GET /?t=impr&bwpr=0.00425&uniq=be1382559c53a096e3c79f60004efa5a_49_2931_12745_ADLSSP HTTP/1.1
Host: endpoint1.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: uniq_imp=1; HttpOnly; Expires=Tue, 10 Mar 2026 00:20:09 GMT; Domain=undefined; SameSite=None; Secure
Content-Type: image/gif; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, private, must-revalidate, proxy-revalidate
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 35

GET /423c61da-6784-413e-9e31-eb12fcbd270a/423c61da-6784-413e-9e31-eb12fcbd270a_1741553707087_l.jpg HTTP/1.1
Host: carroya-commons.avaldigitallabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpg
content-length: 21569
last-modified: Sun, 09 Mar 2025 20:55:10 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 10 Mar 2025 00:20:11 GMT
etag: "faa344d59a1165c6017a7a3e63eae88d"
x-cache: RefreshHit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HY4slII3pnP1haThB5nbQ1L8fHfQZmhgNgEupao8vklV1FRGNr6fGg==
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; frame-ancestors 'self'; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.hotjar.com data: blob:; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'none'; font-src 'self' *
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=31536000, public
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /sync?id=2 HTTP/1.1
Host: cs.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined|2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Set-Cookie: adl=427957d6c5fab00096d415ff06d5; HttpOnly; Expires=Sun Jun 08 2025 00:20:10 GMT+0000 (UTC); Max-Age=7776000; path=/; domain=.mathilde-ads.com; SameSite=None; Secure
Location: https://cs2.mathilde-ads.com/3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5fab00096d415ff06d5
Date: Mon, 10 Mar 2025 00:20:10 GMT
Connection: keep-alive
Content-Length: 0

GET /?c=e&m=b&key=902ce1477f7d239343d31d28a4500d74&cp=${AUCTION_PRICE} HTTP/1.1
Host: endpoint2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/?c=b&m=api&res=iframe&domain=www.carroya.com&page=/&ua=Mozilla/5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko/20100101%20Firefox/134.0&dW=1280&dH=1024&secure=1&language=en-US&gdpr_consent=ALL&placementId=202
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined|2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/gif
Cache-Control: no-cache, no-store, max-age=0, private, must-revalidate, proxy-revalidate
Date: Mon, 10 Mar 2025 00:20:10 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 35

GET /html?gdpr=&gdpr_consent=ALL&ccpa= HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined|2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 10 Mar 2025 00:20:10 GMT
Connection: keep-alive

GET /assets/images/logos/dealers/62_wcar/cy_logo_wcar@3x.webp HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0; _ga_3N1T1RRSJS=GS1.1.1741566008.1.0.1741566008.60.0.0; _ga=GA1.1.905280509.1741566008
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: binary/octet-stream
content-length: 3624
last-modified: Thu, 20 Feb 2025 12:17:04 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
date: Sun, 09 Mar 2025 16:15:36 GMT
etag: "936b93b44d7dd1c47dcc5fa4be8ec65d"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5RPB-jXtd8OQ-b1Vjmpt1bUS1fyavR1JZU75plQaoXFE-5E3q3YZCw==
age: 29082
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /assets/icons/cy-icon-instagram.svg HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/svg+xml
last-modified: Thu, 20 Feb 2025 12:16:56 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 06:02:20 GMT
etag: W/"7a8a9c17bcf0cad34aa81c3e1e678cf3"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4185tg2vvwn1YCfjJ8RJB21Kyb0sEd1S7EUHX3XA3bukvwKOMpRNVA==
age: 65869
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /?t=impr&bwpr=0.00425&uniq=d184166e04d113dc23e982533619cb12_49_2485_9894_ADLSSP HTTP/1.1
Host: endpoint1.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined|2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: uniq_imp=1; HttpOnly; Expires=Tue, 10 Mar 2026 00:20:10 GMT; Domain=undefined; SameSite=None; Secure
Content-Type: image/gif; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, private, must-revalidate, proxy-revalidate
Date: Mon, 10 Mar 2025 00:20:10 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 35

