku0FYX-M9O4CP7zpaSNdjzxbYNmtw==
age: 1159373
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/95a17449.3bb6a475.chunk.js | 143.204.55.102 | 200 OK | 46 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/95a17449.3bb6a475.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (45492) Hashe6b40092fc8ea951f82df99b1fd89d49 006f046640a6b6c54647a119694a1224783201c7 000ec2bda8a35dacfe13f376835003a2a07a4960876b4f461a2cee021d9e42ad
GET /psb/capla/static/js/95a17449.3bb6a475.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 25 Apr 2024 20:24:19 GMT
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
etag: W/"e6b40092fc8ea951f82df99b1fd89d49"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 7RgiREaCQBE3VUvydajhPXMaVdbEaOor
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LQ4L7IM13ghUzK4659Jdm4h8vHUVPpfXfeqUvEIJ8JEh3Y5eiy52fQ==
age: 79176
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingExtraBold.woff | 143.204.55.102 | 200 OK | 41 kB |
URL GET HTTP/2t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingExtraBold.woff IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 40640, version 2.0 Hash44bb644882b70aa9444e491e812d4a4b 65f9d0215301cecc36b1433e562b131f7d26ad24 96962b05c04ea77d8261a870a4cda2784fa137ec63350587eb46b75f40d126c2
GET /design-assets/assets/v3.81.0/fonts-brand/BookingExtraBold.woff HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 40640
last-modified: Tue, 25 Jul 2023 15:38:05 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 04:38:34 GMT
etag: "44bb644882b70aa9444e491e812d4a4b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Sk-DTKVM3mmP5CtKsaEBNvtgrKcFQuGgwxoaskVwJqJiLdYztvWXUQ==
age: 49522
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= | 143.204.55.112 | 200 OK | 17 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashe08092b0569f8ee045e4bd45c1618f76 3c285568b967e02f24eb46c58f0d3eae278c58d7 bdc6ee8e1157c8084492b5735aedad96796d7aabd9b2f80949d5e747d652028d
GET /xdata/images/xphoto/263x210/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 15 Apr 2024 14:56:01 GMT
content-language: 16930
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "ea2244f5ef79860569b05cd1f307c3bc50c73ced"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NX-tczhIq4KO8tXqWkYknr9ZI1m0v2Ja19B7wXC4H-lg5WNFyR_Krg==
age: 962876
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/64768746.webp?k=0c33d15be1f0c9ebd0ede9b85565c3233ef836884a40d785dd6b36f9f0f50c04&o= | 143.204.55.102 | 200 OK | 38 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/64768746.webp?k=0c33d15be1f0c9ebd0ede9b85565c3233ef836884a40d785dd6b36f9f0f50c04&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash74d9ca68e4eb5c9610521e678adae662 e236f53ee588a09a1d33e4b493cba606c4edf270 c6cec7eadab66e64972babc93970b25a251c2b2a8b26a7da51fe86538c67f23a
GET /xdata/images/hotel/square600/64768746.webp?k=0c33d15be1f0c9ebd0ede9b85565c3233ef836884a40d785dd6b36f9f0f50c04&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Fri, 12 Apr 2024 08:37:22 GMT
etag: "761333a206a4ee59fbe49551fc473c1ab0f5b68b"
content-language: 38138
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UcQb3OdQzD8GYySCDqRX-X-ECTPSgJqO-KcOT_WTTNsZSvUo18slwQ==
age: 1244796
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= | 143.204.55.112 | 200 OK | 10 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash5f58a2eeb3f0b1d3ce899e3c629368a5 3dbabbe322b0ec1cfaf64acfde88d5ed67b674b1 fa9f5dbe5ad251eb1a7da4628c3d1cc55c9ff380671a9d7d2b070bf4e2c2324e
GET /xdata/images/xphoto/263x210/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 07 Apr 2024 20:29:16 GMT
etag: "581d7d6f2cc7c0efc5bd54aa0a1fa4c3bdb259f4"
content-language: 10257
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uTd-ovtiXqDQTfXDboMjlwD4LCMfo7bwwgMfWNyXgUY73ZrE4cQklg==
age: 1634081
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/3c29a897.dce7e67d.chunk.js | 143.204.55.102 | 200 OK | 30 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/3c29a897.dce7e67d.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (29500) Hash1123aa748b6d9f96d6a404f3d006bff3 d6e9b47394fb5df1f04456107160b6f42a62101c 29d205cd77a49e3a1d72686790504fb5328122126f718ae464c5b377f503e3c9
GET /psb/capla/static/js/3c29a897.dce7e67d.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 10:07:01 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: uEWYhweQ0Qe52DGfgINTppRv6PzI5VqS
server: AmazonS3
content-encoding: br
date: Fri, 26 Apr 2024 02:46:21 GMT
etag: W/"1123aa748b6d9f96d6a404f3d006bff3"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Wy8oU2v0FJwNsCmjgHzy0pprtwg4PnvHz3XjPethonUc6dXwXku72w==
age: 56255
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= | 143.204.55.112 | 200 OK | 9.0 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash8989f4f10a45dd10156c3eb7fb1b078b f8fbe15b7a89638a421f23164e1b3c283b0d888a 89b6890e5d14cdc0d9470023b09144793e2b6f769f7e8f05f0393a4227e002c5
GET /xdata/images/xphoto/263x210/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sat, 06 Apr 2024 11:00:12 GMT
content-language: 8996
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "2a7fd6242a5eea5697aaeb5e0c88798f848bd51d"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XPje5zLdvM6c3w2DpDRLSqKqU4Uuao4B8wrJYatNhsKbTiqbkTnBjA==
age: 1754625
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/153069622.webp?k=7071cdd5c1ad4e51e137ee93aca75a122fde80989011a54976b47150f0fe691a&o= | 143.204.55.102 | 200 OK | 75 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/153069622.webp?k=7071cdd5c1ad4e51e137ee93aca75a122fde80989011a54976b47150f0fe691a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash2ef597e2093037ad3cf0cc5ad9aa9783 cc595a52cd4412e29edab80e0623ae4e3965c800 18ac8e5f7a31a473fd753bb215ecb19a728da9bb57c6f5f0a29b0e58b8e5541d
GET /xdata/images/hotel/square600/153069622.webp?k=7071cdd5c1ad4e51e137ee93aca75a122fde80989011a54976b47150f0fe691a&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Fri, 05 Apr 2024 11:41:38 GMT
content-language: 75448
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "ff28c3a91a27695ad56f98a0c097795c9f5f669d"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xmzHCSaLsL6U0XSw4gOxnyChFJBJgHcELCNBdGtfe1bNu19te81KTg==
age: 1838539
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140051608.jpg?k=4eb78e68754c67426a33c4114cdcc88bb044514b740446dc03b05b26dc070292&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140051608.jpg?k=4eb78e68754c67426a33c4114cdcc88bb044514b740446dc03b05b26dc070292&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hashee689fbe6df8503ad2066311cbcb09de c947ceceaa7ca1398e4dbdfa66c0cc713ce366ef 4a4bac89a19c3fba841472a93eeb4e3bc5b8f61fc5a7da6a0eca7e0bd0591a67
GET /xdata/images/xphoto/300x240/140051608.jpg?k=4eb78e68754c67426a33c4114cdcc88bb044514b740446dc03b05b26dc070292&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 17 Apr 2024 11:06:00 GMT
content-language: 15996
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "a6187e46f7c39ca66146950ace5bd571c9e8dcad"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Bysu6o3Zgd9ysOHcC0aC0EC-I6gdhvGHf8lEHmEyQWObiecZj9GykA==
age: 803877
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/landingpage_cloudfront_sd/4417f0cf113c3ec51a8190be88e7c373a6d9295d.js | 143.204.55.102 | 200 OK | 350 kB |
URL GET HTTP/2cf.bstatic.com/static/js/landingpage_cloudfront_sd/4417f0cf113c3ec51a8190be88e7c373a6d9295d.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (51645) Size350 kB (350307 bytes) Hash261cd9524de1941c0adbbc5ab40e071f b1d444cb7950cdaba1a586656133d83230716535 90217691ef650ad862929297ef8a897d5fed3d2a44b042274c20b0529907e375
GET /static/js/landingpage_cloudfront_sd/4417f0cf113c3ec51a8190be88e7c373a6d9295d.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 20 Apr 2024 09:45:23 GMT
last-modified: Wed, 20 Sep 2023 10:48:00 GMT
expires: Mon, 20 May 2024 09:45:23 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"650acde0-55863"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w0Ttpw_pUsB8J7LWUQfXFon36zpw_UlriFFOjZkUwGF2XD-cT2xteA==
age: 549511
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/156801685.webp?k=02499ffda30e83b23ddf0ddf20ce0e98c9869385064e2ac53ccc8681afb6cfa7&o= | 143.204.55.102 | 200 OK | 98 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/156801685.webp?k=02499ffda30e83b23ddf0ddf20ce0e98c9869385064e2ac53ccc8681afb6cfa7&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash5fd068365c11a07a14d880822793f886 85e1ad8acdba39f0796de77f1f68aec4ac3e54ef e5fa9eb3db4d76642c7805ba4171136db4525ec7d57e9c408213e4473f906ba2
GET /xdata/images/hotel/square600/156801685.webp?k=02499ffda30e83b23ddf0ddf20ce0e98c9869385064e2ac53ccc8681afb6cfa7&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Fri, 05 Apr 2024 11:41:38 GMT
content-language: 97820
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "662428788346d30d5ec29cf3fb93333841edee63"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7KjSQXryzyQZ4AsyHvBAeIFTkBIwFMXeOabKI4GhCKkxpj-wA39H1g==
age: 1838539
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/log?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&event=onetap.policy.defaultPosition | 74.125.131.84 | 200 OK | 0 B |
URL POST HTTP/3accounts.google.com/gsi/log?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&event=onetap.policy.defaultPosition IP74.125.131.84:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gsi/log?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&event=onetap.policy.defaultPosition HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 0
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 18:23:58 GMT
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-security-policy: script-src 'nonce-PvcOO9s_gZ6WCEbaiN497w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| accounts.google.com/gsi/status?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&has_opted_out_fedcm=false | 74.125.131.84 | 200 OK | 40 B |
URL GET HTTP/3accounts.google.com/gsi/status?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&has_opted_out_fedcm=false IP74.125.131.84:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeASCII text, with no line terminators Hash55cfb55ff1b39499449ede50d83dcc5e 7f23ecaf45633ccc021699fa8c7170b7cced96ec 27a1bdf0204e2e0bc01c828a4fc190ad3fb8245d51760e2858b553fca49630b0
GET /gsi/status?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&has_opted_out_fedcm=false HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
access-control-allow-origin: https://www.booking.com
access-control-allow-credentials: true
access-control-allow-methods: GET
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 18:23:58 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
content-security-policy: script-src 'nonce-lxPlg78Ev140ONovFFia3A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= | 143.204.55.112 | 200 OK | 0 B |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xdata/images/xphoto/263x210/45450066.jpeg?k=4adfab312f5d26da9f81da48d8c95ca8f108215b2c84085590891a9e0e17b144&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 15 Apr 2024 14:56:01 GMT
content-language: 16930
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "ea2244f5ef79860569b05cd1f307c3bc50c73ced"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mrgUTH6lHe4Krma8MhpveRhvanGOYG_Jes4RePDH77JtGRRRUO_3AA==
age: 962876
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450093.jpeg?k=aa5cc7703f3866af8ffd6de346c21161804a26c3d0a508d3999c11c337506ae1&o= | 143.204.55.102 | 200 OK | 10 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450093.jpeg?k=aa5cc7703f3866af8ffd6de346c21161804a26c3d0a508d3999c11c337506ae1&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashcd3eaf6aea022228c168936fc9ba55d3 8df607a7c2ab95a99e253eb96a6e57fdc7ecc430 0bec321e1240ad08ea08ce06e335e0436ff05d3590f10a467dab4112649d6f18
GET /xdata/images/xphoto/263x210/45450093.jpeg?k=aa5cc7703f3866af8ffd6de346c21161804a26c3d0a508d3999c11c337506ae1&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 10434
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "bc90e8a63896c558548037ab9e0dad7d0ee94fca"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dUXhRm9z-LRcgh2O-YL89GC2t2Lgavrcd5VaUweO0xhAA4XY6addRQ==
age: 2170369
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/style | 74.125.131.84 | 200 OK | 530 B |
URL GET HTTP/3accounts.google.com/gsi/style IP74.125.131.84:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeASCII text, with very long lines (530), with no line terminators Hash6ce3c682ce6b9e0b88670395a63345c8 8cbfc0856a52320e3567792dfe2487748ac07458 524f1ea2ac242c6fae3c1cc52c7ae7d05a8a7db466fe3c7b46e8efcfc2d95e53
GET /gsi/style HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
expires: Fri, 26 Apr 2024 18:23:58 GMT
date: Fri, 26 Apr 2024 18:23:58 GMT
cache-control: private, max-age=86400
content-security-policy: script-src 'nonce-233GOR0gqj_TDA3R05QzBA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cf.bstatic.com/psb/capla/static/css/282e5b08.419910e5.chunk.css | 143.204.55.102 | 200 OK | 3.6 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/282e5b08.419910e5.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3569), with no line terminators Hash00de97f0a65eb2db67caa5320143a716 85d63c71b234db3d5450bace576fe889bdb35bb3 3f84d77675924e91a80e957bda50535ecceb0c98ac874b10503485732363dda3
GET /psb/capla/static/css/282e5b08.419910e5.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: PYq6lu4iapPVLUXzg1RNqCAqcQjPVb9b
server: AmazonS3
content-encoding: br
date: Fri, 26 Apr 2024 03:25:20 GMT
etag: W/"351c7f353857d3e7ab7b622fbf33baa1"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dC-ZMgZ4R-lh1G8ODWtVV8J-VFoFQEXrBc3fDuuPyg65uAyTRpoRiA==
age: 53915
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png | 143.204.55.102 | 200 OK | 73 B |
URL GET HTTP/2cf.bstatic.com/static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 1 x 100, 8-bit/color RGB, non-interlaced Hashff823944bc0bb9e4bf87f0ad14f687d1 4b68ba281b9ab171611569bf78971df6970efbc1 6153929734ec12ec07072f327c1112301828497e4dd356ca261461b0b7ba9621
GET /static/img/nobg_all_blue_iq/b700d9e3067c1186a3364012df4fe1c48ae6da44.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 73
server: nginx
date: Thu, 28 Mar 2024 14:41:56 GMT
last-modified: Wed, 10 Apr 2019 11:21:55 GMT
expires: Sat, 27 Apr 2024 14:41:56 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "5cadd1d3-49"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8F--6S6Nu6CowipVxUQoYHXtxgAm8w0gKlr6T2c34Vtz1801gt5oiA==
age: 2518919
X-Firefox-Spdy: h2
|
|
| t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff | 143.204.55.102 | 200 OK | 40 kB |
URL GET HTTP/2t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 40120, version 2.0 Hashf2953af89807609f49b87237180bb450 bcef01e9e586a9a6c567602272c1a7955b77b0ca b02a3f6dfeb4ebf05d30eaecc8473664f1720190639cbfe43b2a7f9a00246e56
GET /design-assets/assets/v3.81.0/fonts-brand/BookingRegular.woff HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 40120
date: Fri, 26 Apr 2024 01:51:09 GMT
last-modified: Tue, 25 Jul 2023 15:38:06 GMT
etag: "f2953af89807609f49b87237180bb450"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XD3mhImciVI-fXhbtxyJhv-w9F4goVuOHte3fmwWcaxtdX7Xnz9VHA==
age: 59567
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| account.booking.com/privacy-consents | 54.230.111.55 | 200 OK | 53 B |
URL POST HTTP/2account.booking.com/privacy-consents IP54.230.111.55:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash13b7fd9f3e6cee0cf614e31f0ff703db 18e1aea077d514dd7435a31b64614555df0aff24 cb5e115ed3cc6b5c032e5b50da6ba832f55d2b39f93c894651cac92afb1f4053
POST /privacy-consents HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
Content-type: application/json;charset=UTF-8
Content-Length: 141
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbbmD9q%2B5pe3WVYPieNoQmDfZ3fnCaw4H2sCDp2TA1uubEwXkD6mFfkhjMpPid%2Bc6N2WeJSqqlI5oh50RlO3X3h3gJ0aAzh%2FmdzbiaEt7GSI03kFZ3JE%2FV%2F3y74ktYb3mziaG310w3jUH5u75jdVZD7acgzOvgxmPy0ID3Rp%2FerqE%3D; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI0NDU4MGFiNS04Y2MxLTQ0ZGItOWU4Yy04NjhmMmUxYTgyMDYiLCJzZXNzaW9ucyI6W119fQ; bkng_sso_session=e30; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
server: envoy
date: Fri, 26 Apr 2024 18:23:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
content-security-policy: base-uri 'none'; frame-ancestors https://*.booking.com https://*.booking.cn; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=block&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZHPTonodp_KimHZLP-kkm31nZp_X7YOBY8eZvESoASNrh4UcNpkYSU_z7qIq7WPrQ; script-src 'report-sample' 'nonce-vWzT7HNX7sFPmnW' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'sha256-kDPclFJFa/cNUGjyb73Olq+78jkIsu1rN4zPFoE3YaY=' 'sha256-tgo/x/FZ7h93dD78jEbhg4dXrRyROp1eZvekoHdStrw=' 'self' 'unsafe-inline' *.bstatic.com *.static.booking.cn bstatic.com cdn.cookielaw.org geolocation.onetrust.com saa.booking.com www.google-analytics.com
content-security-policy-report-only: connect-src 'self' *.perimeterx.net *.px-cdn.net *.px-client.net *.px-cloud.net *.pxchk.net *.token.awswaf.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com saa.booking.com secure.booking.com www.google-analytics.com; default-src 'self' *.bstatic.com bstatic.com; frame-src *.booking.com *.bstatic.com bstatic.com paymentcomponent.booking.com secure.booking.com www.booking.com; img-src 'self' data: *.bstatic.com *.perimeterx.net *.px-cloud.net *.static.booking.cn account.booking.com bstatic.com cdn.cookielaw.org graph.facebook.com stats.g.doubleclick.net www.booking.com www.google-analytics.com www.google.com www.gstatic.com; report-uri https://nellie.booking.com/csp-report-uri?type=report&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZHPTonodp_KimHZLP-kkm31nZp_X7YOBY8eZvESoASNrh4UcNpkYSU_z7qIq7WPrQ; script-src 'report-sample' 'nonce-vWzT7HNX7sFPmnW' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'sha256-kDPclFJFa/cNUGjyb73Olq+78jkIsu1rN4zPFoE3YaY=' 'sha256-tgo/x/FZ7h93dD78jEbhg4dXrRyROp1eZvekoHdStrw=' 'self' 'unsafe-inline' *.bstatic.com *.static.booking.cn bstatic.com cdn.cookielaw.org geolocation.onetrust.com saa.booking.com www.google-analytics.com; style-src 'self' 'unsafe-inline' *.bstatic.com *.static.booking.cn bstatic.com
set-cookie: bkng_expired_hint=; domain=.booking.com; path=/; expires=Thu, 25-Apr-2024 18:23:57 GMT; secure; HttpOnly
bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6ImJSQWVIZUZxZzExZXBsSkh1YzBJNld6eUZ0U2oxazJrbEwwWUdWMVcwT0UiLCJhIjoxfV19; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJkYXRhX3N1YmplY3RfaWQiOiI0NDU4MGFiNS04Y2MxLTQ0ZGItOWU4Yy04NjhmMmUxYTgyMDYiLCJzZXNzaW9ucyI6W3sicmVmcmVzaF90b2tlbiI6IkNBRVNkMUoxUE11S1BtOWc1ZlFockY4dk4zTi0xZU5DQTlfUXU3ZnMyQXVvd2xialFHYVNDX2oxU1JXbkNyMTVwZDRwYkxHMVZxMDc2STAxLUxKWU1zSlpBcXE5cFgwNEdkOTFrSEM3T2VjOEFYS29hVUJ0RlhiWHlMZy1HalZFUG5UY1FXVWZzYnZBaU5WU1hzY1NBMXBYTzdzeS12TGgzc21uIiwic2Vzc2lvbl9yZWZlcmVuY2UiOiIxNGI2MzVmMC1lNzVkLTRlZmItODM1NC1iYmEwN2JlNjIyMGYifV19fQ; domain=account.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; SameSite=Lax; secure; HttpOnly
bkng_sso_session=e30; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; secure; HttpOnly
pcm_consent=consentedAt%3D2024-04-26T18%3A23%3A57.593Z%26countryCode%3DNO%26expiresAt%3D2024-10-23T18%3A23%3A57.593Z%26implicit%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr%26consentId%3D54894813-b88e-4c4f-96d1-aa019443e21f%26analytical%3Dfalse%26marketing%3Dfalse; Domain=.booking.com; Path=/; Expires=Sat, 26 Apr 2025 18:23:57 GMT; HttpOnly; Secure; SameSite=Lax
bkng_sso_auth=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; Domain=.booking.com; Path=/; Expires=Sun, 26 Apr 2026 18:23:57 GMT; HttpOnly; Secure; SameSite=Lax
bkng_sso_auth_1714155837=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; Domain=.booking.com; Path=/; Expires=Sun, 26 Apr 2026 18:23:57 GMT; HttpOnly; Secure; SameSite=Lax
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hh3Dq7lE0H7l2mjTw6vUoy1qpg0XuxhLFF3ibjMF8TC1j02rcZPGyg==
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= | 143.204.55.112 | 200 OK | 0 B |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xdata/images/xphoto/263x210/45450073.jpeg?k=795a94c30433de1858ea52375e8190a962b302376be2e68aa08be345d936557d&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sat, 06 Apr 2024 11:00:12 GMT
content-language: 8996
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "2a7fd6242a5eea5697aaeb5e0c88798f848bd51d"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 78BsFGDxq5SZIuKehKya3MyYdfAi4Tp0Ww5bDYGjhAQpqMFTSZ1nqg==
age: 1754625
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/524735433.webp?k=f5052d0ea566c3f4c753ac58d86e009605b56dace36537207739c60f5220a785&o= | 143.204.55.102 | 200 OK | 84 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/524735433.webp?k=f5052d0ea566c3f4c753ac58d86e009605b56dace36537207739c60f5220a785&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash41debb8d86045fc48c8a93a1afa678ec 820de4a39e5e6cc8a5f523a74c8d49c8f1ad7e00 bac29a9f0e0c3267017be35813fb95368f780204fa7cb4d5024d33451bae59e0
GET /xdata/images/hotel/square600/524735433.webp?k=f5052d0ea566c3f4c753ac58d86e009605b56dace36537207739c60f5220a785&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sun, 31 Mar 2024 11:06:56 GMT
content-language: 84136
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "8b345c16be9f96f7d932e5bbe3bbb5fe4d6f9ed8"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aEjQGS720qxNO-48ilcQaJnI97rtgbK7FTMuQkKrlJryqL94F4iTBw==
age: 2272621
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/ebf8c3e3.dbc139b2.chunk.css | 143.204.55.102 | 200 OK | 1.2 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/ebf8c3e3.dbc139b2.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (1254), with no line terminators Hashcaa316ce4b569933cf84192c3d42ee22 b6e694f806e1df295fd59063a9f4e891239a1a4b 38bdd16d25065b607898bc235ccec97993826ac6495d3d99403c4384118ce1c4
GET /psb/capla/static/css/ebf8c3e3.dbc139b2.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Thu, 25 Apr 2024 20:24:19 GMT
last-modified: Thu, 25 Apr 2024 15:01:28 GMT
etag: W/"8864e2eafc17ea8328c2991d104d5839"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: rTBRS2q7Gxb3nMEaGdZpr16yFiTHk1AO
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FrhiDbhYT6TYFRIzv-ubsg5CMwzwUW_VFHHxi4vOzStn1zCFIOJ3iQ==
age: 79176
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/genius_vip_cloudfront_sd/aae975495cc56436f4f59463b9ea4e594bdb102a.js | 143.204.55.102 | 200 OK | 3.4 kB |
URL GET HTTP/2cf.bstatic.com/static/js/genius_vip_cloudfront_sd/aae975495cc56436f4f59463b9ea4e594bdb102a.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3590), with no line terminators Hashb25b78915f27efe38c7124529f289703 a86abb1566b57bf2ff44892a863a710d27858a21 b9485b47a16c343fb4ef11e02dbe56d724a156b5daff01bfa056ddd1f291ee20
GET /static/js/genius_vip_cloudfront_sd/aae975495cc56436f4f59463b9ea4e594bdb102a.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 13 Apr 2024 01:07:29 GMT
last-modified: Wed, 01 Nov 2023 08:40:16 GMT
etag: W/"65420ef0-d78"
expires: Mon, 13 May 2024 01:07:29 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MZHIIGv-0FTkkr-2yly1SP2E-EHL6ZongOV4HQSwz5BPMZvSZ1DBgA==
age: 1185385
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202403.2.0/otBannerSdk.js | 104.19.177.52 | 200 OK | 458 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202403.2.0/otBannerSdk.js IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size458 kB (457695 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripttemplates/202403.2.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:56 GMT
content-type: application/javascript
content-length: 110887
content-encoding: gzip
content-md5: NaqcG2ILVJmSrG/q1ZpJ7w==
last-modified: Mon, 22 Apr 2024 06:06:18 GMT
etag: 0x8DC62925356D668
x-ms-request-id: c839b996-c01e-001f-188e-948a87000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 70673
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a89b582d18569f-OSL
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= | 143.204.55.102 | 200 OK | 12 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash2a361664cb305310a4358bcfd299217b 319d5dbe2e9a02af52292e2c94467fbd4bd954ef 772bb85697eb54a5a021864874190a475188ce98c1a8840bb1fe72515dbbcdd8
GET /xdata/images/xphoto/263x210/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:22:09 GMT
content-language: 11795
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "78c06c289b99410d719289fe5882090079338c7f"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1Vaodd_W6Ky6Qqj7og0TYzvblDZzWtvGVHDwynu4cwUq9znAls6j7w==
age: 194508
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/18cad957.25886bdc.chunk.css | 143.204.55.102 | 200 OK | 374 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/18cad957.25886bdc.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (375), with no line terminators Hash1d5b7e4293a0330cdda97a799012895f 7b1d7cd4d1cda47df03341f90903e736764189b7 1f5190587cc8f66acce037188d95897e39a7ad41876a3ea5cb0cf631b8d947b5
GET /psb/capla/static/css/18cad957.25886bdc.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 374
date: Fri, 26 Apr 2024 00:04:44 GMT
last-modified: Thu, 25 Apr 2024 15:01:12 GMT
etag: "cbbfc6e25cbe00c996ec7a05ba299022"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: YEgdt050Ln9CTW2WZqG9KPMkzST2WMrQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: o_h5G57s1RjpFgXxAnmjPpGzOAWLeAaqvymqTmNf8lCQNPmu4jP1PQ==
age: 65951
vary: Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb21a2cc89.js | 143.204.55.102 | 200 OK | 37 kB |
URL GET HTTP/2cf.bstatic.com/static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb21a2cc89.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (36716), with no line terminators Hash83450205fdae53d35568c0b20ebd7823 b767e5626f5c78a36e8267adce0eb4770cc7af54 0916f90ffe5b1eb07948b9f85568c812d3ccbb8a05d3b39d10f4d59fcc9e168d
GET /static/js/searchresults_slick_cloudfront_sd/528359eb9f21194adf8c26f81e07c6eb21a2cc89.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 06 Apr 2024 19:51:28 GMT
last-modified: Tue, 04 Feb 2020 10:19:58 GMT
etag: W/"5e39454e-8f6c"
expires: Mon, 06 May 2024 19:51:28 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S6P7bSEfRNt4mPkby-0aGH4ApghZxsM6DxdC5SuP_h2zVeZVb_5-5Q==
age: 1722748
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=51ee1383&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX | 54.230.111.39 | 200 OK | 6.6 kB |
URL GET HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=51ee1383&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (6994), with no line terminators Hash1f438fe621358167104ea95bb6a157e1 8c803e26e58ad9b7f75f553c14ec0a8ae1b18e72 3b5e652cd25a958553aade2e4f9947d46fd2c0fe9437727e2212954375a6cfdd
GET /orca/chunk-metadata?chunk=51ee1383&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
x-booking-et-serialized-state: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.booking.com
vary: Accept-Encoding
access-control-allow-credentials: true
referrer-policy: no-referrer
content-encoding: gzip
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JGN9i2cExJAoRAPAH3QxE8OfnVnwkoUo68ezOzcrgo658jBDbOp9nQ==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png | 143.204.55.102 | 200 OK | 3.3 kB |
URL GET HTTP/2cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash799af703ff428e33a7db434613c9c030 75648638d71e25179744da725db599612e6d983e 6d71962600b1166ed95cf3f5af9298da2d3cd134466350b41202eb1dd17447c8
GET /static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 3323
server: nginx
date: Fri, 29 Mar 2024 04:49:08 GMT
last-modified: Thu, 29 Jun 2023 10:02:49 GMT
etag: "649d56c9-cfb"
expires: Sun, 28 Apr 2024 04:49:08 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
accept-ranges: bytes
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sKpZFnjgrvxonqAjl9ps0EH9L8tMvTh3GaYnkX4Zj3_Jo996UauMcA==
age: 2468087
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= | 143.204.55.102 | 200 OK | 5.5 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hashafd71fd06632ac473b4c251dffc12f63 e9d7fc8cf381fa446a6c32178db4de8c5eaf7262 c9a8fd71cb76919e8b749e4b4055810bb6f6ab84f1171d06bdd70b02893c95cb
GET /xdata/images/city/170x136/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5506
server: nginx
content-language: 5506
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 28 Mar 2024 06:03:52 GMT
cache-control: max-age=2592000
etag: "f5b49c8fdf8a6456146164dfee48119609520783"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aYK5DUG8ogmK13GDYJERp0A5r94FjI4a7c_IBDiYvRWYH1uj_LNnEg==
age: 2550005
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/95a17449.6f336e06.chunk.css | 143.204.55.102 | 200 OK | 1.4 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/95a17449.6f336e06.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (1362), with no line terminators Hashba99ae6870656d7bb2c7e11dfaf72d41 e158ac37e9718340b7dc9d6b2de828a5d0962b77 ce77532d5c81e7cf0f5850400723d2c634d26aa1cb259b5426de968dcff515c5
GET /psb/capla/static/css/95a17449.6f336e06.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: SQnCZ6zCO3FiwbPPVYv4ZPsfs7o7Hv08
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"508c7b1bf6b1dec688f069d4794580a0"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Y5mom5YmgDZVwzM3fFW5eFsFK-FMWPZealMppPJQ8_x08zet9dLquw==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450097.jpeg?k=eac0f917a53dc395bd379fef8c191e7d5e37012b68e60232e4f6bba2a2901b7a&o= | 143.204.55.102 | 200 OK | 13 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450097.jpeg?k=eac0f917a53dc395bd379fef8c191e7d5e37012b68e60232e4f6bba2a2901b7a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash04512024ddb6c46c1f3ac299772afb1a ff8a0c294780539fe8f873dad046bb227a4bf4db 75db3132568d756598728736eb981bfb3c05f7337c54ad5113ce1a3c8f3791cd
GET /xdata/images/xphoto/263x210/45450097.jpeg?k=eac0f917a53dc395bd379fef8c191e7d5e37012b68e60232e4f6bba2a2901b7a&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
etag: "dc84adde45484260042e63cb655e57653dd37ff8"
content-language: 12638
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XX3Q2Hj9MkZHdG8kX2_te6udfNHtI3ElW9JrFpO6B0NxUw-_x1qCxQ==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/29466558.webp?k=7f9cf4736f69b30c20fa7a751bb8711fa195bc9ff6092d5412d52daf6cada17f&o= | 143.204.55.102 | 200 OK | 60 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/29466558.webp?k=7f9cf4736f69b30c20fa7a751bb8711fa195bc9ff6092d5412d52daf6cada17f&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash8a0e03faa23462b386bc0ca9a51b7508 012371cd9cb4fd5f010558e8ad0675be0ba955ec 424b13bd058e2f6e264a16b284ffea05e80c328d9dfb9c5a7c46484131e86452
GET /xdata/images/hotel/square600/29466558.webp?k=7f9cf4736f69b30c20fa7a751bb8711fa195bc9ff6092d5412d52daf6cada17f&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 59920
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "11977a463a83f55e9c39cf2a5da3d8a324f0d4db"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: paJNKVb4keoiFskO4m8cGbgIDS3rWLKf424VLbvUVMkwbFNoY6H0Aw==
age: 2170370
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/hotel/263x210/52979454.jpeg?k=6ac6d0afd28e4ce00a8f817cc3045039e064469a3f9a88059706c0b45adf2e7d&o= | 143.204.55.112 | 200 OK | 9.0 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/hotel/263x210/52979454.jpeg?k=6ac6d0afd28e4ce00a8f817cc3045039e064469a3f9a88059706c0b45adf2e7d&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash75b0d53918deea91a4ea3288097be7ee 1d53635cf9a9dba8f817fb350a3fe1ad7b12cd01 5298b0b9ba74933e25102c551f6db4aa703a251a85ec56ca940d589cb4c9ad45
GET /xdata/images/hotel/263x210/52979454.jpeg?k=6ac6d0afd28e4ce00a8f817cc3045039e064469a3f9a88059706c0b45adf2e7d&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sat, 06 Apr 2024 12:54:56 GMT
content-language: 8970
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "1842ab68bb857fcaf0b89118d9a34c5f6e21b909"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H8rjfka6JZrffN7JpURh2UxrVOfhm1LcKEgMQExPAbh8x8Zupvs-Nw==
age: 1747741
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/hotel/263x210/52979454.jpeg?k=6ac6d0afd28e4ce00a8f817cc3045039e064469a3f9a88059706c0b45adf2e7d&o= | 143.204.55.112 | 200 OK | 9.0 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/hotel/263x210/52979454.jpeg?k=6ac6d0afd28e4ce00a8f817cc3045039e064469a3f9a88059706c0b45adf2e7d&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash75b0d53918deea91a4ea3288097be7ee 1d53635cf9a9dba8f817fb350a3fe1ad7b12cd01 5298b0b9ba74933e25102c551f6db4aa703a251a85ec56ca940d589cb4c9ad45
GET /xdata/images/hotel/263x210/52979454.jpeg?k=6ac6d0afd28e4ce00a8f817cc3045039e064469a3f9a88059706c0b45adf2e7d&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sat, 06 Apr 2024 12:54:56 GMT
content-language: 8970
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "1842ab68bb857fcaf0b89118d9a34c5f6e21b909"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uAc6PLOslu2FstGrtXZ7OecvV0n1dI-m-HlQAiELXDDZfrTmiw9HDA==
age: 1747741
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/city/600x600/972788.jpg?k=17f14338090f7f5bbad0443f01a24aed1e17bfc4cee5c0b0c16c0cad94146f05&o= | 143.204.55.102 | 200 OK | 60 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/city/600x600/972788.jpg?k=17f14338090f7f5bbad0443f01a24aed1e17bfc4cee5c0b0c16c0cad94146f05&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, components 3 Hashf9a97a83ad1b3c40f11941ebf3fdf167 4a42c453ab4501cca180b41218fcf687869e4c36 c4549af2757e801e973af777565eb760942d1d15756965daea3d10d734353758
GET /xdata/images/city/600x600/972788.jpg?k=17f14338090f7f5bbad0443f01a24aed1e17bfc4cee5c0b0c16c0cad94146f05&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 29 Mar 2024 11:37:48 GMT
content-language: 59835
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "646d8a637ffd5d9d2623e3fd5ffc26dce5153ea2"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dqIac7WWG55fhFTApsI77FMUXNp2CxdMPSDiH-vQNAUoiWpkv_7Txw==
age: 2443567
X-Firefox-Spdy: h2
|
|
| www.booking.com/logo?ver=1&sid=1f98284b2f440f1beb4210dd000dd6fe&t=17141558331 | 143.204.55.27 | 200 OK | 12 B |
URL GET HTTP/2www.booking.com/logo?ver=1&sid=1f98284b2f440f1beb4210dd000dd6fe&t=17141558331 IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash45e0d10a08ad25f44cb9c2b6e732858c 8e47bb27521f644194d8d6ed92c22513a68715d9 4c55d6d27f3d4503e15ce98f4e4cccc15a49ecc0445a3a0996578437f7ab701f
GET /logo?ver=1&sid=1f98284b2f440f1beb4210dd000dd6fe&t=17141558331 HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1; bkng_sso_ses=e30; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
set-cookie: BJS=-; domain=booking.com; expires=Sat, 27-Apr-2024 18:23:56 GMT; Secure; HTTPOnly
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=68a5815ed63c0039&e=UmFuZG9tSVYkc2RlIyh9YbpBYTW1tHKzq3fMtSA83DpmNTsG0fm7x7AkiiFN9F9c
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PDs1jycLEweedc0AaEj1POmaI3wUW4KVvZwHEKohIe_eNxjOxN6Kwg==