GET /assets/json/dealers.json HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: application/json
last-modified: Thu, 20 Feb 2025 12:17:05 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 05:50:33 GMT
etag: W/"7eea40acab6ee02c86964de5c3e7fe98"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qE0jUd4mNWY-1YWIftjGW939CHMy08rxprvWmvYwlOvnoC8_3g2Cdw==
age: 66576
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /static/media/cy-logo.599f5895afc85602e1e0c5daf4374673.svg HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0; _ga_3N1T1RRSJS=GS1.1.1741566008.1.0.1741566008.60.0.0; _ga=GA1.1.905280509.1741566008
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/svg+xml
last-modified: Fri, 07 Feb 2025 13:51:54 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 12:18:14 GMT
etag: W/"36b25466ef1ba8d74429f406710cad31"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yn00JT2_C78PM0avkUQFyhsqXoXHH_6meUxtK_yoLizqgFBf4Xr4RQ==
age: 43315
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /static/media/loader_2x.d66a0712.gif HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0; _ga_3N1T1RRSJS=GS1.1.1741566008.1.0.1741566008.60.0.0; _ga=GA1.1.905280509.1741566008
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/gif
content-length: 30747
last-modified: Fri, 07 Feb 2025 13:51:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
date: Sun, 09 Mar 2025 07:45:09 GMT
etag: "03c7ee8ff13e5bafe07ab347c13ad029"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WG08p6tgTgxrsB687KQQoJjej1SwacktDxOf5e2JjFHnD2ts7EopIg==
age: 59700
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

OPTIONS /find-recommended-cars/?page=1 HTTP/1.1
Host: carroya-habilitadora-api.avaldigitallabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-id
Origin: https://www.carroya.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
content-length: 0
date: Mon, 10 Mar 2025 00:20:09 GMT
access-control-allow-methods: POST,OPTIONS
x-amzn-requestid: 6b67e030-fc8f-479b-b1bb-06fa7ae442fe
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,X-Api-Key,X-Amz-Security-Token,X-Client-Id
x-amz-apigw-id: HLx5DFUniYcEruQ=
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q7SCBZs_-owBFIWexczX6-iv_SsGRR4g6_qGuBD7A4xbEfU6NeoyPQ==
X-Firefox-Spdy: h2

GET /static/js/9902.c9496cd9.chunk.js HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: application/javascript
last-modified: Fri, 07 Feb 2025 13:51:53 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 05:46:00 GMT
etag: W/"ec7e5f62faecf37569789a56984da3e3"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g1jRLy5K9DMvvf5r6vZ44asTjEty2Ll3aw2AOIZQnPx1SWv9Dc1reg==
age: 66848
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /static/js/4293.566fecf0.chunk.js HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1741567806800%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: application/javascript
last-modified: Fri, 07 Feb 2025 13:51:53 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 05:45:59 GMT
etag: W/"da8449d9a0e0938670b2d813adfb7223"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tS87-iA4slqnv1VHckPEaf2-BXk8lcVqy3zGgpcxLdmcWfvco8-3AA==
age: 66849
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /static/js/6325.b5d1a4a2.chunk.js HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: application/javascript
last-modified: Fri, 07 Feb 2025 13:51:53 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 08:37:27 GMT
etag: W/"e67c3113d4dec51b66b10f5b8809ca86"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HoEGRVw23-DUIiaQImmVhY36MOfXk0nV_vwXDzDjURcSu702Y9LE6g==
age: 56561
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /?c=e&m=b&key=11af8eddda5e53832b592a4488c5d0d2&cp=${AUCTION_PRICE} HTTP/1.1
Host: endpoint2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/?c=b&m=api&res=iframe&domain=www.carroya.com&page=/&ua=Mozilla/5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko/20100101%20Firefox/134.0&dW=1280&dH=1024&secure=1&language=en-US&gdpr_consent=ALL&placementId=807
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/gif
Cache-Control: no-cache, no-store, max-age=0, private, must-revalidate, proxy-revalidate
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 35

GET /3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5fd1000936d165d052d HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://endpoint2.mathilde-ads.com/
DNT: 1
Connection: keep-alive
Cookie: adl=427957d6c5fe8000965f1617054d; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive

GET /3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5fe8000965f1617054d HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://endpoint2.mathilde-ads.com/
DNT: 1
Connection: keep-alive
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive

GET /static/media/cy_icon_automoviles.9a97ecb4de1ef34cb8b900a0f07f1c3f.svg HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0; _ga_3N1T1RRSJS=GS1.1.1741566008.1.0.1741566008.60.0.0; _ga=GA1.1.905280509.1741566008
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/svg+xml
last-modified: Fri, 07 Feb 2025 13:51:54 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 08:37:35 GMT
etag: W/"880ae7702d2b995d42a1550e0915cba1"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kTZzUdDaU57MQnQDu2kICRMAQCyQzhz6CHLaW_RtRKjRFYshr9bhyg==
age: 56555
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /1e5d2b44-88fa-4c2b-a515-24337c82d0c2/1e5d2b44-88fa-4c2b-a515-24337c82d0c2_1739107707194_l.jpg HTTP/1.1
Host: carroya-commons.avaldigitallabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpg
content-length: 31985
last-modified: Sun, 09 Feb 2025 13:29:24 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 10 Mar 2025 00:20:11 GMT
etag: "2bb8da04770aee987795245ce66f9d2d"
x-cache: RefreshHit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oMvktODxQ044azn-33uMJtsFczSoxB79z0LCTq3WYi7370gtl_r0vg==
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; frame-ancestors 'self'; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.hotjar.com data: blob:; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'none'; font-src 'self' *
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=31536000, public
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET / HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: text/html
content-length: 737
last-modified: Fri, 07 Feb 2025 13:51:52 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
date: Mon, 10 Mar 2025 00:17:18 GMT
etag: "ec5509cb72799e1f183890393517f224"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p6nF0mL9MtBYNzaTf-mWz6Em7-WvgK_20zuYXtYxbGreISIp3vuKcw==
age: 169
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

GET /static/media/cy-icon-arrow-chevron-right.4624b80f9d80c6021227fe725dae2a9c.svg HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/svg+xml
content-length: 449
last-modified: Fri, 07 Feb 2025 13:51:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
date: Sun, 09 Mar 2025 10:50:01 GMT
etag: "e64a5a36a77908de4ea8412a256f7235"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UKuRQf155sA3JhssBSXcheSGWBgADOrR3hFGWpURTVQWqTnZeig9-Q==
age: 48607
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /static/js/9817.bdd58845.chunk.js HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: application/javascript
last-modified: Fri, 07 Feb 2025 13:51:53 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 11:29:20 GMT
etag: W/"508b28621b1ad2c510dfc418aaf7537d"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qp9D50vH4MMyci0HwvGsYzJWHB8CyQYCwkr4Dnj9MT7uoIcBm_qkeA==
age: 46249
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /assets/icons/cy_icon_youtube_white.svg HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/svg+xml
last-modified: Thu, 20 Feb 2025 12:16:57 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 07:45:24 GMT
etag: W/"145e46eab3768025f64b5dd2516690c1"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bbdb5UqjBsqHbnZOrTFuKM1vSVo8s3oLEs6aRYhGNDWmDSpAJTzl-g==
age: 59685
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /static/media/Avenir-medium.a214c530.otf HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/static/css/6789.9d471007.css
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: binary/octet-stream
content-length: 24156
last-modified: Fri, 07 Feb 2025 13:51:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
date: Sun, 09 Mar 2025 05:50:33 GMT
etag: "b4fe53dcec196556a796e66baa9b7cc3"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: J1wbba_vDYxPEHTVRcWqPAC_B04MpelKIPhalv5qrqynq2aRn_iugQ==
age: 66576
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /html?gdpr=&gdpr_consent=ALL&ccpa= HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Cookie: adl=427957d6c5f6b00095e6160c05f0; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Mar 2025 00:20:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:09 GMT;SameSite=None;Secure
adl_u_red=undefined; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:09 GMT;SameSite=None;Secure
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip