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450093.jpeg?k=aa5cc7703f3866af8ffd6de346c21161804a26c3d0a508d3999c11c337506ae1&o= | 143.204.55.102 | 200 OK | 0 B |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450093.jpeg?k=aa5cc7703f3866af8ffd6de346c21161804a26c3d0a508d3999c11c337506ae1&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xdata/images/xphoto/263x210/45450093.jpeg?k=aa5cc7703f3866af8ffd6de346c21161804a26c3d0a508d3999c11c337506ae1&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 10434
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "bc90e8a63896c558548037ab9e0dad7d0ee94fca"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XL9Au5jpf7qxeHvQuPyFqz9-sdB5z14QRR31fBZooFyIn8P_tlWKIQ==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040781.jpg?k=f6efcb7d51597b0a81562b6b256b39a11c0b363a716be50451c05e7fe8be7f3a&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040781.jpg?k=f6efcb7d51597b0a81562b6b256b39a11c0b363a716be50451c05e7fe8be7f3a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash383fe55491b9ad7706023538fe5dd4ad 89ce5158e01921875de0961cffc25f7b27fa7051 861d2ab99ec88243c3ded173b361db69e560409762a6ff063b6e93452c693acf
GET /xdata/images/xphoto/300x240/140040781.jpg?k=f6efcb7d51597b0a81562b6b256b39a11c0b363a716be50451c05e7fe8be7f3a&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 19 Apr 2024 08:40:02 GMT
content-language: 15567
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "f87a1497e437dc2a8d5bea469c286b8d0626bc97"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xrn6AraiUTu2HhvwXydaCVZv0yJa0y5dd9UFWe0abHwCBQljEO0Y_A==
age: 639835
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/34405073.webp?k=fec9d1956d8581db5bb623e7e3b3f9129c2e230b21ec428b542a242347526db0&o= | 143.204.55.102 | 200 OK | 20 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/34405073.webp?k=fec9d1956d8581db5bb623e7e3b3f9129c2e230b21ec428b542a242347526db0&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashee49e7e6ff0533eee10a6d9db30ac3c0 2355d4dec9a6cb6925e49b0fd19fa97a7ee2971d 31e988f46466aebc518dbc3b1401eaaf77dcb17acf6534514f76704ce715b9d8
GET /xdata/images/hotel/square600/34405073.webp?k=fec9d1956d8581db5bb623e7e3b3f9129c2e230b21ec428b542a242347526db0&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Fri, 05 Apr 2024 11:41:38 GMT
etag: "3ddc8a8fce6c693d8dac83c4963d3b72866ee6bf"
content-language: 19596
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YqdU_2RjpKtCz_exwKMG9nQZzZd5BKxTrY1PGs1NFRIZABJdKhO10w==
age: 1838540
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js | 143.204.55.102 | 200 OK | 6.2 kB |
URL GET HTTP/2cf.bstatic.com/static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6338), with no line terminators Hashf79b8a071e08fbe1da9d22f9089f4bd4 0a0dda4e81384a2b31ca4ea70b6c57555c6b5397 05067149a82fb89b8d7adfe679b6124f2f144af83921665303a1779fa9f0e888
GET /static/js/error_catcher_bec_cloudfront_sd/0acd2ada6c74d5dec978a04ea837952bdf050cd2.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 18 Apr 2024 02:01:56 GMT
last-modified: Wed, 21 Dec 2022 14:29:30 GMT
expires: Sat, 18 May 2024 02:01:56 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"63a3184a-180b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z4ueFXQjA_cWbinI6HnPv-6c6K5VMR3cOaR1uQZE7Besozl-ITbkZw==
age: 750118
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/hotel/263x210/100235855.jpeg?k=5b6e6cff16cfd290e953768d63ee15f633b56348238a705c45759aa3a81ba82b&o= | 143.204.55.112 | 200 OK | 12 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/hotel/263x210/100235855.jpeg?k=5b6e6cff16cfd290e953768d63ee15f633b56348238a705c45759aa3a81ba82b&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash0ec8a6acafd2ff94ead2387aac012c13 697cbd26baa47a35a86eb6feab2a7d9a9720947f 48f88e754655911d3a8885792052da8dddccd607f64f7e030ffad6fb2d283a37
GET /xdata/images/hotel/263x210/100235855.jpeg?k=5b6e6cff16cfd290e953768d63ee15f633b56348238a705c45759aa3a81ba82b&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 03 Apr 2024 06:31:22 GMT
content-language: 12530
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "9aff9e5c9b69d9442b7f563196b1a2235d432b9f"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -75Fyjqp5GlcmDRnHQzlQ3UX0m91A5np9jEAQik-N1F1bgwdrf9Rxw==
age: 2029955
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/main_cloudfront_sd/73acd14028e76650a113b952ab14f34f8e373332.js | 143.204.55.102 | 200 OK | 584 kB |
URL GET HTTP/2cf.bstatic.com/static/js/main_cloudfront_sd/73acd14028e76650a113b952ab14f34f8e373332.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Size584 kB (583928 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/main_cloudfront_sd/73acd14028e76650a113b952ab14f34f8e373332.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 19 Apr 2024 09:08:13 GMT
last-modified: Fri, 19 Apr 2024 08:49:11 GMT
etag: W/"66223007-8e8f8"
expires: Sun, 19 May 2024 09:08:13 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W8C7pk7m4brRVxV6plvYgqgz-AxmLtVCXiaBzItrFde0uGFlm-B16Q==
age: 638141
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040709.jpg?k=b28a1e6744acd29c957c1993a2b3ec06b606e83174a61afc02b4ba660cd4d8fc&o= | 143.204.55.102 | 200 OK | 17 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040709.jpg?k=b28a1e6744acd29c957c1993a2b3ec06b606e83174a61afc02b4ba660cd4d8fc&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash3727e86b400f24d4ff985ce5a034c51b 4c23284e43bda0fde8acea89f869f559b0e24475 2de14162172715f457f3643eee033dca9dddbf91050f9f8eba7f9521e10a21b9
GET /xdata/images/xphoto/300x240/140040709.jpg?k=b28a1e6744acd29c957c1993a2b3ec06b606e83174a61afc02b4ba660cd4d8fc&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 19 Apr 2024 08:40:02 GMT
content-language: 16740
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "07b809dcc64ecf82240996fd68abc99098e644c6"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xWHvuZNjJKfZ_1LhP51_yrK1uJJjWiJOpqX9Td9HYA_4zNTFNQaRyA==
age: 639835
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json | 104.19.177.52 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (8350), with no line terminators Hash43a2510f8b46e3e99c9ea53e56b23573 77d5e9b985158d36c63ad5cc0a9a25f5fd30b200 d6ded5d4e7f60511639c2391f6eba3709de181109368ec2d291f0aee4d8c7045
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/3ea94870-d4b1-483a-b1d2-faf1d982bb31.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:55 GMT
content-type: application/x-javascript
content-length: 2099
cf-ray: 87a89b51aa2c569f-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 995
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC5A2192C00438
expires: Sat, 27 Apr 2024 18:23:55 GMT
last-modified: Thu, 11 Apr 2024 12:19:02 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: vvdnZW6WirMnzof2WS54RQ==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 7bdbea1b-901e-0012-420a-8c4253000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= | 143.204.55.112 | 200 OK | 10 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash5f58a2eeb3f0b1d3ce899e3c629368a5 3dbabbe322b0ec1cfaf64acfde88d5ed67b674b1 fa9f5dbe5ad251eb1a7da4628c3d1cc55c9ff380671a9d7d2b070bf4e2c2324e
GET /xdata/images/xphoto/263x210/45450084.jpeg?k=f8c2954e867a1dd4b479909c49528531dcfb676d8fbc0d60f51d7b51bb32d1d9&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 07 Apr 2024 20:29:16 GMT
etag: "581d7d6f2cc7c0efc5bd54aa0a1fa4c3bdb259f4"
content-language: 10257
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MoZ6eK98MMTFbvTQDB63Lbb8gdwIeEGDZzHWpvD8FerbCnYeqNJeQA==
age: 1634081
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/438349362.webp?k=f67f0e7e54be1c0678f18cf9ae1271c4220a487901ae0bf906fed8ba0265e38d&o= | 143.204.55.102 | 200 OK | 48 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/438349362.webp?k=f67f0e7e54be1c0678f18cf9ae1271c4220a487901ae0bf906fed8ba0265e38d&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash898fc96fa998fe265b9972c981cd78d0 50dff138df5fd61ef4dd82d2c38000215ecbb60f 7b5c29e16357049b21eb119c0af63c82f140fa88c3eaa5cd51892b84682cb732
GET /xdata/images/hotel/square600/438349362.webp?k=f67f0e7e54be1c0678f18cf9ae1271c4220a487901ae0bf906fed8ba0265e38d&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sat, 30 Mar 2024 01:02:16 GMT
etag: "edb4586ffb67709845cf88b62baca6f7d5fe8ae6"
content-language: 47648
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Fb89G2DPnmhdEpxeBkY9tFdc21e4jn2OZFK5SU9izMZYsa-R3kE4QA==
age: 2395302
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/remoteEntry.f0866eea.client.js | 143.204.55.102 | 200 OK | 20 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/remoteEntry.f0866eea.client.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19849) Hashd78c34e2dbec204465921f484c1997f8 b6b0d1ae5df66c0637284827222b757adb98c237 07b50ac877934b1ce0bd68c040f83bae04efb2db4e19b60681cdf4f367dcb2e0
GET /psb/capla/static/js/remoteEntry.f0866eea.client.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 26 Apr 2024 00:21:56 GMT
last-modified: Thu, 14 Dec 2023 12:49:05 GMT
etag: W/"d78c34e2dbec204465921f484c1997f8"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 0Gkt0CnTnvxOJEfeuYQEpbPR8W9fMbME
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MXeTGg8_Ll5_JxWPq5pkCNyLrNsrjAZVHR6rWQ4NOagNBIwJqk1AMQ==
age: 64919
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= | 143.204.55.112 | 200 OK | 18 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashbde532f130b1e8e4fe12ad801cd77661 473b3d6fb52f5b967a9e13e3b0b91dd5b4c74165 48fb7dc5fed709b7868efd05d7f5bcbdb45d3dddd7f73a9c8aa72a75f46ebc0d
GET /xdata/images/xphoto/263x210/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
etag: "3d39cce4848578b728f54bd5cf1f1e1c6619cc2b"
content-language: 18465
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5-JSY02EYH2EN3u-oz_BmyHo5pQ_9zk16ex18UeL8dnIUfx3C98WJg==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/126764303.webp?k=46a8a949ef420510834df06d0d88e293fbaae80cd1e17883cb78c1bba3eb0366&o= | 143.204.55.102 | 200 OK | 46 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/126764303.webp?k=46a8a949ef420510834df06d0d88e293fbaae80cd1e17883cb78c1bba3eb0366&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash7f55300f63d9903ef33cc17dfb484201 38407a046f7cb9cb19222b613f5951b75e0a030e 3e921e9f54c90099f5d3345213b23135aaa9b085dea4ef37d7e82401aa67a4a0
GET /xdata/images/hotel/square600/126764303.webp?k=46a8a949ef420510834df06d0d88e293fbaae80cd1e17883cb78c1bba3eb0366&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Thu, 28 Mar 2024 17:29:24 GMT
content-language: 46510
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "39ea26bd89db5c26630a463d2538ea129de64a55"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LN6LVSVocol_7Y_UQwgyFRGqTNlIe3b-YA6uu5SP4K0C4d1eEi2NjA==
age: 2508873
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/18cad957.d981e0dd.chunk.js | 143.204.55.102 | 200 OK | 40 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/18cad957.d981e0dd.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (39328) Hash63d479d0fbc25b9fec1bbfd307b9e736 76353f6d308f77ebe0ce35b88fc8d1b2ca533caa 14e955bebd1c7238f39e6a34794215e7e1042b05d6b4282dd0ee1d0ebca156a4
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detects SocGholish obfuscated variant first observed in July 2022 |
GET /psb/capla/static/js/18cad957.d981e0dd.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:16:24 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: wZbt63EteQLAGHLtSnk5KSoVpblEzUOF
server: AmazonS3
content-encoding: br
date: Fri, 26 Apr 2024 10:18:22 GMT
etag: W/"63d479d0fbc25b9fec1bbfd307b9e736"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rvuA0b8bkAzgcoil9Lmlf3IT-WLp_XmNjmgWFHvDLonXjApcEMId2Q==
age: 29133
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/0d919837.cfd9901d.chunk.js | 143.204.55.102 | 200 OK | 556 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/0d919837.cfd9901d.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65455) Size556 kB (555971 bytes) Hashc9a4cea0fba910b2a98fead6f6282970 5f50effc78ed78734880b0b9e632e25c59a81026 5b34100dda1a93aa7549bde423e0daff008fbf2a748cd5fc7ec0495013839501
GET /psb/capla/static/js/0d919837.cfd9901d.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 12 Apr 2024 05:14:27 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: iyT4vmjBI62aM7Z_gIDW9QtXm8BpqEqz
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 06:12:08 GMT
etag: W/"c9a4cea0fba910b2a98fead6f6282970"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tuVU7v3SsmSZJgFcq4N6O1LnQ2MbkxGt8EC7pU2xutD0RPg9OjYAbA==
age: 43907
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=b9a82cb8&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX | 54.230.111.39 | 200 OK | 0 B |
URL OPTIONS HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=b9a82cb8&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /orca/chunk-metadata?chunk=b9a82cb8&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-booking-et-serialized-state
Referer: https://www.booking.com/
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Origin
access-control-allow-origin: https://www.booking.com
access-control-allow-credentials: true
access-control-allow-methods: HEAD,OPTIONS,GET,POST
access-control-allow-headers: x-booking-et-serialized-state
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GcgtFEglv3k28qvyjmMD61MbL10v8WRs5VAjXOB2nR43mxJ000ZFIQ==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/c8637181.09edd61c.chunk.css | 143.204.55.102 | 200 OK | 1.2 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/c8637181.09edd61c.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (1199), with no line terminators Hash366d6e6257b84910cbbbe1504af454fc 3e9f9389a41768b9d155f66dc534ebabf0f04cae 84987646200fcfd8c1e09cbc9125f34d384aec4af704bfa895defd3a59868c1d
GET /psb/capla/static/css/c8637181.09edd61c.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: RqUqvlBczlOb9cT3bY5p150ZH45J71_6
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"9fc866ed20d0a1fd59159e7a31ff449e"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pXNkkDM0zgZlI4aKeTzn0-FrsyqCrVd1wVIC66Aj8xkN9xZEdx1shQ==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/b9a82cb8.c62928a4.chunk.css | 143.204.55.102 | 200 OK | 374 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/b9a82cb8.c62928a4.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (375), with no line terminators Hash8a79199c4daf624a64d5be8a9b8a6ef6 99b40fe2471f0e7ce73e4d0f4d91a1995315e538 7b0d19a1b2e9f2616ead88bb18b67d5cbf3a5c2a44e7977aba8dae27825f5c23
GET /psb/capla/static/css/b9a82cb8.c62928a4.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 374
date: Fri, 26 Apr 2024 00:42:29 GMT
last-modified: Thu, 25 Apr 2024 15:02:20 GMT
etag: "d4cb397172a601054d15e416b713f8b5"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: lCq7MlRjY3shvoerMCHU_vVYQhQuYYl4
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ab34DDrU2v8SnGQ6nwNS-GWW1tgNEMl1r6FqY-9TTGRftuyOtINpOQ==
age: 63686
vary: Origin
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o= | 143.204.55.102 | 200 OK | 10 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash91007a34c420b11e6db46ae944e03832 faa95d4579989447ea3bf6f6308cc6080de9df73 bc45eebffad13744795ec73c95d868f36bfa4c629a18dd950cb8e3fc925e9352
GET /xdata/images/xphoto/263x210/45450080.jpeg?k=15d9709efa513f2b23b5fa8d5234d87bdee2bf97b3e7552244592da11413db9a&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 10314
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "c35b65fa3e7c6890ed0bd84ed1b72acb7ba90276"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mdCcg1khFbZJcBaZBFTo-SPPZs_aZL9bDWQCPmpPadHc4dK3CwCNLA==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/279333721.webp?k=55905f2b46817050a4838f5dbc34741c7dded636d9642a0c75f37ebd11ccab5c&o= | 143.204.55.102 | 200 OK | 55 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/279333721.webp?k=55905f2b46817050a4838f5dbc34741c7dded636d9642a0c75f37ebd11ccab5c&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashc54e9379a3be33e13c8263c1cdbda53b 473670461806883e9f321ac6e8db9a86b9c3ff4e 837d4054ffdd6bbde4960c5ba7b98246ec5894342e3f021aefb5f2eeb448fbaf
GET /xdata/images/hotel/square600/279333721.webp?k=55905f2b46817050a4838f5dbc34741c7dded636d9642a0c75f37ebd11ccab5c&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sat, 30 Mar 2024 04:38:45 GMT
etag: "1105d25063f13ec3386a2ed7bb37769d00eb0544"
content-language: 54878
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PNPcj6HenkiTdlgBFNWbHgRDi7GIlnjzhbBu5nbYKixGtdfvSX82ZA==
age: 2382312
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040711.jpg?k=59e2afc14d5449ca3c17740d2bbcd62fdf7c0c6a3fe2bf05f18dca2695832202&o= | 143.204.55.102 | 200 OK | 14 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040711.jpg?k=59e2afc14d5449ca3c17740d2bbcd62fdf7c0c6a3fe2bf05f18dca2695832202&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hashd3455e57414004a11c2a3bc78913c965 b29f8a2e2529d276ce916f7f5790b4a8a639afe3 30a592f112bfedb781d8f40cd2f552c4a3730a88afa3d9cb902a110ffd296d43
GET /xdata/images/xphoto/300x240/140040711.jpg?k=59e2afc14d5449ca3c17740d2bbcd62fdf7c0c6a3fe2bf05f18dca2695832202&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 19 Apr 2024 20:00:41 GMT
content-language: 13595
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "cf130126b3576e2327b25c901e71dfec69ca8b84"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u7OCALNNIPgUFt5a2xRWdMTrAdFDr1OqkmWmbAO_oPShwhDuA6g7qw==
age: 598996
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/420377357.webp?k=29a0e9879ac8361539c3dae41f047d383e6fa6917f8f47cb50dad001ada0eae6&o= | 143.204.55.102 | 200 OK | 46 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/420377357.webp?k=29a0e9879ac8361539c3dae41f047d383e6fa6917f8f47cb50dad001ada0eae6&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash54d08790bdacf9b7ced1a06a690eb4e9 37206dc2736cc7be8bb0fa9939acda3ad0932120 7f59aa8f893072e340d23cb445129d669f096783711eaa8be83972d41c08e41d
GET /xdata/images/hotel/square600/420377357.webp?k=29a0e9879ac8361539c3dae41f047d383e6fa6917f8f47cb50dad001ada0eae6&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Wed, 17 Apr 2024 12:41:24 GMT
content-language: 46360
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "212fa7bf7fcc086a8902ddf83107bbf360e90a38"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g3qAxEi0mSI-80pgsUQ33SXYC-amr0Cw_VvEM3XZ_4xZb6E9zuSZew==
age: 798154
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/179387540.webp?k=cbf33b04282d8beb50db374f587fedfc39a8787f761dc9ad3b823191cea4b5e1&o= | 143.204.55.102 | 200 OK | 96 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/179387540.webp?k=cbf33b04282d8beb50db374f587fedfc39a8787f761dc9ad3b823191cea4b5e1&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hasha2e77a554a6de69eb14a7badee94451c b2fe4d988abbc5034f9d52699a7643fc99b25e51 6aaebdfed077341758d8a3ea2d28747556fc81878d7c9ea49ab0667014bf7304
GET /xdata/images/hotel/square600/179387540.webp?k=cbf33b04282d8beb50db374f587fedfc39a8787f761dc9ad3b823191cea4b5e1&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Thu, 28 Mar 2024 19:04:36 GMT
content-language: 95806
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "debf32bd9d2080aa2b146e3c7e76d5d1eb66be17"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AZxGhb5N0sGTC2ycnJlFqBsYiE6tmQR_iQqWCCHN7cFuEweNJ5-yKA==
age: 2503161
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/0d919837.df55bc38.chunk.css | 143.204.55.102 | 200 OK | 15 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/0d919837.df55bc38.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (15307) Hashc36b55ea413183d9ade2d87d587aad8f 3d826313313e07d27fb8fe4c2a63beed0a005d40 33968da4e0c47ba06e7f9842807a2e459ba0af13350e27ac65d2076ddd8899a7
GET /psb/capla/static/css/0d919837.df55bc38.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 25 Apr 2024 05:17:51 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: U.PvoL2hFEx7yKxzLNQr.DNDN2mmb5Mf
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 06:12:08 GMT
etag: W/"c36b55ea413183d9ade2d87d587aad8f"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BLAJ7lGCn1_mTRSZqjM3GhJBAG_Wm15rJ2p0fxyeiuBZmY78c8C4gg==
age: 43907
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/0d073a5f.c1d66f4e.chunk.js | 143.204.55.102 | 200 OK | 27 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/0d073a5f.c1d66f4e.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (27291) Hasha0925d92c4c9528c77ba1b4a91e95e34 924aa09c45f6d4ef533466811e8091c0e90657d9 92980af4abdd1e58020de1762b9e2f035c730ccf846383bd44e80b66095461de
GET /psb/capla/static/js/0d073a5f.c1d66f4e.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: gLzVDy84f34HLYExgBt6CzuMY2rghxU_
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 20:28:54 GMT
etag: W/"a0925d92c4c9528c77ba1b4a91e95e34"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kyzWxHk-zosbbv2d7SCOOXZ5abG5V8_LDeF_LKDAsJyHNROIeUSF7Q==
age: 78901
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/500x500/320647664.png?k=698a838d781fe6952e506a3856a7fa5c22056d98e571eb3cf9e448afa98eba81&o= | 143.204.55.102 | 200 OK | 575 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/500x500/320647664.png?k=698a838d781fe6952e506a3856a7fa5c22056d98e571eb3cf9e448afa98eba81&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Size575 kB (575098 bytes) Hasha0523920b3e3bf0a3c56007a4e516ef8 2641e01bee9ca25237704733311b80b71f0ba13f e13fae84c49edb295595258b1a07c090d4fd4311bb7b8a27f0274e90638514d0
GET /xdata/images/xphoto/500x500/320647664.png?k=698a838d781fe6952e506a3856a7fa5c22056d98e571eb3cf9e448afa98eba81&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 26 Apr 2024 10:37:03 GMT
content-language: 575098
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "fd49777a8a49018767f4f734663efd3f70f5b32f"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -G1NNoiV3BFtzfeCjfxSk1B0riE7V_ZbDXZW83VtRNqfntRz1otMcw==
age: 28012
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css | 104.19.177.52 | 200 OK | 25 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202403.2.0/assets/otCommonStyles.css IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (24823), with no line terminators Hashe04ad89975c535b30bae773d0eb0d3b2 0c72555d0fd844150b6ec407a57da2d29bf380e2 06c0edbfc1b871fb45195265f5faad3e23191305f6ff2125557a9fbc287c8992
GET /scripttemplates/202403.2.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:56 GMT
content-type: text/css
content-md5: 4ErYmXXFNbMLrnc9DrDTsg==
last-modified: Mon, 22 Apr 2024 06:06:21 GMT
x-ms-request-id: 77cad75d-c01e-00a6-1f7b-948e9d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 995
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a89b5cfcaa569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/city/170x136/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= | 143.204.55.102 | 200 OK | 5.4 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/city/170x136/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash2500c3ceb70ede8cd27aa8104b6ba08d 171e77bfa910c602acd969ad5a2d6240764a01e2 85d4039adc55e4225f4f70866622be1d30a8978738539db37085264adff1c3d2
GET /xdata/images/city/170x136/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5421
server: nginx
content-language: 5421
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 30 Mar 2024 06:11:33 GMT
cache-control: max-age=2592000
etag: "0cc34fa50815c534b0e6a4a3db51d7118e56da40"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sG6v46CFektaocaoTrK2gubxDDdNrLAQpbVgvY7R8UVERF0hmwIAuA==
age: 2376744
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/57584488.jpeg?k=d8d4706fc72ee789d870eb6b05c0e546fd4ad85d72a3af3e30fb80ca72f0ba57&o= | 143.204.55.102 | 200 OK | 8.6 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/57584488.jpeg?k=d8d4706fc72ee789d870eb6b05c0e546fd4ad85d72a3af3e30fb80ca72f0ba57&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash72c870c967629f6f1c36561800ec1e38 c01c9ff688f5b9ad0b586069afaa4b22db171f6c fc11edd43a2d8fbaf64e61fcd71475cc9702097cf6a33f0884cb800b4efcae4b
GET /xdata/images/xphoto/263x210/57584488.jpeg?k=d8d4706fc72ee789d870eb6b05c0e546fd4ad85d72a3af3e30fb80ca72f0ba57&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 8621
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "196fea0ab45d56a1dbce18f3c3cd9eb1a591fb85"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3kKGjyh1SxtLIM5OsRnPvHqC3NEOqmuWe8xEDlBDHtDr6DdxUfFD-Q==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg | 143.204.55.102 | 200 OK | 1.2 kB |
URL GET HTTP/2cf.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf9fad57618825b73befd889672c15365 42ae8f9cb5bfadea13088709d7b4f370216f6699 7a966d2d470aae9a13de93811aabf822c44787ee24f99d7770ca496fcd59ef6d
GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Thu, 28 Mar 2024 10:34:26 GMT
last-modified: Tue, 21 Mar 2023 13:15:52 GMT
expires: Sat, 27 Apr 2024 10:34:26 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: gzip
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"6419ae08-4ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8SBuYpWkPvEezOiE75-qPBKHb6InSpgzl4_C2BWxXhiewFNBJAtwag==
age: 2533769
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/hotel/263x210/100235855.jpeg?k=5b6e6cff16cfd290e953768d63ee15f633b56348238a705c45759aa3a81ba82b&o= | 143.204.55.112 | 200 OK | 12 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/hotel/263x210/100235855.jpeg?k=5b6e6cff16cfd290e953768d63ee15f633b56348238a705c45759aa3a81ba82b&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash0ec8a6acafd2ff94ead2387aac012c13 697cbd26baa47a35a86eb6feab2a7d9a9720947f 48f88e754655911d3a8885792052da8dddccd607f64f7e030ffad6fb2d283a37
GET /xdata/images/hotel/263x210/100235855.jpeg?k=5b6e6cff16cfd290e953768d63ee15f633b56348238a705c45759aa3a81ba82b&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 03 Apr 2024 06:31:22 GMT
content-language: 12530
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "9aff9e5c9b69d9442b7f563196b1a2235d432b9f"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jevqYCIrWjwE9bhDc8qIk1SyS3zbJF6O41F1OR3cIN1VG3Cih_3vSA==
age: 2029955
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/547233345.webp?k=28837d4d06d6fff027d44308a9abb7e7071d41ed4cf3ace0945f4c16e416c5bf&o= | 143.204.55.102 | 200 OK | 21 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/547233345.webp?k=28837d4d06d6fff027d44308a9abb7e7071d41ed4cf3ace0945f4c16e416c5bf&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashe9b0c64238aa72c2d9adf8313bd79f16 0ecd0ecdeb304821206b17ccbff2c82c0bdb5622 862ec622d407e0157cbfb2fc782b74011f9a9af6c6623701160a6b68ed8e38a7
GET /xdata/images/hotel/square600/547233345.webp?k=28837d4d06d6fff027d44308a9abb7e7071d41ed4cf3ace0945f4c16e416c5bf&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Tue, 16 Apr 2024 10:00:47 GMT
etag: "cfcc5967487314d852582ae7ac07c12419b1f294"
content-language: 21050
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DTcVFSezIgQ95SffkxgW3ImYGBrW63I9OhlNYNEFgPf5l4o0OEXldg==
age: 894190
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040883.jpg?k=c9bd02175da9d1c925eb2749b595edca5479664b07e3a8c67c4230aaca2ba126&o= | 143.204.55.102 | 200 OK | 15 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040883.jpg?k=c9bd02175da9d1c925eb2749b595edca5479664b07e3a8c67c4230aaca2ba126&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hashf898d04969b6aadd15756e5c86cd5abf c693357bd9c641531723a801657516c107535098 b91d2fa767b3f9dbba7069e65d0066aaab42fd67916b3ea94b5ef4e6194768aa
GET /xdata/images/xphoto/300x240/140040883.jpg?k=c9bd02175da9d1c925eb2749b595edca5479664b07e3a8c67c4230aaca2ba126&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 21 Apr 2024 07:21:27 GMT
content-language: 15024
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "e6123c73d607304f2fc0402808c5f9b760280e97"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LIrvB-7fWw7QN9MK2dX35tNtlBA5lw-QZaCPhJG9U7X3JDtZCgBD8Q==
age: 471750
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= | 143.204.55.102 | 200 OK | 0 B |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xdata/images/xphoto/263x210/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 08 Apr 2024 10:45:21 GMT
content-language: 13102
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "c408c193e9cbf1666a3bde4c62115b2ece30df49"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: voik9wi8tcS_-IH2cI3WrIqgCT4mbyrZYLKl3eQgjPB9xitdFBVmog==
age: 1582716
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/atlas_cloudfront_sd/7aaea4329a86dd9e6dc4d51a92fef5573f6f9c09.js | 143.204.55.102 | 200 OK | 120 kB |
URL GET HTTP/2cf.bstatic.com/static/js/atlas_cloudfront_sd/7aaea4329a86dd9e6dc4d51a92fef5573f6f9c09.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size120 kB (120436 bytes) Hash666f1d5f09457615243bf4310f5c3e48 9b4f21312bbf59a1e30abf4e4db6ccc5a7aa597f 4edf6972e93e28d325080452b9e82a312493e68327e9cf374c27d9502f07176d
GET /static/js/atlas_cloudfront_sd/7aaea4329a86dd9e6dc4d51a92fef5573f6f9c09.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 20 Apr 2024 09:45:16 GMT
last-modified: Thu, 26 Oct 2023 09:29:15 GMT
expires: Mon, 20 May 2024 09:45:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"653a316b-1d674"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mUtzkLvwQUA2BkIqmtPuZQCkuynaA28DYdnRG24s2XYZ_EtRa2t3jg==
age: 549520
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= | 143.204.55.112 | 200 OK | 0 B |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xdata/images/xphoto/263x210/45450279.jpeg?k=cb9ab85ffe439f3030e00281f2d52583a398bf076e54f00f746e1d1baf62bf6e&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
etag: "3d39cce4848578b728f54bd5cf1f1e1c6619cc2b"
content-language: 18465
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -jEuF-4xMtc6d-PqmjNHy1QLepWcTFGVYl2XPG-fYiB7hG8Znm105A==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/192276799.webp?k=6f569e47092ed9123757fe13f7411da9df7d49453ea8ec097b6b6eb789c4c026&o= | 143.204.55.102 | 200 OK | 73 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/192276799.webp?k=6f569e47092ed9123757fe13f7411da9df7d49453ea8ec097b6b6eb789c4c026&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashbbcb4789762be75c0ee6d9e0d98c6cc7 75f7a51b2eb9f1ca98c6b182d7e64cee2046789e b5b1d2f72619610b3be422f1e586cc579a100333d3e2ebb11e9d3c3c144b82fb
GET /xdata/images/hotel/square600/192276799.webp?k=6f569e47092ed9123757fe13f7411da9df7d49453ea8ec097b6b6eb789c4c026&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sun, 07 Apr 2024 07:50:05 GMT
etag: "0ef0ec04d87c971f32ea12b1151c39852b5c30c6"
content-language: 73318
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WHyH43wA-RMliKPZSIsb3tTZ72oVLti4_wKiMrdxeQMDLbtPr_15lA==
age: 1679632
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/log?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&event=onetap.policy.uiEvents | 74.125.131.84 | 200 OK | 0 B |
URL POST HTTP/3accounts.google.com/gsi/log?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&event=onetap.policy.uiEvents IP74.125.131.84:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gsi/log?client_id=901905703382-m88jn1h9ll89odkt6t5muc6h7ep83rlh.apps.googleusercontent.com&as=h2LywFb6REwJzT7Y2YivlA&event=onetap.policy.uiEvents HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 0
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 26 Apr 2024 18:23:58 GMT
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-SiPEFmHGBJ6IyFwH3qZU1Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cf.bstatic.com/xdata/images/city/600x600/977262.jpg?k=2b852648c76ccaff8be05333057712eda873343dfaa79cd23e55534a1a55aecc&o= | 143.204.55.102 | 200 OK | 104 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/city/600x600/977262.jpg?k=2b852648c76ccaff8be05333057712eda873343dfaa79cd23e55534a1a55aecc&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, components 3 Size104 kB (104054 bytes) Hash9e76748d372f43f3c70913db8fb4b4b6 8576bee89b25b0cf56805bd6d2e82cc5b11d5eae 4188b77ce80f546eebdb6c1d3dd95160b3d36b1e0fad8722c7e8c4591de87390
GET /xdata/images/city/600x600/977262.jpg?k=2b852648c76ccaff8be05333057712eda873343dfaa79cd23e55534a1a55aecc&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Thu, 04 Apr 2024 14:32:57 GMT
content-language: 104054
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "2082d51dfb19f44bdc31100a407237918470362f"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: boPGzOMEs6er3bpTPWacbbi_gyxuuefRc9QyDl1SNgteyn8wcDet4g==
age: 1914657
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o= | 143.204.55.112 | 200 OK | 17 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashf373341034a716f8a37655e46047d92d 4a7c67fbe52f102ca516e2d7fda504aa94df5942 1f189b367e0ec60548afd09578a8743af2069f18731a05c11b9b292ed0f0fc17
GET /xdata/images/xphoto/263x210/45450103.jpeg?k=a1fa72362160b1df6e288050afa7ce1aade80871acd368ddd4a4ebf6ad87764e&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:22:09 GMT
content-language: 16555
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "3aa59d890ba68033df6a63b6535f31d7b2a23d10"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wpLmzMJofp9Llzo2P8Jike4ocP2k1vyUx6_HwKkupJjpZJCAIYRPGw==
age: 194508
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/59306dc3.9d1d8b5a.chunk.css | 143.204.55.102 | 200 OK | 3.9 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/59306dc3.9d1d8b5a.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3931), with no line terminators Hash070ede530b7889014fa6e3462b411a6d 038ca40e210e11abac5107687806183fddc04216 b9b154b1e867e707b6ecf5ce067c163fdfb40da6de70988d6d3c54681932aaaf
GET /psb/capla/static/css/59306dc3.9d1d8b5a.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 39Wy.1Oo08bk5Gf3dhRJB.ybhUv0GQX3
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"2f27651e0e87ed4659f91b2a550d7dfa"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _m1ecSrYAkewb-nYstL58rUVeO-Z3NAecChcOoC7oHagMzgPOFHXYw==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= | 143.204.55.102 | 200 OK | 10 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hasha84be65e3bb8d5eaa7fef90be796567a 551cdf363ee42d54ec96eb53ce7775f691ff7fb4 f01b19f78cfe046f9bb8a8b7f141f8c2fb0cef0a519adffee6dfb7009199b05e
GET /xdata/images/xphoto/263x210/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:22:09 GMT
content-language: 10145
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "418ccc7d8bc2472340222db59b4efba9f0d7bac7"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kmXXHi2LY5Gaq1Ni9Y0LJ_pi7gHkHuXaVMKCJif5RxSvmkQtBMFjPg==
age: 194508
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/366855457.webp?k=ef25b0c640c7c2f4fcac4c79509ef1dbb484c19f21a7c8cba18d9270d7f790e9&o= | 143.204.55.102 | 200 OK | 85 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/366855457.webp?k=ef25b0c640c7c2f4fcac4c79509ef1dbb484c19f21a7c8cba18d9270d7f790e9&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashd5d61e502701d626a44f71041bc3aa23 50523eff5efe9749abd76b9b94872c6f12b1362a 71dd9c06a63fe4d5a0ed46409f1555ae9a809146324cb47a3cb1bcfa2139b1d5