GET /utag/adl/eltiempo/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 28 Feb 2025 19:47:32 GMT
content-encoding: br
x-amz-server-side-encryption: AES256
x-amz-version-id: _WZjfQtT9Iuzlac4Iqx2XstMbzMVf6Vg
server: AmazonS3
date: Mon, 10 Mar 2025 00:17:19 GMT
etag: W/"cffa74b032bbb2adc2b78055008e939e"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wsVHns-kGDkttfoR1iEX2_pJJ1-aOzApTMFk4301_kqCsTMGT3CNqA==
age: 168
cache-control: max-age=300
X-Firefox-Spdy: h2

GET /?c=b&m=api&res=iframe&domain=www.carroya.com&page=/&ua=Mozilla/5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko/20100101%20Firefox/134.0&dW=1280&dH=1024&secure=1&language=en-US&gdpr_consent=ALL&placementId=851 HTTP/1.1
Host: endpoint2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Type: text/html
Content-Length: 5284
Date: Mon, 10 Mar 2025 00:20:08 GMT
Connection: keep-alive
Keep-Alive: timeout=5

GET /?t=check&uniq=582858c1bc27f838c4f04c5ff2f7aa26_49_2445_8954_ADLSSP&u=endpoint2.mathilde-ads.com HTTP/1.1
Host: endpoint1.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Type: image/gif; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, private, must-revalidate, proxy-revalidate
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Content-Length: 35

GET /sync?id=2 HTTP/1.1
Host: cs.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Set-Cookie: adl=427957d6c5fab00096d415ff06d5; HttpOnly; Expires=Sun Jun 08 2025 00:20:09 GMT+0000 (UTC); Max-Age=7776000; path=/; domain=.mathilde-ads.com; SameSite=None; Secure
Location: https://cs2.mathilde-ads.com/3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5fab00096d415ff06d5
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive
Content-Length: 0

GET /?c=b&m=api&res=iframe&domain=www.carroya.com&page=/&ua=Mozilla/5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko/20100101%20Firefox/134.0&dW=1280&dH=1024&secure=1&language=en-US&gdpr_consent=ALL&placementId=857 HTTP/1.1
Host: endpoint2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Type: text/html
Content-Length: 5185
Date: Mon, 10 Mar 2025 00:20:08 GMT
Connection: keep-alive
Keep-Alive: timeout=5

GET /49-b558890e03e61d4f94b9d6f125e357d7.webp HTTP/1.1
Host: ftp.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://endpoint2.mathilde-ads.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 10 Mar 2025 00:20:09 GMT
Content-Type: image/webp
Content-Length: 39480
Last-Modified: Tue, 04 Jun 2024 20:13:56 GMT
Connection: keep-alive
ETag: "665f7584-9a38"
Accept-Ranges: bytes

GET /3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5fab00096d415ff06d5 HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://endpoint2.mathilde-ads.com/
DNT: 1
Connection: keep-alive
Cookie: adl=427957d6c5fe8000965f1617054d; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive
Set-Cookie: adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:09 GMT;SameSite=None;Secure
adl_u_red=undefined|2; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:09 GMT;SameSite=None;Secure
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

GET /utag/adl/eltiempo/prod/utag.42.js?utv=ut4.51.202502202208 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 28 Feb 2025 19:47:31 GMT
content-encoding: br
x-amz-server-side-encryption: AES256
x-amz-version-id: .Sja8gApw6.7b3ZfFILumS2wMEkC380f
server: AmazonS3
date: Mon, 10 Mar 2025 00:17:19 GMT
etag: W/"11e68fd10c6a807f900e18332bf55f27"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mmOh-CcMBifmoE7p5ELiBFqnsNQ0ThcXlAkqhuFHJ1-fHzrarNY3ww==
age: 169
cache-control: max-age=300
X-Firefox-Spdy: h2