GET /xdata/images/hotel/square600/366855457.webp?k=ef25b0c640c7c2f4fcac4c79509ef1dbb484c19f21a7c8cba18d9270d7f790e9&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Wed, 03 Apr 2024 22:37:08 GMT
etag: "4cbedb5194f2d7933b6939f70bbc0f5cd2ded19f"
content-language: 85342
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EOcngDOjOxHQMi_9H6bHJHXWdyy2K0P9Mn34wXeaaTwsavbZCguz_A==
age: 1972009
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/ace575b5.f3875eb4.chunk.css | 143.204.55.102 | 200 OK | 1.5 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/ace575b5.f3875eb4.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (1506), with no line terminators Hash2348d546c1090320f89c755f7cf0a2f8 10203c903b1d1a32122a62a6f35f8c1c78c82da1 1b9defa2a8f3d070160c7de148e2fc2178d89002558d5bde049844712527ae86
GET /psb/capla/static/css/ace575b5.f3875eb4.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: TFdCgU0w_.FfZ2ogxFT8nvsAVd7OzMXm
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:25:24 GMT
etag: W/"34a498bcf3550c64902f7ac2d32a50d9"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zO9y0zSUuTQ7v3cdCdxZxgNHlzljmaBxN-HlqHmxM8iGpvAd130PCA==
age: 86311
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashdeb542d99141efe2386fcc72283af582 854409bb8dce07be7122904445a5d5cb4f866e8c a70038725ecc3cbf4bfe6470f2ba07e07fdb5a4737104217e928f83260ecdd74
GET /xdata/images/xphoto/263x210/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 23 Apr 2024 07:44:48 GMT
content-language: 16100
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "b20b1dc7e36ae82b6a50902c9ab2912586cb4c09"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cI8JynBZYSKkdbFQL_QvzRagKWjQhpdT51-NjBGGqzIRC59pScBrVA==
age: 297549
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/c4cea6cc4a62eba0342cfa9f4b20714a610dd010.css | 143.204.55.102 | 200 OK | 137 kB |
URL GET HTTP/2cf.bstatic.com/static/css/main_exps_cloudfront_sd.iq_ltr/c4cea6cc4a62eba0342cfa9f4b20714a610dd010.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size137 kB (136933 bytes) Hash5fb437a50d4157ccab9dd95f29cab05e 9807cf3919edbeb9cdd541f487c90f9fd89a18fa 490060aab13b9e2240a32e60d539396d602ec3df52e0c574df5baf3bd44f8bd1
GET /static/css/main_exps_cloudfront_sd.iq_ltr/c4cea6cc4a62eba0342cfa9f4b20714a610dd010.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 29 Mar 2024 13:25:10 GMT
last-modified: Wed, 28 Feb 2024 12:32:03 GMT
etag: W/"65df27c3-216e5"
expires: Sun, 28 Apr 2024 13:25:10 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ClDfA6ToDJFjTaghnxEzENM3lWOQfxa69hnChlIYszqQCX3vZ9vLaA==
age: 2437124
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/client.1a04c1c2.css | 143.204.55.102 | 200 OK | 210 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/client.1a04c1c2.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size210 kB (209928 bytes) Hash317c5435fdbd0f01be16dabb5f6dd92c 6af45efe8d0e339d0e54ed31111fba5c3f507302 d94d23367ae4656645588c84183e2291de83718ca0dd989e9b152f6514c644ad
GET /psb/capla/static/css/client.1a04c1c2.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Thu, 25 Apr 2024 19:47:00 GMT
last-modified: Thu, 25 Apr 2024 16:26:43 GMT
etag: W/"317c5435fdbd0f01be16dabb5f6dd92c"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: dscY8L7WxihDxoaxOhdCI3STVvGb.Z0X
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ycHgkPC734BMMejsf4xkN2AAQT3Uh2VRpJ4hWD6IEEGExFPClM0qbQ==
age: 81415
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= | 143.204.55.112 | 200 OK | 9.3 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash688b2d746bad439cade3efaa688d426b de138925fb4975a2538828cc47b674ba4cba76bb 24f12dfd0c5f3d491c3ccb07c49c47cf79a245fe7e03f7dc8e4c99b547ccf0df
GET /xdata/images/xphoto/263x210/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 02 Apr 2024 01:33:10 GMT
content-language: 9274
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "f54682fe18b2242ab1e391471df4e81e848b0a88"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I1w2HHqhaZy8KccCxG65-8lokozz77gIoL_GwDT2MoRS0CwOcDOrUw==
age: 2134247
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/398620320.webp?k=10e476830ecfd5a062072a6318612393bc414bd75c10bb44dd29a1d6de5b225b&o= | 143.204.55.102 | 200 OK | 32 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/398620320.webp?k=10e476830ecfd5a062072a6318612393bc414bd75c10bb44dd29a1d6de5b225b&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashde64ee81621ba1ad3857b0a50de527a4 a49fc890be0160a580e6581046dd8e6942dca3ff f96309d4f154c0668d61e54c4f2f634c7e47a5b6546b250eb5205950c1e75577
GET /xdata/images/hotel/square600/398620320.webp?k=10e476830ecfd5a062072a6318612393bc414bd75c10bb44dd29a1d6de5b225b&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Fri, 29 Mar 2024 04:57:26 GMT
etag: "de0ee137ea2de702fb246777996bd787657681ca"
content-language: 31994
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nKwgIOSiB9HLWTmQTwMhqv8kS_7Kp0YOYSVoZVKzs3Hw7oRaoGwQTw==
age: 2467591
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040678.jpg?k=7080b8e3fedb58f3bb8a17656acabeb7fb29aec9beb0039c7d71c6cd1270911d&o= | 143.204.55.102 | 200 OK | 22 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040678.jpg?k=7080b8e3fedb58f3bb8a17656acabeb7fb29aec9beb0039c7d71c6cd1270911d&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash913035261664897d777b2fff807b8cb2 f4ba7d458a8410d847265170c45095fb0bf5fe12 29727d339136f99b7bb9e9a2950fac13915e777de66345d72f36dd12c6dbde2e
GET /xdata/images/xphoto/300x240/140040678.jpg?k=7080b8e3fedb58f3bb8a17656acabeb7fb29aec9beb0039c7d71c6cd1270911d&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 02 Apr 2024 12:47:02 GMT
etag: "44b0e11dbc5efcb6a3a6658ed80b40a2db185a3b"
content-language: 21490
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8qWCgXUD8OvCnh-i9SF_nT8FhToEXUPg98plRFgNFqj7Qz-j8jV3Kg==
age: 2093815
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040504.jpg?k=8fdd542b8aad3f48442d8f2f8d4f297de56342033d75868de67d9745f3c608c9&o= | 143.204.55.102 | 200 OK | 19 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040504.jpg?k=8fdd542b8aad3f48442d8f2f8d4f297de56342033d75868de67d9745f3c608c9&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash9f9dfd6abf56a1b68b43ca05ba9bfd57 b49c096599f9a07befe7d65bb6a5309add50688f 43acb4622e30a19945e4a882ff72e399a6725d1c390e2060a2384347d03655cd
GET /xdata/images/xphoto/300x240/140040504.jpg?k=8fdd542b8aad3f48442d8f2f8d4f297de56342033d75868de67d9745f3c608c9&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 02 Apr 2024 12:47:02 GMT
etag: "ee94e1f093abb9bf1f136087133763b16fd9e8cc"
content-language: 18816
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SsOGcgWFR72K3-D9xt8FKkM9wrfuLx2qK0q0dA3C1yH5RPxpzsDr6Q==
age: 2093815
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/13125860.webp?k=35b70a7e8a17a71896996cd55d84f742cd15724c3aebaed0d9b5ba19c53c430b&o= | 143.204.55.102 | 200 OK | 63 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/13125860.webp?k=35b70a7e8a17a71896996cd55d84f742cd15724c3aebaed0d9b5ba19c53c430b&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashe965ab8e189b47c2552636ab3e7f7cb2 a558424ed2187f317d0bb28cf7e5924bff250bd7 28e8056b22b0dd18679873e59d4d0ddf9233236584922bfbc0346cb4864b5e33
GET /xdata/images/hotel/square600/13125860.webp?k=35b70a7e8a17a71896996cd55d84f742cd15724c3aebaed0d9b5ba19c53c430b&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Thu, 28 Mar 2024 14:58:52 GMT
etag: "ab8b7d74b7a68414c25e711fee70e7eba3ef2ff8"
content-language: 63344
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WANo-pEp1ROQjPPHNkPTgC2ZXxOilea743TW8AMwPcl3vDmu0ks_gA==
age: 2517906
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/534660699.webp?k=64f4310f73335b075f3cf6b38adf9a40d235757a764902a1c3659e2181d23eed&o= | 143.204.55.102 | 200 OK | 42 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/534660699.webp?k=64f4310f73335b075f3cf6b38adf9a40d235757a764902a1c3659e2181d23eed&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash760a5db53ce3d69679dd76ddbcc0f93b a53d0a4c6e72ce94b852a63f640727cbd935490e af511988268db0bd746b1aca668035378488b0ebb398847ac428ed0077af2be2
GET /xdata/images/hotel/square600/534660699.webp?k=64f4310f73335b075f3cf6b38adf9a40d235757a764902a1c3659e2181d23eed&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sun, 31 Mar 2024 00:08:22 GMT
etag: "02cb592edda06b3924ba27c7630687baf4271ab9"
content-language: 42422
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cee5nvPr5fZs2Qg30CqlagNSjeE8lwM1I3WTcNqQpWorksyponh0Eg==
age: 2312136
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js | 143.204.55.102 | 200 OK | 52 kB |
URL GET HTTP/2cf.bstatic.com/static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/calendar2_cloudfront_sd/06071dd1c4e89fbe99e5ad6e21584a6bf9585e84.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sat, 20 Apr 2024 09:45:16 GMT
last-modified: Tue, 12 Jan 2021 10:06:38 GMT
expires: Mon, 20 May 2024 09:45:16 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"5ffd74ae-cbbc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xn6dScRDA616UWlV_LfKb921lG10xr-Wx_3eACyPEW6WguX5DCQLVg==
age: 549520
X-Firefox-Spdy: h2
|
|
| geolocation.onetrust.com/cookieconsentpub/v1/geo/location | 104.18.32.137 | 200 OK | 72 B |
URL GET HTTP/2geolocation.onetrust.com/cookieconsentpub/v1/geo/location IP104.18.32.137:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectonetrust.com Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47 ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashadf75b99dbbf416c627dfc5de30f9ad1 699f3845f7dfb3fa9968c2117b44c3f3eb728fff a0e4a8f457272bd17d07ae2e1e09731df6cc6fdc3ea9e32e713ef4a8a012fc27
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:56 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a89b5789d75691-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| accounts.google.com/gsi/client | 74.125.131.84 | 200 OK | 220 kB |
URL GET HTTP/2accounts.google.com/gsi/client IP74.125.131.84:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerGoogle Trust Services LLC Subjectaccounts.google.com Fingerprint24:73:6B:52:47:71:E2:CB:E3:4E:89:44:4B:29:D9:F4:C2:A0:F1:14 ValidityMon, 08 Apr 2024 07:33:55 GMT - Mon, 01 Jul 2024 07:33:54 GMT
File typeJavaScript source, ASCII text, with very long lines (2899) Size220 kB (219684 bytes) Hash590d1850f77efd998a2696088a20a339 5b559644a8d5de340c50f4eaa89728dd540c5339 58e7cdcf102223889dd7708ad50ab4ab035d91a79e0cdf482e7c9545db42d2d8
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Fri, 26 Apr 2024 18:23:58 GMT
date: Fri, 26 Apr 2024 18:23:58 GMT
cache-control: private, max-age=1800
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-Y_c4DBTZqsdTKk-rQta6lA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/5f127cf4.4eb071a5.chunk.css | 143.204.55.102 | 200 OK | 2.3 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/5f127cf4.4eb071a5.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (2258), with no line terminators Hash0140800477cd6c0f2fcefb9ee2f1a7f4 082022afb08562304042071b274e7d5c378b40fb 4be81b24e5f9251f6f4a39e69bb602e5be52641846544068c788580b18f5e092
GET /psb/capla/static/css/5f127cf4.4eb071a5.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: Uy8yehuJt3kJ.qppviwTfSjiUsVx9znK
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"f7b3952a791d1cef60d2d2cfcf354eda"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9FYI2ERemnb1DVGqCt6L8lbOUNhoJYbhN3LVx6AoKbiFnQWFxqmYww==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/d9560671.115fafe5.chunk.css | 143.204.55.102 | 200 OK | 2.7 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/d9560671.115fafe5.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (2672), with no line terminators Hash5dd20a05b951a9b63809552227b4b650 dc2217b9371766435d59ba81371baf18caec8bd3 22ab37ef0cbec321d9bfe6bf3dca7b79e9862982e9eddc8236b561c367fd191f
GET /psb/capla/static/css/d9560671.115fafe5.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: wKR6VKdBbM66eWPHr_HQCUQuJleTM2QV
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:31 GMT
etag: W/"c8f67ae440ed2c77a78bc2f4e6749736"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oI1U-LybKtn6_p-lA85cUEYXLo5cy0BaaK9snIF4H4-dyBTYrD-ZAw==
age: 84563
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=&etgwv=js_wcu_trip_type_based_destination_number_of_types|4 | 143.204.55.27 | 200 OK | 12 B |
URL GET HTTP/2www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=&etgwv=js_wcu_trip_type_based_destination_number_of_types|4 IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash45e0d10a08ad25f44cb9c2b6e732858c 8e47bb27521f644194d8d6ed92c22513a68715d9 4c55d6d27f3d4503e15ce98f4e4cccc15a49ecc0445a3a0996578437f7ab701f
GET /js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=&etgwv=js_wcu_trip_type_based_destination_number_of_types|4 HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
X-Booking-Info:
X-Booking-Client-Info:
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-SiteType-Id: 1
X-Booking-Language-Code: en-us
X-Booking-AID: 2391722
X-Booking-Session-Id: 4d672258ec9524675ee4f0efb8bb8f5e
X-Booking-ET-Serialized-State: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbKE7bjkbYWzltX6xhe6bQYu2XZ%2F3eUkJ8NiGh6DMkeAW%2BLi8qPv0NO7hKeWsoacF1USB%2FIvEMIV9c7k7rBhuMqRTTImhZTaQbIAEJPjSxJRJSZV3gCTaq6wxqqhlMwE8ar8U9luIHnjLSSvRgSALiNnifLF9jhlPgI0ObSnqi3cg%3D; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; pcm_consent=consentedAt%3D2024-04-26T18%3A23%3A57.593Z%26countryCode%3DNO%26expiresAt%3D2024-10-23T18%3A23%3A57.593Z%26implicit%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr%26consentId%3D54894813-b88e-4c4f-96d1-aa019443e21f%26analytical%3Dfalse%26marketing%3Dfalse; cors_js=1; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6ImJSQWVIZUZxZzExZXBsSkh1YzBJNld6eUZ0U2oxazJrbEwwWUdWMVcwT0UiLCJhIjoxfV19; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A57+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&backfilled_at=1714155837729&backfilled_seed=1; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D; OptanonAlertBoxClosed=2024-04-26T18:23:57.170Z; bkng_sso_auth_1714155837=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Fri, 26 Apr 2024 18:23:57 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=89eb815eef1a0046&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejJX0TsJXlU23OC7bfBDxsMxB0nSPdj1IkI
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z6td5wabgnzEMxnJVWuo0R0Whp9GTH40tAusWrDb8FuLUnkL-LNOGA==
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/otSDKStub.js | 104.19.177.52 | 200 OK | 21 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/otSDKStub.js IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (21229) Hash0cd317a7b9c520801230e944f7d50e41 e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6 6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:54 GMT
content-type: application/javascript
content-length: 6882
content-encoding: gzip
content-md5: zgTRIDojRJmnmBTwUyI2Vw==
last-modified: Thu, 25 Apr 2024 20:00:12 GMT
etag: 0x8DC6562513BC785
x-ms-request-id: 73ddc489-601e-005b-02f4-9700b8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 995
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a89b4ecc1c569f-OSL
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/6b631c3f.41fa5dc0.chunk.css | 143.204.55.102 | 200 OK | 4.3 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/6b631c3f.41fa5dc0.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (4345), with no line terminators Hash207a148071df40350d0b864f6913f131 f70796d70fb058cc23ffcc9d6911283fc05f30e5 f4bda0baa9ecc2d7964ff2d210e6cdb881bd9f4cade594975ec822f284ce92a1
GET /psb/capla/static/css/6b631c3f.41fa5dc0.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: epeqgq4S9waDB_GIJxIpDUdxHyrlcT8s
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"2b0df6b9b4104b680d94f5c04e572c2d"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QMSBHrEbWPbfEawlelRS3WTdK7iPc4gUliTaXBK8TYmBnI-iaRzSnQ==
age: 47753
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/dc32f6b7.613315bd.chunk.js | 143.204.55.102 | 200 OK | 217 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/dc32f6b7.613315bd.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size217 kB (216769 bytes) Hash39974a9d14d8d872eb9e17126272d457 d4ebb54056967fc4012965b6ac81670005292d87 33fd6177ebdf1f55adf60ec76946ec1db86a260516ef5e7d08da53bec5eb162d
GET /psb/capla/static/js/dc32f6b7.613315bd.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 15:02:20 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 9KCQkZj986jxszhMTvsmb5GbgnOvQ5BU
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 15:36:19 GMT
etag: W/"39974a9d14d8d872eb9e17126272d457"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: stIY193UJyIHXKlbCfcjtYJIcynrnCQaPSoG-rUa5MNrd_6BsoFiYg==
age: 10056
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/8067d7e4.18d1c530.chunk.js | 143.204.55.102 | 200 OK | 40 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/8067d7e4.18d1c530.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (39332) Hash038def36eee30c3add376dd4cad41e7a 6c56562ee1b406038f708336640fae83e4bbce0a 61000b86522b11bc610c5d8fbb2c6c97cc6cef86b3fa11c06a8f3a1d5167a77d
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detects SocGholish obfuscated variant first observed in July 2022 |
GET /psb/capla/static/js/8067d7e4.18d1c530.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:16:24 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: EN.zFcalFGivlN89fwKflrDMUJ1B_.Z.
server: AmazonS3
content-encoding: br
date: Fri, 26 Apr 2024 10:18:43 GMT
etag: W/"038def36eee30c3add376dd4cad41e7a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rUxj_0e6UqbTA-DhWa44lJsFbpswMEWr30apAjwevSuGh38tsUz4Eg==
age: 29112
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/57584488.jpeg?k=d8d4706fc72ee789d870eb6b05c0e546fd4ad85d72a3af3e30fb80ca72f0ba57&o= | 143.204.55.102 | 200 OK | 8.6 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/57584488.jpeg?k=d8d4706fc72ee789d870eb6b05c0e546fd4ad85d72a3af3e30fb80ca72f0ba57&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash72c870c967629f6f1c36561800ec1e38 c01c9ff688f5b9ad0b586069afaa4b22db171f6c fc11edd43a2d8fbaf64e61fcd71475cc9702097cf6a33f0884cb800b4efcae4b
GET /xdata/images/xphoto/263x210/57584488.jpeg?k=d8d4706fc72ee789d870eb6b05c0e546fd4ad85d72a3af3e30fb80ca72f0ba57&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 8621
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "196fea0ab45d56a1dbce18f3c3cd9eb1a591fb85"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: C3JB-mxmZPnpHf9Gsmmv_XmTg9f6rusYER17m4lJ7cgBUxk1vfpT6A==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/782ad794.4aa7faa7.chunk.js | 143.204.55.102 | 200 OK | 886 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/782ad794.4aa7faa7.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size886 kB (886023 bytes) Hash78d3d8e836f7171f9c312f630db331cf 1b331c9a6def04bb95ba16439ed90d54d9124b7f 572dd4ca04ebd3e031308d8dfeedca4b63b384c82f6b26bb09c61e348440234e
GET /psb/capla/static/js/782ad794.4aa7faa7.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:50 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: VFDSja9YXkdfiJo33u9Fnsvl4I4WUDhd
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"78d3d8e836f7171f9c312f630db331cf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Z5_rJka8YhDVjqz1wHHpBh20MUewqOozIITesJM9kJXF5IxDZtpWHg==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| account.booking.com/privacy-consents | 54.230.111.55 | 204 No Content | 0 B |
URL OPTIONS HTTP/2account.booking.com/privacy-consents IP54.230.111.55:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /privacy-consents HTTP/1.1
Host: account.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.booking.com/
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: envoy
date: Fri, 26 Apr 2024 18:23:57 GMT
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.booking.com
access-control-max-age: 1728000
set-cookie: bkng_sso_session=e30; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; secure; HttpOnly
bkng_sso_ses=e30; domain=.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; secure; HttpOnly
bkng_ap_sso_session=eyJib29raW5nX2dsb2JhbCI6eyJzZXNzaW9ucyI6W10sImRhdGFfc3ViamVjdF9pZCI6IjQ4ZWVkYTAxLWQ4YjctNDQxNy1iMzY4LWJmNzJkMjExMGQ5YSJ9fQ; domain=account.booking.com; path=/; expires=Wed, 25-Apr-2029 18:23:57 GMT; SameSite=Lax; secure; HttpOnly
content-security-policy: frame-ancestors https://*.booking.com 'self'; report-uri https://nellie.booking.com/csp-report-uri?type=block&tag=212&pid=b41c815e3d8a000d&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZb8612iO9R_UYhDOKZTX9f9H49t8PnK2Nrsx6xmt3ri94bPD9KriNCZVoZqdS_rFE
content-security-policy-report-only: base-uri 'none'; connect-src saa.booking.com secure.booking.com reports.booking.com privacyportal-eu.onetrust.com geolocation.onetrust.com cdn.cookielaw.org www.google-analytics.com *.perimeterx.net *.pxchk.net *.px-cdn.net *.px-client.net *.px-cloud.net 'self' 'report-sample'; default-src *.bstatic.com bstatic.com 'self'; frame-src https://www.youtube.com/embed/Vv4w5SmRkss *.bstatic.com https://www.google.com bstatic.com www.booking.com secure.booking.com paymentcomponent.booking.com 'self'; img-src 'self' data: www.booking.com graph.facebook.com cdn.cookielaw.org account.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google-analytics.com www.google.com stats.g.doubleclick.net *.px-cloud.net *.perimeterx.net www.gstatic.com; object-src 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=213&pid=b41c815e3d8a000d&e=UmFuZG9tSVYkc2RlIyh9YSWKtKO5TxgOpTwVTPfHZKNW3Hcrm1RLgTDT2V-m21UMJ4KxJTAfD3k6vpGGyphNZUfy-f31chCZb8612iO9R_UYhDOKZTX9f9H49t8PnK2Nrsx6xmt3ri94bPD9KriNCZVoZqdS_rFE; script-src saa.booking.com *.bstatic.com bstatic.com *.static.booking.cn www.google.com www.google-analytics.com cdn.cookielaw.org geolocation.onetrust.com 'self' 'nonce-h4JIlgv9pxEj3ZE' 'report-sample'; style-src *.bstatic.com bstatic.com *.static.booking.cn 'self' 'unsafe-inline'
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FUe3PDial58Wz79hDmKp1tvnNQ_pk7CeWJmnJkhU6mGETt2WX1P8yQ==
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= | 143.204.55.102 | 200 OK | 12 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash2a361664cb305310a4358bcfd299217b 319d5dbe2e9a02af52292e2c94467fbd4bd954ef 772bb85697eb54a5a021864874190a475188ce98c1a8840bb1fe72515dbbcdd8
GET /xdata/images/xphoto/263x210/45450090.jpeg?k=52f6b8190edb5a9c91528f8e0f875752ce55a6beb35dc62873601e57944990e4&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:22:09 GMT
content-language: 11795
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "78c06c289b99410d719289fe5882090079338c7f"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: go5tsKDk-Rxp-tUMdt2ntPJw7W3sR-4p1hcTQR-4QsO3SoQ4uPAmnA==
age: 194508
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040683.jpg?k=11550d5407fcb7b634aa46eedd72c5f49c20c467abbef62cc22bc14aeeb8b2b7&o= | 143.204.55.102 | 200 OK | 17 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040683.jpg?k=11550d5407fcb7b634aa46eedd72c5f49c20c467abbef62cc22bc14aeeb8b2b7&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash492770a16d048684a8758f827d807501 de5fa985125f31b2d0df5c8855574c3dfbb14599 9fcaad91847e1fdcd5d3574b16c7d5e2c62c43be065faa1aed08e81ce24f83ec
GET /xdata/images/xphoto/300x240/140040683.jpg?k=11550d5407fcb7b634aa46eedd72c5f49c20c467abbef62cc22bc14aeeb8b2b7&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 19 Apr 2024 20:00:41 GMT
content-language: 17148
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "6104cb51027d86fef0e49fe6950c250db213c634"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CCWNkcv1TgAOcd78VEa_zQJ_XlimSF3aD7uxco_Mgc-H3yyAPxt7FA==
age: 598996
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/87428762.webp?k=de5db8fe94cbfe08d3bf16d3c86def035fd73b43ee497cffe27b03363764e0e2&o= | 143.204.55.102 | 200 OK | 51 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/87428762.webp?k=de5db8fe94cbfe08d3bf16d3c86def035fd73b43ee497cffe27b03363764e0e2&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashb78a0ad601d2cc6e533af5437a41fb00 23b3fa91abc6e4ef7013a96dee0ada79733d17f0 1c730f4c5d2b6a5e5f7a5f354a807fa4fd2c013cec9695bc9a92e5547cb8a75a
GET /xdata/images/hotel/square600/87428762.webp?k=de5db8fe94cbfe08d3bf16d3c86def035fd73b43ee497cffe27b03363764e0e2&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Thu, 28 Mar 2024 14:58:52 GMT
etag: "a9bafcb9600caeddef6df26171d5f5713b83b75a"
content-language: 50654
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Eba4aJYb4D3CBAQqR8LHP4M8-OPW1S8BjoiVpfMrdQFEud26OAG-WQ==
age: 2517906
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/cross_product_index/guest/b2e5f2aa32b71ca0fc66aa671e4e958bcd69b7d0.svg | 143.204.55.102 | 200 OK | 1.6 kB |
URL GET HTTP/2cf.bstatic.com/static/img/cross_product_index/guest/b2e5f2aa32b71ca0fc66aa671e4e958bcd69b7d0.svg IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash306155d6ae9bbb1485ee4137cc331ebb 55440ffa33f7d1fc846283f12800c3ee2cb57ff2 d2c92e28a4d84a88caeb33a95aa36104acecf7602ee0616e4522fb37ec2e20ac
GET /static/img/cross_product_index/guest/b2e5f2aa32b71ca0fc66aa671e4e958bcd69b7d0.svg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Thu, 11 Apr 2024 07:23:26 GMT
last-modified: Wed, 10 Apr 2019 11:21:51 GMT
expires: Sat, 11 May 2024 07:23:26 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: gzip
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"5cadd1cf-63d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: amfqhrE1-qHQJY081Cb5AjWUs2J7o6WHhURQnlOmDD7h5ZHXc3JVSQ==
age: 1335629
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/a80f32e7f9693f304c247b0f22b0f109a5fd7dd6.css | 143.204.55.102 | 200 OK | 360 kB |
URL GET HTTP/2cf.bstatic.com/static/css/searchresults_cloudfront_sd.iq_ltr/a80f32e7f9693f304c247b0f22b0f109a5fd7dd6.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Size360 kB (359630 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/css/searchresults_cloudfront_sd.iq_ltr/a80f32e7f9693f304c247b0f22b0f109a5fd7dd6.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Fri, 12 Apr 2024 18:01:55 GMT
last-modified: Tue, 23 Jan 2024 12:08:23 GMT
etag: W/"65afac37-57cce"
expires: Sun, 12 May 2024 18:01:55 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YiLBByo4rCQ_wKFnDq5MsnKnD35NjgCcwargKYZWuXvhFInjlOPNNA==
age: 1210921
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= | 143.204.55.112 | 200 OK | 9.3 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash688b2d746bad439cade3efaa688d426b de138925fb4975a2538828cc47b674ba4cba76bb 24f12dfd0c5f3d491c3ccb07c49c47cf79a245fe7e03f7dc8e4c99b547ccf0df
GET /xdata/images/xphoto/263x210/45450113.jpeg?k=76b3780a0e4aacb9d02ac3569b05b3c5e85e0fd875287e9ac334e3b569f320c7&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 02 Apr 2024 01:33:10 GMT
content-language: 9274
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "f54682fe18b2242ab1e391471df4e81e848b0a88"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2hnq4ZSCx_-7LiS-1YqdMMRhYObjW85ghsb2IwvIO29sL08VkrD8ng==
age: 2134247
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= | 143.204.55.102 | 200 OK | 15 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash80f9f2fb77f37a3e57ac55d15de1a43b 9004c534f4e2730a4ed3985985db7527bfb6273c 4ad008815ae7efa7a3bbcabfc46d22e62f3206f3141d9d7ec8dbbb754f444a9d
GET /xdata/images/xphoto/263x210/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 09 Apr 2024 06:57:37 GMT
content-language: 14855
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "a2e688bec1fbee393df26f05a03c77c9d1bb9e79"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AWy2N9EPTzx-dEKQf_uIm2rV78iTmZ5fZ8MDwXe-ecZ0AUYReArHQA==
age: 1509980
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040697.jpg?k=41d25557effcaa027632902ae406782397a6ca3ca0325e287052b42ba0888254&o= | 143.204.55.102 | 200 OK | 11 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040697.jpg?k=41d25557effcaa027632902ae406782397a6ca3ca0325e287052b42ba0888254&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash38cb97ae348675ed350a18dcf959a79b 0b4d788f789b09c97f8f7207fdb5f1110200b824 b51061c18d61d5e04e945ef5ddc1dfeb4dc2e6c0eafbe9c8b28b65fb9d19d916
GET /xdata/images/xphoto/300x240/140040697.jpg?k=41d25557effcaa027632902ae406782397a6ca3ca0325e287052b42ba0888254&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Fri, 19 Apr 2024 20:00:41 GMT
content-language: 10954
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "57fbc3a51fd1d9629435eb09be5674ed1830365b"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B8bcX2wm4lzqjd6QW-lWvoWFa8oN6TekAMGnsePUb4KPZJT3YB3rVg==
age: 598996
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png | 143.204.55.102 | 200 OK | 62 kB |
URL GET HTTP/2q-xx.bstatic.com/psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typePNG image data, 714 x 471, 8-bit/color RGBA, non-interlaced Hashd8c78bb4aa47ab6ae3df9d9e2fd9501e 8c959e1da33c4eee451ef13e2cd0f8b2327b7f76 34643ff9ca4b3ea1209f72b31dfcf85c0d23a9d389766bd908eff7a8dfd51f8a
GET /psb/capla/static/media/bh_aw_cpg_main_image.b4347622.png HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 62401
last-modified: Wed, 24 Apr 2024 13:01:51 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: CPtggRP3y3LRuBo.MWtjEXcVviADyrcQ
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 05:07:55 GMT
etag: "d8c78bb4aa47ab6ae3df9d9e2fd9501e"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: syPoIHSUCQNKcKExdQOscLNjuff0xlieu-Nu0UV2zbx0r_tdN2NctA==
age: 47761
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/210792809.webp?k=6170b51b1f9356c201baa66e7baac73172a8469c3172fa778807440c35bdb7b9&o= | 143.204.55.102 | 200 OK | 38 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/210792809.webp?k=6170b51b1f9356c201baa66e7baac73172a8469c3172fa778807440c35bdb7b9&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashd7bd697a145dca7e96b74b2e22b675fc d7d6250840e0c0669ac303575a8cdc6363569133 7b8714f40119313ded2df56f244ce398edfb8c4c133e948a34daf441d11af8c1
GET /xdata/images/hotel/square600/210792809.webp?k=6170b51b1f9356c201baa66e7baac73172a8469c3172fa778807440c35bdb7b9&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sat, 30 Mar 2024 06:30:13 GMT
content-language: 38024
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "b48b1f0a21d2a22eb3678afffd092603f86a0391"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ojn2iBIEVRL2lhH0xsA6ztfapwzbf9Gbd5j9wZLf8KqlVAZ3XOgCEA==
age: 2375624
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/index_cloudfront_sd/00ef59d1d298ebea439f8e36e90bb8a5219483e4.js | 143.204.55.102 | 200 OK | 23 kB |
URL GET HTTP/2cf.bstatic.com/static/js/index_cloudfront_sd/00ef59d1d298ebea439f8e36e90bb8a5219483e4.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (23416), with no line terminators Hashe63ba30226eb358d897dd4a329d67b1e 6f1e9d93a96644eb9633206493b21064ccf4ad20 19b629d7f80b46122825e5069520f4f9470823fc6c92461f2365518ea57f93fc
GET /static/js/index_cloudfront_sd/00ef59d1d298ebea439f8e36e90bb8a5219483e4.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 19 Apr 2024 09:18:47 GMT
last-modified: Fri, 19 Apr 2024 08:49:11 GMT
etag: W/"66223007-5b78"
expires: Sun, 19 May 2024 09:18:47 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xxPjHsBdgVCrkl4rV38vSB4uwHT65nhETNCx2agYN8xfLIo8VIEkPA==
age: 637507
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/7943e0ea.b51cd998.chunk.css | 143.204.55.102 | 200 OK | 3.1 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/7943e0ea.b51cd998.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3087), with no line terminators Hashb9a84caf6d346087ae9c2a5a7d9c8b51 17871f911ca8e70d6c18b80d97ab0fe4768d35cc 3c17056090a28d594e8b6144bedbfd04008427f984512c761c5b540eba7dbb71
GET /psb/capla/static/css/7943e0ea.b51cd998.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Thu, 25 Apr 2024 20:24:19 GMT
last-modified: Thu, 25 Apr 2024 14:58:32 GMT
etag: W/"7b002d11908ac54190933646142ed170"
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: WRgvopPAdLut0YtQPVLkTbpymrD9mMeb
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EWS2gb_-lMbYg8VlWRKWFl57cpLv_jmygztCbSCPhkPefYAefzCzPA==
age: 79176
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css | 143.204.55.102 | 200 OK | 5.0 kB |
URL GET HTTP/2cf.bstatic.com/static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (5040), with no line terminators Hash689bfb4a6655c31e51465ba2a8562a49 a567c39c5556aa5b892c9e4ec64c89f4bf3445a3 d818703914dd98ca34912916271657909683dc9d83d91aaf90528918b428dc6b
GET /static/css/print/0cc4ce4b7108d42a9f293fc9b654f749d84ba4eb.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
server: nginx
date: Wed, 17 Apr 2024 23:59:31 GMT
last-modified: Wed, 10 Apr 2019 11:21:34 GMT
expires: Fri, 17 May 2024 23:59:31 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"5cadd1be-13ac"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: O3A9xA0I29HJlVM2lVwB9E1QtbpRfN-xnOa7VtiTKLlzm4LV35T-Fw==
age: 757465
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/e6419570-52cc-432d-ba1e-7300290f1970/en-us.json | 104.19.177.52 | 200 OK | 88 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/e6419570-52cc-432d-ba1e-7300290f1970/en-us.json IP104.19.177.52:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /consent/3ea94870-d4b1-483a-b1d2-faf1d982bb31/e6419570-52cc-432d-ba1e-7300290f1970/en-us.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:23:56 GMT
content-type: application/x-javascript
content-length: 22791
cf-ray: 87a89b58ce0a569f-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 896
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC5A21A15B50A2
expires: Sat, 27 Apr 2024 18:23:56 GMT
last-modified: Thu, 11 Apr 2024 12:19:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: jkmlfX45zinbAuvqLt6A+A==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 14e1907d-f01e-0014-3a0a-8c71ec000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=cCHObTULHfAFFQZcNHFXbEIdAJOdKNKNKWe|1&etgwv= | 143.204.55.27 | 200 OK | 12 B |
URL GET HTTP/2www.booking.com/js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=cCHObTULHfAFFQZcNHFXbEIdAJOdKNKNKWe|1&etgwv= IP143.204.55.27:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash45e0d10a08ad25f44cb9c2b6e732858c 8e47bb27521f644194d8d6ed92c22513a68715d9 4c55d6d27f3d4503e15ce98f4e4cccc15a49ecc0445a3a0996578437f7ab701f
GET /js_tracking?ref_action=index&ver=2&stype=1&lang=en-us&pid=6a8e815c724901eb&ete=&etg=&etcg=&ets=cCHObTULHfAFFQZcNHFXbEIdAJOdKNKNKWe|1&etgwv= HTTP/1.1
Host: www.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT
X-Booking-Info:
X-Booking-Client-Info:
X-Booking-Pageview-Id: 6a8e815c724901eb
X-Booking-SiteType-Id: 1
X-Booking-Language-Code: en-us
X-Booking-AID: 2391722
X-Booking-Session-Id: 4d672258ec9524675ee4f0efb8bb8f5e
X-Booking-ET-Serialized-State: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbnmKTRaewPBtYokf%2FVSxjuFMpMDXWB0dJfpyCRarYg7fZv7P6wD3ScHd6mOO2wZjSQE%2B0Tzfj0Zd%2FRebZr%2B%2BOkbtpMnxj%2FUDT81MBEazpSHIGu%2BaexlVuoPPC%2FtTCnDjoKZIsOLbv9gGypzuEnRV5MPA%2BKHIT93UwZxAFGk0%2FsPY%3D; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx; pcm_consent=consentedAt%3D2024-04-26T18%3A23%3A57.593Z%26countryCode%3DNO%26expiresAt%3D2024-10-23T18%3A23%3A57.593Z%26implicit%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr%26consentId%3D54894813-b88e-4c4f-96d1-aa019443e21f%26analytical%3Dfalse%26marketing%3Dfalse; cors_js=1; bkng_sso_ses=eyJib29raW5nX2dsb2JhbCI6W3siaCI6ImJSQWVIZUZxZzExZXBsSkh1YzBJNld6eUZ0U2oxazJrbEwwWUdWMVcwT0UiLCJhIjoxfV19; bkng_sso_session=e30; OptanonConsent=implicitConsentCountry=GDPR&implicitConsentDate=1714155836009&isGpcEnabled=0&datestamp=Fri+Apr+26+2024+18%3A23%3A57+GMT%2B0000+(GMT)&version=202403.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4ed41ad-7dea-44d8-949c-2758e19f9802&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A0%2CC0004%3A0&backfilled_at=1714155837729&backfilled_seed=1; BJS=-; 11_srd=%7B%22features%22%3A%5B%7B%22id%22%3A16%7D%5D%2C%22score%22%3A3%2C%22detected%22%3Afalse%7D; OptanonAlertBoxClosed=2024-04-26T18:23:57.170Z; bkng_sso_auth_1714155837=CAIQsOnuTRp4KCIvZmBhztj5f88rWlSVRvCem4kADRAEZ6q4NXhPWR9ksFcmCXWQV7kxhUyProDdKfCrJXjLFqKVxwtK3fm5P7k9WVWmZYtfxiq8UnWPg6v0LdsTfscFR5kTukH7eQKk+nsFOghcVvapw4IRLLCl9H/oFzKZHMZx
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 35
server: nginx
date: Fri, 26 Apr 2024 18:23:58 GMT
vary: User-Agent, Accept-Encoding
content-encoding: br
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: frame-ancestors 'none'; report-uri https://nellie.booking.com/csp-report-uri?type=report&tag=112&pid=d3f6815f526100ff&e=UmFuZG9tSVYkc2RlIyh9Yea92wm0yRUjnCBymoy8ejIm9_qs5OayJB8ijfPNaQzuNgS8lphggKo