GET /static/css/9817.08cd9b65.css HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: text/css
date: Sun, 09 Mar 2025 07:45:07 GMT
last-modified: Fri, 07 Feb 2025 13:51:53 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
etag: W/"471b9e954ef00ea78912196e1686b807"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ltm7j5IjeepUuI49vJsQMasizqNV1RoQ5Hk_8310jRUBm7sBKQP52A==
age: 59702
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /find-news/the-new HTTP/1.1
Host: carroya-pro-portal-api.avaldigitallabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-client-id: 905280509.1741566008
Origin: https://www.carroya.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
content-length: 1588
date: Mon, 10 Mar 2025 00:20:09 GMT
x-amzn-trace-id: Root=1-67ce3039-42a620a130441f7b18c5eb22;Sampled=1;Lineage=1:c8b7d593:0
x-amzn-requestid: 29dc0e66-7f93-4201-af4c-4d6119a1cfcf
access-control-allow-origin: *
content-encoding: gzip
access-control-allow-headers: Content-Type
x-amz-apigw-id: HLx5FFo7iYcED1w=
access-control-allow-methods: *
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8qKBaf8pYgplpLUf_ipt6bjZZwmR5c7Sg6ueNBbfdG_wdoRYJAlzqg==
X-Firefox-Spdy: h2

GET /3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5fab00096d415ff06d5 HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://endpoint2.mathilde-ads.com/
DNT: 1
Connection: keep-alive
Cookie: adl=427957d6c5fab00096d415ff06d5; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined|2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 10 Mar 2025 00:20:10 GMT
Connection: keep-alive
Set-Cookie: adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:10 GMT;SameSite=None;Secure
adl_u_red=undefined|2; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:10 GMT;SameSite=None;Secure
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

GET /static/js/6789.f20d3bea.chunk.js HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1741567806800%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: application/javascript
last-modified: Fri, 07 Feb 2025 13:51:53 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 06:02:19 GMT
etag: W/"7c84da2fc375d2623035bf9c0687136f"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KVXSxjFdNUJv34J3GxqF2K-HfIgCuHUJkmqWtPill_z0ByAbTzk1uw==
age: 65869
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /1a8367b6-eadf-46cc-8b1a-7a6f949206df/1a8367b6-eadf-46cc-8b1a-7a6f949206df_1740591305410_l.jpg HTTP/1.1
Host: carroya-commons.avaldigitallabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/jpg
content-length: 33900
last-modified: Wed, 26 Feb 2025 17:35:39 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 10 Mar 2025 00:20:11 GMT
etag: "bb683e9a27b425d980e157d7da43b0bd"
x-cache: RefreshHit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: idWnAwhYiMsTHnHO_W6Om3yI-PgkThj2sRDS6HE8GUWUtT1mcutQQQ==
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; frame-ancestors 'self'; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.hotjar.com data: blob:; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'none'; font-src 'self' *
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
cache-control: max-age=31536000, public
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

GET /3800940b990c97ea464b4861a0dc363a.gif?puid=427957d6c5f6b00095e6160c05f0 HTTP/1.1
Host: cs2.mathilde-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://endpoint2.mathilde-ads.com/
DNT: 1
Connection: keep-alive
Cookie: adl=427957d6c5fe8000965f1617054d; adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; adl_u_red=undefined
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 10 Mar 2025 00:20:09 GMT
Connection: keep-alive
Set-Cookie: adl_u_key=dd65689b-9102-4e6a-a335-aec7104a63a3; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:09 GMT;SameSite=None;Secure
adl_u_red=undefined|2; path=/; domain=.mathilde-ads.com; expires=Mon, 24 Mar 2025 00:20:09 GMT;SameSite=None;Secure
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