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: koszcqiKz4MNwdXZj4iuuOHfVvNPpZ9HhFvDW3Bmp6xJ8lqO2BVGKw==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/540x405/288300879.webp?k=20a291605b4d1cc6c15b1ee3f9598c22ddb81a8d5ed73135330e426f8d2b9629&o= | 143.204.55.102 | 200 OK | 34 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/540x405/288300879.webp?k=20a291605b4d1cc6c15b1ee3f9598c22ddb81a8d5ed73135330e426f8d2b9629&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 540x405, Scaling: [none]x[none], YUV color, decoders should clamp Hashed15c7eab00365afe2301cd0a8bd190b 9cf0b02b677b2112a0cfda6905353d00193b2b42 36694e5a25f657e8b2bc469c0fd5b8cd3c61bf125f56254187867599499fcfb4
GET /xdata/images/xphoto/540x405/288300879.webp?k=20a291605b4d1cc6c15b1ee3f9598c22ddb81a8d5ed73135330e426f8d2b9629&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Wed, 03 Apr 2024 04:47:08 GMT
content-language: 33828
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "295b294e3a0689b395787df4e43c129bf4669e6d"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: auJUJreG5l4H7QGCgVBx9rg2i46nDwHR3TqDgYEitGu9LikwvaLuIg==
age: 2036206
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/cross_product_index/toggle/fb6f63d62231f9fe552d79b5448620b2e63c726e.svg | 143.204.55.102 | 200 OK | 1.5 kB |
URL GET HTTP/2cf.bstatic.com/static/img/cross_product_index/toggle/fb6f63d62231f9fe552d79b5448620b2e63c726e.svg IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0f3ac4c3338584ec9c64374ac021c967 138fd9dfeb18fe4467c77b6820ad945f2c21d412 8e4dc331d38b86ecd5067f9b1467bc5a0f01542a8bdf6f754c209e59daaa0a09
GET /static/img/cross_product_index/toggle/fb6f63d62231f9fe552d79b5448620b2e63c726e.svg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Sat, 20 Apr 2024 09:45:17 GMT
last-modified: Wed, 10 Apr 2019 11:21:51 GMT
expires: Mon, 20 May 2024 09:45:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"5cadd1cf-5e7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OklhunONDY86_9oOr3a8rG3JU91zvVDvnpv2ufiUqTKNGALxQJFWoA==
age: 549518
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashdeb542d99141efe2386fcc72283af582 854409bb8dce07be7122904445a5d5cb4f866e8c a70038725ecc3cbf4bfe6470f2ba07e07fdb5a4737104217e928f83260ecdd74
GET /xdata/images/xphoto/263x210/45450074.jpeg?k=7039b03a94f3b99262c4b3054b0edcbbb91e9dade85b6efc880d45288a06c126&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 23 Apr 2024 07:44:48 GMT
content-language: 16100
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "b20b1dc7e36ae82b6a50902c9ab2912586cb4c09"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TgB0WWsxbHryOxAOU35_n2w8iyeE8s6Ac1ri-f6UosePxZ2aU9UI7w==
age: 297549
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= | 143.204.55.102 | 200 OK | 13 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash046a6e4db3f4ea1dc3b0044b48f93093 e0997c00add73d0b3b38ccc79e9ba67b447e3f59 6676ced592b6b4e143ff6a71c0dd4a0a0d0f2c040d7d689f58b0053e09c82365
GET /xdata/images/xphoto/263x210/45450056.jpeg?k=251e2507d43a24a4c58bb961b8d157147d56efbf91b49f9606bc768c58f581e4&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 08 Apr 2024 10:45:21 GMT
content-language: 13102
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "c408c193e9cbf1666a3bde4c62115b2ece30df49"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hX-UvftwKIz_jzuVIwEFCcBMCm1O2odEaYx1bNpg8ci9qKEhfBYYgQ==
age: 1582716
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/106548982.webp?k=6464bb1807bbc9f4f9c408328c8df98bdfb5a885f7fc51712fcefc417b8472f7&o= | 143.204.55.102 | 200 OK | 44 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/106548982.webp?k=6464bb1807bbc9f4f9c408328c8df98bdfb5a885f7fc51712fcefc417b8472f7&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hashae73cf7dfa7da7510e6fd827ec3f5df5 d79115961e0524533666105e89435b8a8c7df879 f2cd2bae405dd2a3fedc811d6d518e1f2a10ddc43db3356f0b3b66a8bb3a6a3e
GET /xdata/images/hotel/square600/106548982.webp?k=6464bb1807bbc9f4f9c408328c8df98bdfb5a885f7fc51712fcefc417b8472f7&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Thu, 04 Apr 2024 08:14:41 GMT
content-language: 43662
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "39334ed1ecfc886f562ecb40cc71f27008acb4fd"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FW64XQE6lxTCcStm2SXbVlyUFqqxuKfWobMfT8fOvH9WmJUnNN5iCg==
age: 1937356
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/154511781.webp?k=96a999df5a226a5d946bdaf98cc1ef8050a0efc6d365924580983dfddc253f78&o= | 143.204.55.102 | 200 OK | 36 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/154511781.webp?k=96a999df5a226a5d946bdaf98cc1ef8050a0efc6d365924580983dfddc253f78&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash6808e58114882058edbcd868ae91b9e6 80c77ba1b2e49e6dc9231ead998b4d0c1f981abe 7e42eab1742ebfd26e43b5954e721b0bc9c6a2fd1421269e767a7b5d63785fc0
GET /xdata/images/hotel/square600/154511781.webp?k=96a999df5a226a5d946bdaf98cc1ef8050a0efc6d365924580983dfddc253f78&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Wed, 17 Apr 2024 08:16:30 GMT
content-language: 36344
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "43bd47345ff82cc44d62259bdd2a8158663a0b2a"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qDtMSHEVTp-2k7lHjwZhvekXoX-mvntpC1SsT26-J4v9DqjyUHlc0g==
age: 814047
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/c8637181.7f86a371.chunk.js | 143.204.55.102 | 200 OK | 46 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/c8637181.7f86a371.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (45296) Hash1085741a1418d67ecef2f7667d71baea f88c5937384662206c415f67dd92b0db8e8a56d7 60173581aaa9b56ea681fdd7771760fdad20615e811ae0b73dc931a71cb4f2a0
GET /psb/capla/static/js/c8637181.7f86a371.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 11:41:53 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: UfRAwlceY3OyLzZaqayi3Q_2vzMxG1dv
server: AmazonS3
content-encoding: br
date: Fri, 26 Apr 2024 02:52:45 GMT
etag: W/"1085741a1418d67ecef2f7667d71baea"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pcyzN2UXjx7DKJgbOT8pRAMRK2qaDQ3OjmhBHuPp2EHYYQPT2ZIUeA==
age: 55870
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/138d388521c0fb45e14005cb8098ebebb7158dce.js | 143.204.55.102 | 200 OK | 621 kB |
URL GET HTTP/2cf.bstatic.com/static/js/atlas_cst_cloudfront_sd/138d388521c0fb45e14005cb8098ebebb7158dce.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size621 kB (621029 bytes) Hash3a5094ad3864e2147bddb05eca0e04dc 93c30c0d71f5288a413b52af75a39e50422b5cf6 62e782627287817fdc848a0946c282383dfb97f00888ad3dff6dd92d657d021b
GET /static/js/atlas_cst_cloudfront_sd/138d388521c0fb45e14005cb8098ebebb7158dce.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Sun, 07 Apr 2024 02:30:50 GMT
last-modified: Wed, 10 Jan 2024 11:45:34 GMT
etag: W/"659e835e-979e5"
expires: Tue, 07 May 2024 02:30:50 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HAnzXKYpRdEkVWmmKbJUIOqvWkWw8FCwrQ-H0OmJfGgE2cd3ThHauA==
age: 1698785
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= | 143.204.55.102 | 200 OK | 10 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hasha84be65e3bb8d5eaa7fef90be796567a 551cdf363ee42d54ec96eb53ce7775f691ff7fb4 f01b19f78cfe046f9bb8a8b7f141f8c2fb0cef0a519adffee6dfb7009199b05e
GET /xdata/images/xphoto/263x210/45450058.jpeg?k=2449eb55e8269a66952858c80fd7bdec987f9514cd79d58685651b7d6e9cdfcf&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:22:09 GMT
content-language: 10145
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "418ccc7d8bc2472340222db59b4efba9f0d7bac7"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zMPKJ0zhOB4yRqxOpK3sbKNxjPYxmOib5HHoM9cSZ6tKhjTv49NuLg==
age: 194508
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/97a643cd.b0e8ae10.chunk.js | 143.204.55.102 | 200 OK | 20 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/97a643cd.b0e8ae10.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19646) Hashb2c124026779587267b8fc0e4e153201 2b2cf1f1c0eca138a50c812517e90652a5b4aea8 7fa3b2674b0fba4cdf547e0d4198cb75b2357250ecd09df64c940556da52fe5c
GET /psb/capla/static/js/97a643cd.b0e8ae10.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:50 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: otnpWh7pGLsTNsgMWt4Jp5L1G2538FmH
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"b2c124026779587267b8fc0e4e153201"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vP-9oxK2a4ESkE7j5ZGPlcnzSa3WXR4rZoVczu1Nj_MZsqm3ts-SqA==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=b9a82cb8&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX | 54.230.111.39 | 200 OK | 6.8 kB |
URL GET HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=b9a82cb8&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (7112), with no line terminators Hashc449ac7a74dfa195fe8020e82401daed 8459b330d0a9ec730581281edb13da393a1fae26 d1b3ed74d3ae98faabf7c57633fd00d0d554b2e5e905ec9a7c86ad87276fadc8
GET /orca/chunk-metadata?chunk=b9a82cb8&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.booking.com/
x-booking-et-serialized-state: EjyjIpuI-Xtr1rZIvxWvfpdQsXztuSkBWIDLi18UVKs_XITMr3v8Zb8GHvxS5t5Xo
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Cookie: px_init=0; bkng=11UmFuZG9tSVYkc2RlIyh9Yaa29%2F3xUOLbwcLxQQ4VaCpdeSn3om2xFRhTyMGAL%2BdFukEcyIyok%2FnKLckPi4ZmrJA1oDUg15qgf%2FO4WcEhByGgqS1bGcxkdQWAPAphCZdDWjVPU5diYYWjoPQcVCLgMye%2FL%2BCaX72zyISC3jmRcLMEc%2BaZSvMKhNvxK8sxtulQ; pcm_personalization_disabled=0; bkng_sso_auth=CAIQsOnuTRpmjjr5SWn8CBn0kL7tw3kDY6vWruMOg+zZ85aon0luAAheg1Mfxldpiz/xVzOtcJFRpj3eQpZaf0V4fC62DVM2w+4SJin5hfuq50IuNN7kG9GWugs7abz/cMeC9pURTkPkI3MeY01J; pcm_consent=analytical%3Dfalse%26countryCode%3DNO%26consentId%3Dac0bf38d-9af4-4d61-afc5-94a5ee817abf%26consentedAt%3D2024-04-26T18%3A23%3A53.534Z%26expiresAt%3D2024-10-23T18%3A23%3A53.534Z%26implicit%3Dtrue%26marketing%3Dfalse%26regionCode%3D03%26regulation%3Dgdpr%26legacyRegulation%3Dgdpr; cors_js=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.booking.com
vary: Accept-Encoding
access-control-allow-credentials: true
referrer-policy: no-referrer
content-encoding: gzip
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q0Sr79FpoNmDhz_m0mpbnJFZRWAsucAFPuaqCS6rAH9vy17x1FoV0A==
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/city/170x136/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= | 143.204.55.102 | 200 OK | 5.4 kB |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/city/170x136/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hash2500c3ceb70ede8cd27aa8104b6ba08d 171e77bfa910c602acd969ad5a2d6240764a01e2 85d4039adc55e4225f4f70866622be1d30a8978738539db37085264adff1c3d2
GET /xdata/images/city/170x136/644293.jpg?k=24c08396bd44343c9dcc78f0df41e114bf7e6aeda3d339101c37e7ba3aa707db&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5421
server: nginx
content-language: 5421
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Sat, 30 Mar 2024 06:11:33 GMT
cache-control: max-age=2592000
etag: "0cc34fa50815c534b0e6a4a3db51d7118e56da40"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ADoekmGJfG8FK-oKyezgWTAZKgTnVkP2JuSANQAprhDHNpSfXaXX-w==
age: 2376744
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/city/170x136/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= | 143.204.55.112 | 200 OK | 5.5 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/city/170x136/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 170x136, components 3 Hashafd71fd06632ac473b4c251dffc12f63 e9d7fc8cf381fa446a6c32178db4de8c5eaf7262 c9a8fd71cb76919e8b749e4b4055810bb6f6ab84f1171d06bdd70b02893c95cb
GET /xdata/images/city/170x136/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5506
server: nginx
content-language: 5506
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 28 Mar 2024 06:03:52 GMT
cache-control: max-age=2592000
etag: "f5b49c8fdf8a6456146164dfee48119609520783"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9OnlMi4BGgwCHcmpL5IwILD_D4GFSTlAsftg2MEKh2VSEpKZA1i29w==
age: 2550005
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040659.jpg?k=4554f51b074f61222a8d7d908cf2b8c6586962c49073fe28c4e2fc430e278e13&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040659.jpg?k=4554f51b074f61222a8d7d908cf2b8c6586962c49073fe28c4e2fc430e278e13&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash3d37abeb2e224cc26e5d3911dda9b727 52ffabf08384a0f0b2d887b767307ac78e315d29 400ed136cf68f4c7a9feb9381004eefe88f78b0c489a6a42cbd5a771874af9bc
GET /xdata/images/xphoto/300x240/140040659.jpg?k=4554f51b074f61222a8d7d908cf2b8c6586962c49073fe28c4e2fc430e278e13&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 17 Apr 2024 11:02:13 GMT
content-language: 16525
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "649a64b7ed9c18ffd4e8feab2175eeecae499d46"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vI8kuSKNsgkbnkeArCWhSnpaKTgAT7tqd9_OZRvTR2vMvbCB5XO9sQ==
age: 804104
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js | 143.204.55.102 | 200 OK | 12 kB |
URL GET HTTP/2cf.bstatic.com/libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11709), with no line terminators Hash2885fec5fbf3a9e77da4bf6ac7838469 c10928fd9a50458024678a435d929052db47c78f 84cc7c5d44516d6e6564bdb74456edf2df2385f8b6f21b4daef362c23d6ce990
GET /libs/privacy-consent/releases/2.1.55/customer/cookie-banner.min.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Fri, 26 Apr 2024 13:05:26 GMT
last-modified: Fri, 26 Apr 2024 12:58:15 GMT
etag: W/"662ba4e7-2dbd"
expires: Sun, 26 May 2024 13:05:26 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Gz6BftkdVRIXFNDVxBEkleg9_jN_FXYv3XUdnvN1PNhkro6nhvv6Mg==
age: 19108
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js | 143.204.55.102 | 200 OK | 105 kB |
URL GET HTTP/2cf.bstatic.com/static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (60582) Size105 kB (105026 bytes) Hash1a16f971ed98c047c8fa288987383922 04200a6f3b25cdfa04551f635d025fc64743b4ff 5ad7526d50b7586ddfaee62b3fc95e71207136dc08f6a2b7ffd671ded73fab83
GET /static/js/jquery_cloudfront_sd/e1e8c0e862309cb4caf3c0d5fbea48bfb8eaad42.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: nginx
date: Thu, 18 Apr 2024 02:01:56 GMT
last-modified: Tue, 28 Jun 2022 13:43:41 GMT
etag: W/"62bb058d-19a42"
expires: Sat, 18 May 2024 02:01:56 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8oTESgzczgxFZqb85dqmhukEpeZ-ph7RNXYrsIOO-jrO74IS8yjE3Q==
age: 750118
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/467167582.webp?k=8190946ffdd138b82898fb5381f6bfd638f5897fa1ce24307eb2051338bc66e5&o= | 143.204.55.102 | 200 OK | 53 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/467167582.webp?k=8190946ffdd138b82898fb5381f6bfd638f5897fa1ce24307eb2051338bc66e5&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hash8bfe15f5529789baa643943635ea92f6 9708adef63de0787d7a574937b7fc825eb7ee1e0 812e906630a8a88cac0746ec08c6adfe9bfe8e4771300e3def801f1af6bc1342
GET /xdata/images/hotel/square600/467167582.webp?k=8190946ffdd138b82898fb5381f6bfd638f5897fa1ce24307eb2051338bc66e5&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Sat, 30 Mar 2024 12:31:19 GMT
etag: "b394b5da7c02a7484a883425b687034d0cc77048"
content-language: 53362
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: x3-Y-jW0L36_lFqzJrVQs8QV56lJ2EInx6NflffDmcCIsBUSDFQa9g==
age: 2353958
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/city/600x600/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= | 143.204.55.102 | 200 OK | 74 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/city/600x600/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, components 3 Hash60b8665aff1e28f230d4fd9e1a479a31 4352c75c225caabb5d3848296dea9732f8e8af67 b41a7c475c3ff89bccf20787bd207218bc85a2eb3318a79300f29a5b6d09bea7
GET /xdata/images/city/600x600/644297.jpg?k=1ec66dc12696bc2551f325c7318ab5d1cfec23c955b375a30e5d466cf23f6d87&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-language: 74421
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Wed, 10 Apr 2024 06:10:27 GMT
cache-control: max-age=2592000
etag: "f1eb698e0ca9fa1026cedd38aa4a946666a07db1"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YNCZ0mj464ymvLdRz4xoa9IBWKa9MPPac2SjpVmu78_fIGrRh5PudQ==
age: 1426408
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/city/600x600/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= | 143.204.55.102 | 200 OK | 57 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/city/600x600/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, components 3 Hasha3c19e8e336a73bc6ccf10b5750903e7 cafc5470a580f4a01b02d991187079efbf888987 9e76043e1541f197c4af1a9dd15ed9e1a594f7823bfc01b9b639fa7d67e272d6
GET /xdata/images/city/600x600/740935.jpg?k=d90fa40b53bd16d8d06214496648ebbbccb96cff3946793c569e50103d363ec1&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 16 Apr 2024 06:02:57 GMT
content-language: 57347
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "68f1a2cb27ba71e46bd94e0d537615275224763d"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xfjjhKqyu5MCHR5LGm_ngW_UFLzFmugzQVt5ONHIWe1xOHbcVZ-FdQ==
age: 908458
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/ebf8c3e3.b99957c0.chunk.js | 143.204.55.102 | 200 OK | 20 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/ebf8c3e3.b99957c0.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (19761) Hash2aca83984b552b85360a7aa6cb91e69c c4baf15f5b5588b42b40e9c852efc14e021179ca e1eba5254ca7d75a7a2ce4ed42ad5bc3cef0ffdc321c05a31e84fef914b5b8fa
GET /psb/capla/static/js/ebf8c3e3.b99957c0.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 10:07:01 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: RoLOh1NYpAVoFgEQoYxFzmuVz_zYGQge
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 19:51:03 GMT
etag: W/"2aca83984b552b85360a7aa6cb91e69c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -_WSSC_3sBqafeZUX55nbAeHKcCruZUVZ0oLFatDTIfsmdjxTcyneQ==
age: 81172
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/59306dc3.23f816da.chunk.js | 143.204.55.102 | 200 OK | 191 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/59306dc3.23f816da.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65455) Size191 kB (190979 bytes) Hashcc7ddd406c7e6719d88ad3fff7367091 63e9b0a89e125c1615ff92640c453190c59bbcd1 924d9e23ebd73b686457491de1a2509b517d698d5add7cb3f24f5325aa284851
GET /psb/capla/static/js/59306dc3.23f816da.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 13:01:50 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: cBzHS1BvbAdLWsD.bT7NgWq5ltYhWRu5
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 05:08:02 GMT
etag: W/"cc7ddd406c7e6719d88ad3fff7367091"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1zyjNErHsRXddyFj_rjGDzp1Fojb0H9r2uU9mesyhx9taxXkOe_rFg==
age: 47753
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/static/img/cross_product_index/accommodation/07ca5cacc9d77a7b50ca3c424ecd606114d9be75.svg | 143.204.55.102 | 200 OK | 2.0 kB |
URL GET HTTP/2cf.bstatic.com/static/img/cross_product_index/accommodation/07ca5cacc9d77a7b50ca3c424ecd606114d9be75.svg IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf52b4d4c5be2441d361c911ca352e53d 6d5caa7e4406fe7591e4d6fc6042a0db2a6ae1b9 e245da87814303ea69383f0ef1b8113360fe87d990aeda6207dcce34fdbc2078
GET /static/img/cross_product_index/accommodation/07ca5cacc9d77a7b50ca3c424ecd606114d9be75.svg HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/static/css/xp-index-sb_cloudfront_sd.iq_ltr/5b5ab8ab66a5ce3092875d0725122439c4f2dfdd.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Sat, 20 Apr 2024 09:45:17 GMT
last-modified: Wed, 10 Apr 2019 11:21:51 GMT
expires: Mon, 20 May 2024 09:45:17 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
nel: {"report_to":"default","max_age":600}
report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05}
content-encoding: br
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: W/"5cadd1cf-7f2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8EE1fAlneEQUtb42YQrNPgVAGzTLGg0wX4jYacpYoVk7FM4mYULV0g==
age: 549518
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040875.jpg?k=360748fdf13d9cec4beefd1d49cb4b2cd7693ab5f476c4d2d4ceb1759c824dac&o= | 143.204.55.102 | 200 OK | 16 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040875.jpg?k=360748fdf13d9cec4beefd1d49cb4b2cd7693ab5f476c4d2d4ceb1759c824dac&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash623a63e6772986e519cb4845f07f6db2 477f940b110159a214c0954fa9a917e6c6b827de c3390d75de275a75064cb11f49dcb6933f543b8fa1edacb761dba79b1340659d
GET /xdata/images/xphoto/300x240/140040875.jpg?k=360748fdf13d9cec4beefd1d49cb4b2cd7693ab5f476c4d2d4ceb1759c824dac&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-language: 16378
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Thu, 04 Apr 2024 08:16:21 GMT
cache-control: max-age=2592000
etag: "45d40c4e06c9b83da1b1e7ac00d888b91ea9061c"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mgT2ZtOLct18zUqDVcOugC_UwXrky2IlUfohBnUlKDTRS9xLE79gvw==
age: 1937256
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/hotel/263x210/119467716.jpeg?k=f3c2c6271ab71513e044e48dfde378fcd6bb80cb893e39b9b78b33a60c0131c9&o= | 143.204.55.112 | 200 OK | 11 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/hotel/263x210/119467716.jpeg?k=f3c2c6271ab71513e044e48dfde378fcd6bb80cb893e39b9b78b33a60c0131c9&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash33bfa10dc5bc4ef8339bd5abeb8548ea 957c2b9e899e2520a2c97f21d638fca030da5a43 0380753c60c2fa8bd19a5346b32e08dd50be778fa3d850147638eb16c16bf0b2
GET /xdata/images/hotel/263x210/119467716.jpeg?k=f3c2c6271ab71513e044e48dfde378fcd6bb80cb893e39b9b78b33a60c0131c9&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Thu, 04 Apr 2024 22:21:02 GMT
content-language: 10601
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "118c01722e55044d816db848ac471d09024e4d85"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fxJJfJ5y2D66wA0i3yaCfzRsXrPygyetHjuh9XE0gOM79rFJG5CfMQ==
age: 1886575
X-Firefox-Spdy: h2
|
|
| t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff | 143.204.55.102 | 200 OK | 42 kB |
URL GET HTTP/2t-cf.bstatic.com/design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeWeb Open Font Format, TrueType, length 41976, version 2.0 Hashb2ca1822b16a92e0a0111c994cfe4b8a ad3bf01829f003d1e837fdae30b97e4911528c0f 12269c2adb9da8c73e2d8e5628566e4662720bdff4687c3bd6190571ff8c3b05
GET /design-assets/assets/v3.81.0/fonts-brand/BookingBold.woff HTTP/1.1
Host: t-cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://cf.bstatic.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 41976
last-modified: Tue, 25 Jul 2023 15:38:06 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 01:36:14 GMT
etag: "b2ca1822b16a92e0a0111c994cfe4b8a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8pq90mdqWx1-0EmQ1wtGVx5eEMRGupq82p769Sm6pAzVE43oy540ig==
age: 60676
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/915bfb5a.c823f737.chunk.js | 143.204.55.102 | 200 OK | 634 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/915bfb5a.c823f737.chunk.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (647), with no line terminators Hashd59aac6bfd8b0f750509bd012aa898f2 4f886adb32e3118eebc0d2636055901669fc6689 d1e448b1c654d6e72f5444e448ca24ed9589c53ab98d91f22f861c0a8a1a069e
GET /psb/capla/static/js/915bfb5a.c823f737.chunk.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 634
last-modified: Wed, 24 Apr 2024 13:01:20 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: DY38qilaL7dL0JhUHG.4kKOCLFKoDfy7
accept-ranges: bytes
server: AmazonS3
date: Thu, 25 Apr 2024 19:05:09 GMT
etag: "a0bc3385c51a9c872eef09d1c8a406f8"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: R4JCdSQpqVgJEE-EbRBU2hwhTcJlQWvNz7nPgB-UYoOLlDzS9Hcz0A==
age: 83927
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/262247242.webp?k=bbfb11d6ac0fdb03a1aaa1e993bf05320777bf5e999d0531a3ada9afbf28dc7a&o= | 143.204.55.102 | 200 OK | 130 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/262247242.webp?k=bbfb11d6ac0fdb03a1aaa1e993bf05320777bf5e999d0531a3ada9afbf28dc7a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Size130 kB (129882 bytes) Hash4307165330c926ee501017439d6fd4ed 9467e6f6308c66ca44b1efb53e287eb698faf796 4668c066878deb7733b98bf57a0ba5bde47646214e4568746697adc24a1ad39a
GET /xdata/images/hotel/square600/262247242.webp?k=bbfb11d6ac0fdb03a1aaa1e993bf05320777bf5e999d0531a3ada9afbf28dc7a&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Thu, 18 Apr 2024 10:14:58 GMT
content-language: 129882
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "e0803850a71219c24699f57db52a6c2566e27cd4"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iwaYbogtn_NbRrA1_NUQHjoejkA_j1Voutu7iDKcRxx6epd5tUx7UQ==
age: 720539
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040641.jpg?k=51430fc1c9d907e05f70315ea470cc0dd50f1e09975e2655037bd2183a90d89e&o= | 143.204.55.102 | 200 OK | 19 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040641.jpg?k=51430fc1c9d907e05f70315ea470cc0dd50f1e09975e2655037bd2183a90d89e&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash8b2c9a3e64a62c5c6a5a870a3d90e682 a993e18846a5fd1b148db09575ec0e788e032bc6 228dbc1009f8d9e68f267adc615f4d8ec00f0eb33a7c78d62b0654f00a1a6b5f
GET /xdata/images/xphoto/300x240/140040641.jpg?k=51430fc1c9d907e05f70315ea470cc0dd50f1e09975e2655037bd2183a90d89e&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 16 Apr 2024 06:03:14 GMT
content-language: 19005
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "df8b3d9ff1a756941a69449f31f1550ed7911c94"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7PQIgTa_AT9bZje0_WsJHk_UxzCFoOGFf-pCbfwwQOP_fyN9uwrXNg==
age: 908443
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/dc32f6b7.116c3af7.chunk.css | 143.204.55.102 | 200 OK | 3.9 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/dc32f6b7.116c3af7.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (3851), with no line terminators Hashb0376f7880c430c3476dfec9ce76e32b 839dce3dfd6ebd34c8320cf7a8cc85a5d9990b31 856a451134791d9e15feb3b09bd55be1df2c99f3a2ec195a732008054215e5e7
GET /psb/capla/static/css/dc32f6b7.116c3af7.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 25 Apr 2024 15:02:20 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 7bFt6jFrPF4h6LMmib6K8LpL7XvgIz9O
server: AmazonS3
content-encoding: gzip
date: Fri, 26 Apr 2024 16:32:58 GMT
etag: W/"396b5f57ede1b9aaabe3a03852662815"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z5Y9I_uhhfs-gmTBk4TyAa2obJeQjC6ZP9NxqeTynyllhfGGxJefWg==
age: 6657
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/hotel/square600/121402222.webp?k=f7f266ab09f90ddea4464309eca14d79429afe4218ced6887cb52f82c42c03dc&o= | 143.204.55.102 | 200 OK | 34 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/hotel/square600/121402222.webp?k=f7f266ab09f90ddea4464309eca14d79429afe4218ced6887cb52f82c42c03dc&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp Hasheab69748348b340551f3cfc8774f9910 0c69822157945be93772cdc86c779d5132c37376 a7297900e4808b3bdc9b4032ed0428423704f3257032f319f5827a92b2d1fa49
GET /xdata/images/hotel/square600/121402222.webp?k=f7f266ab09f90ddea4464309eca14d79429afe4218ced6887cb52f82c42c03dc&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 34306
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "fbf68e72bd156917d0dac6260bace82885dfe51a"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Sqy-mKbVCiNj_qm3Fksm_Wf3yW3Wrw0oiVqne89weyzjd5zZlGFe9w==
age: 2170370
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/d8454389.885c4071.chunk.css | 143.204.55.102 | 200 OK | 2.3 kB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/d8454389.885c4071.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with very long lines (2258), with no line terminators Hash9b01b88dabee25f1eb6317061cdcbfda 6dd769a7388d46e5c34e75fcbc95a46c27929974 56a9aba43e9d93742385a326ce602513e0b993ae61faf14122e77f7bd4d5420e
GET /psb/capla/static/css/d8454389.885c4071.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: .WnB0tg4O_yWX.iRvOADsYJOwy4u6tCS
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:31 GMT
etag: W/"62e83efc99ede7713cc74e471c1f9139"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s1BaNYtaIioBAi7SDmaCjXeAhe7UMmVZjnkkvZIgV0-1VCfvHX9Z1A==
age: 84563
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| q-xx.bstatic.com/xdata/images/xphoto/263x210/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= | 143.204.55.102 | 200 OK | 0 B |
URL GET HTTP/2q-xx.bstatic.com/xdata/images/xphoto/263x210/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xdata/images/xphoto/263x210/45450064.jpeg?k=4d4ea22dc4828fd55a3889e90531c9841ddb2d9abf460c420cdd24f2a9b658d2&o= HTTP/1.1
Host: q-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 09 Apr 2024 06:57:37 GMT
content-language: 14855
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "a2e688bec1fbee393df26f05a03c77c9d1bb9e79"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: COazQxU-U1WDGxUzSF3MpoEfV2AjURLO9QoQoDroRqqA2D1HTV8_iA==
age: 1509980
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/45450075.jpeg?k=d23cf8443780ac09f46f59e40393d75dbe64b06029b4959c60b81b7fdefc9be0&o= | 143.204.55.112 | 200 OK | 10 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/45450075.jpeg?k=d23cf8443780ac09f46f59e40393d75dbe64b06029b4959c60b81b7fdefc9be0&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hashe70f1d1992db27cada3baaf01be89329 379e6db7407215eec854ae8523b0a88f6134b293 2c67010b9f685164bd1cf6b5fab39fd9f7b3a165357b15a6ca3de2cef7c796e1
GET /xdata/images/xphoto/263x210/45450075.jpeg?k=d23cf8443780ac09f46f59e40393d75dbe64b06029b4959c60b81b7fdefc9be0&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Wed, 24 Apr 2024 12:22:09 GMT
content-language: 10192
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "f6c79f7236f1e41145c4686341201c716b203f84"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZdmhOZ28fvmCUYWGDzINTTBAZSx8D3bB3vy2LUWZriuGVEXsqE2IPA==
age: 194508
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040526.jpg?k=338a312b069769d7c6a1b22f8de714b7cd8070780c108c16b289513964c0075a&o= | 143.204.55.102 | 200 OK | 17 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040526.jpg?k=338a312b069769d7c6a1b22f8de714b7cd8070780c108c16b289513964c0075a&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hasha90a249d0b2e1857e13f4a7518fc6015 a76a3ef3f8c865db80e0489fe1ff68e7c60de19b 23cbd2975941523711f28c03b0f3b792602cb61befaad5d33569167cecc7fb42
GET /xdata/images/xphoto/300x240/140040526.jpg?k=338a312b069769d7c6a1b22f8de714b7cd8070780c108c16b289513964c0075a&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 21 Apr 2024 07:21:42 GMT
content-language: 16920
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "f9ac0a1465250733246d659a9004b954202cee9d"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TcgvmUfBit4gE-ktrdJ_8bOK54S0Pj5AhNMD9ougnj2K7BPzFaCA7w==
age: 471735
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/css/f41dcaf5.0e50dd0f.chunk.css | 143.204.55.102 | 200 OK | 167 B |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/css/f41dcaf5.0e50dd0f.chunk.css IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashfbda431a011773dd250158146407597a d8c4f0d9801789c76a3f97ed0174a7a123244488 b91aea7fa716bcab98f35788602adcd384785f8b19a966ad0c2af24e7efd4700
GET /psb/capla/static/css/f41dcaf5.0e50dd0f.chunk.css HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 167
last-modified: Wed, 24 Apr 2024 13:01:49 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: 15jGs9uDOmFTKjnAikRpl.99kqaJewom
accept-ranges: bytes
server: AmazonS3
date: Fri, 26 Apr 2024 05:08:33 GMT
etag: "f9dc6e8503f60c301c9df4dc902fcf59"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 10E3k7_7snv0UE14HkiQfXyeyU2QmQe_xSS4gLBrMvGKkOxx-sNAgg==
age: 47722
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/714x300/316455553.jpeg?k=33c0362560b6aa7ff9ba2afc3ef8d120728107cf56cd1c006fcf0da8c1821735&o= | 143.204.55.102 | 200 OK | 30 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/714x300/316455553.jpeg?k=33c0362560b6aa7ff9ba2afc3ef8d120728107cf56cd1c006fcf0da8c1821735&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 714x300, components 3 Hash94d01b894e00408f0c033a830d2ed46a f174476984555e5822431f4b0c1c4cb3dd873ddd 1fec38d7cf41965ca5f9545df395b306bb2eb37cd520d8b3ddfeaa1365630e96
GET /xdata/images/xphoto/714x300/316455553.jpeg?k=33c0362560b6aa7ff9ba2afc3ef8d120728107cf56cd1c006fcf0da8c1821735&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-language: 29725
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
date: Fri, 12 Apr 2024 09:45:12 GMT
cache-control: max-age=2592000
etag: "5b80b753d41f161d6177b49c93a30481ddafbb2a"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0crzEb9X4ZyqygtAb7cZYV8lO3RKRIqVXzsxOw92-YfUlTILziGsKw==
age: 1240723
X-Firefox-Spdy: h2
|
|
| accommodations.booking.com/orca/chunk-metadata?chunk=51ee1383&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX | 54.230.111.39 | 200 OK | 0 B |
URL OPTIONS HTTP/2accommodations.booking.com/orca/chunk-metadata?chunk=51ee1383&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX IP54.230.111.39:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.booking.com Fingerprint86:19:2F:3F:C1:B0:CE:07:5A:AD:A3:94:54:8D:C6:B9:99:F5:B9:49 ValidityMon, 12 Jun 2023 00:00:00 GMT - Sat, 18 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /orca/chunk-metadata?chunk=51ee1383&mfe=b-index-lp-web-mfe&lang=en-us&namespace=ZWJQSUBX HTTP/1.1
Host: accommodations.booking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-booking-et-serialized-state
Referer: https://www.booking.com/
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 0
server: nginx
date: Fri, 26 Apr 2024 18:23:56 GMT
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-methods: HEAD,OPTIONS,GET,POST
access-control-allow-headers: x-booking-et-serialized-state
vary: Origin
access-control-allow-origin: https://www.booking.com
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 07qcBKSPIzdE6DBz4xU0qKJTkCYl4dDdja703BfGvdj6Z0VEL_gR8w==
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/psb/capla/static/js/client.d2cb6be6.js | 143.204.55.102 | 200 OK | 1.1 MB |
URL GET HTTP/2cf.bstatic.com/psb/capla/static/js/client.d2cb6be6.js IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
Size1.1 MB (1064040 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /psb/capla/static/js/client.d2cb6be6.js HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.booking.com
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 13:54:51 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-x-deployment-hash: foo
x-amz-version-id: R7rnHMctx.R8Me.gd5PVjUbLl2VSJ_DO
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:54:30 GMT
etag: W/"f1031d8788970169cb0432e7c36664ce"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vKSEJzfcikRtpcih4hUo097zamalEJGdAcxve_wYfaf3vc9Cx8v9bw==
age: 84565
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/hotel/263x210/119467716.jpeg?k=f3c2c6271ab71513e044e48dfde378fcd6bb80cb893e39b9b78b33a60c0131c9&o= | 143.204.55.112 | 200 OK | 11 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/hotel/263x210/119467716.jpeg?k=f3c2c6271ab71513e044e48dfde378fcd6bb80cb893e39b9b78b33a60c0131c9&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash33bfa10dc5bc4ef8339bd5abeb8548ea 957c2b9e899e2520a2c97f21d638fca030da5a43 0380753c60c2fa8bd19a5346b32e08dd50be778fa3d850147638eb16c16bf0b2
GET /xdata/images/hotel/263x210/119467716.jpeg?k=f3c2c6271ab71513e044e48dfde378fcd6bb80cb893e39b9b78b33a60c0131c9&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Thu, 04 Apr 2024 22:21:02 GMT
content-language: 10601
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "118c01722e55044d816db848ac471d09024e4d85"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xc4KHE_Cd8zOCko5Ydj16fHx5zQq2YKixaEbEeSGQa8DvxR6dgUmCQ==
age: 1886575
X-Firefox-Spdy: h2
|
|
| r-xx.bstatic.com/xdata/images/xphoto/263x210/57175023.jpeg?k=dc0319d4d64ded9ee4b0ddb162a2e80db7899300b7bf21b34506888895d74c79&o= | 143.204.55.112 | 200 OK | 14 kB |
URL GET HTTP/2r-xx.bstatic.com/xdata/images/xphoto/263x210/57175023.jpeg?k=dc0319d4d64ded9ee4b0ddb162a2e80db7899300b7bf21b34506888895d74c79&o= IP143.204.55.112:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 263x210, components 3 Hash838fddff0171ed1414657c25c01ecbbe d5141d047b54962f9572d8647909b23bf971cb3b b2d4d41198dc45e52894033452988cdfbec766e6d9c04089070db89033acc4bf
GET /xdata/images/xphoto/263x210/57175023.jpeg?k=dc0319d4d64ded9ee4b0ddb162a2e80db7899300b7bf21b34506888895d74c79&o= HTTP/1.1
Host: r-xx.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 01 Apr 2024 15:31:08 GMT
content-language: 13480
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "e9c81ccefec3df0c3ad1dfa69d4de520dfc7eb38"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: srqNswMxlmSrK-GCz3ac5F82l9a3Lje21yuHVoXcvFmjqZ0o2cjc8w==
age: 2170369
X-Firefox-Spdy: h2
|
|
| cf.bstatic.com/xdata/images/xphoto/300x240/140040800.jpg?k=9b90d3c924ad5f0a807e6b89a4cb69dcd91ad4e1be9d948f98fe5caf79ad6c4f&o= | 143.204.55.102 | 200 OK | 18 kB |
URL GET HTTP/2cf.bstatic.com/xdata/images/xphoto/300x240/140040800.jpg?k=9b90d3c924ad5f0a807e6b89a4cb69dcd91ad4e1be9d948f98fe5caf79ad6c4f&o= IP143.204.55.102:443
Requested byhttps://www.booking.com/index.html?aid=2391722&label=4Sx1zVc8vr8B&sxid=Flyaround-IT CertificateIssuerDigiCert Inc Subject*.bstatic.com FingerprintA4:56:D7:3E:15:A6:B4:E7:81:52:3D:DD:EE:FC:BB:5F:A6:81:0B:27 ValidityWed, 29 Nov 2023 00:00:00 GMT - Thu, 28 Nov 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x240, components 3 Hash279cc52919dba291146d7600a3891bb8 b51e0c4dfeaf6775a5bdc7f58256caf31429c5a4 994f45e23aabaab02aeac60c80f05f8fd9e412de13e68fdfd9c72cb47d91ee86
GET /xdata/images/xphoto/300x240/140040800.jpg?k=9b90d3c924ad5f0a807e6b89a4cb69dcd91ad4e1be9d948f98fe5caf79ad6c4f&o= HTTP/1.1
Host: cf.bstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.booking.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Thu, 18 Apr 2024 06:12:37 GMT
content-language: 18295
cache-control: max-age=2592000
access-control-allow-origin: *
x-xss-protection: 1; mode=block
timing-allow-origin: *
etag: "d9229ef1f9c16a1be1ad73a03f9bb42b91e81356"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: t8LkQ5sYfbD05RoX0y5Q8WxNe7TLjVTi2QnOYBXxvL-NKZ119uFpGg==
age: 735080
X-Firefox-Spdy: h2
|
|