OPTIONS /find-news/the-new HTTP/1.1
Host: carroya-pro-portal-api.avaldigitallabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-client-id
Origin: https://www.carroya.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
content-length: 0
date: Mon, 10 Mar 2025 00:20:09 GMT
access-control-allow-methods: POST,OPTIONS
x-amzn-requestid: c1e424a7-6d24-42c7-996d-16d5eccf7f62
access-control-allow-origin: *
access-control-allow-headers: Content-Type, X-Client-Id
x-amz-apigw-id: HLx5BHzzCYcEfjQ=
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z-3QVLAcHWP8K9qt8v_e8mc-GPXHtT-FfunEvFcyeahU55Apgackrw==
X-Firefox-Spdy: h2

GET /static/media/cy-icon-whatsapp.bb6b51fba53ffa0763ff6d714d36ac8c.svg HTTP/1.1
Host: www.carroya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.carroya.com/
DNT: 1
Connection: keep-alive
Cookie: screen_size=1280x1024; viewport_size=1280x1024; utag_main__sn=1; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1741567807790%3Bexp-session; utag_main_ses_id=1741566006800%3Bexp-session; utag_main__pn=1%3Bexp-session; at_check=true; AMCV_9873253863FFB2BE0A495C51%40AdobeOrg=179643557%7CMCIDTS%7C20158%7CMCMID%7C46170004759113104454990369226388910201%7CMCOPTOUT-1741573207s%7CNONE%7CvVersion%7C5.5.0; mbox=session#cb26a54abb4c48e6859754e89a8f6ad8#1741567868; AMCVS_9873253863FFB2BE0A495C51%40AdobeOrg=1; clearChache=3.48.0; _ga_3N1T1RRSJS=GS1.1.1741566008.1.0.1741566008.60.0.0; _ga=GA1.1.905280509.1741566008
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: CloudFront
content-type: image/svg+xml
last-modified: Fri, 07 Feb 2025 13:51:54 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
date: Sun, 09 Mar 2025 05:50:34 GMT
etag: W/"7112f353dcaf835f3feea906bf620af9"
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BH0K5vGVbdxLZ0zaXuznYXKeYrCjv3inlq5asLbin__LmITd6is9bg==
age: 66576
x-xss-protection: 1; mode=block
x-frame-options: DENY
referrer-policy: same-origin
content-security-policy: default-src 'self' *; img-src 'self' *.carroya.com *.avaldigitallabs.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d1rrnefx29dha1.cloudfront.net d2xrumg1tawp5m.cloudfront.net firebasestorage.googleapis.com images.ctfassets.net www.facebook.com dpm.demdex.net dc.oracleinfinity.io *.scene7.com cs2.mathilde-ads.com *.google.com *.google.com.co *.omtrdc.net sb.scorecardresearch.com cm.everesttech.net eltiempo.112.2o7.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.carroya.com *.avaldigitallabs.com tags.tiqcdn.com *.google.com *.google.com.co api.pushio.com service.maxymiser.net tags.bkrtx.com www.googletagmanager.com c.oracleinfinity.io connect.facebook.net sb.scorecardresearch.com *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net d2xrumg1tawp5m.cloudfront.net pixel.sitescout.com www.gstatic.com cdn-3.convertexperiments.com *.hotjar.com *.hotjar.io googleads.g.doubleclick.net ajax.googleapis.com github.com www.google-analytics.com cdn.onesignal.com onesignal.com script.crazyegg.com assets.adobedtm.com ads.eltiempo.co www.googleadservices.com blob:; style-src 'self' 'unsafe-inline' *; object-src 'none'; frame-ancestors 'self' https://home.togotogo.com.co; font-src 'self' * data:; connect-src 'self' data: *.carroya.com *.avaldigitallabs.com d2xrumg1tawp5m.cloudfront.net *.omtrdc.net *.google.com *.google.com.co dpm.demdex.net www.google-analytics.com *.amazonaws.com *.amazoncognito.com *.omtrdc.net stats.g.doubleclick.net *.mathilde-ads.com d3kc4ryc0t7x4f.cloudfront.net *.tealiumiq.com opensheet.elk.sh *.hotjar.com *.hotjar.io wss://ws.hotjar.com hook.us1.make.com graphql.contentful.com
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload
permissions-policy: fullscreen=*
vary: accept-encoding, Origin
X-Firefox-Spdy: h2