detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Tue, 07 Feb 2023 18:20:45 GMT
Age: 44938
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7407cc102d62a5acd5e61f8a79bed36
c2f4890a62454e514962b55b7fc14228339c8e90
be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14508
Expires: Wed, 08 Feb 2023 10:51:31 GMT
Date: Wed, 08 Feb 2023 06:49:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f16201934a8441ad3d1df0e956536117
fb93a6f0de884a9b52a97244a670ee841c99fced
1a0b2ebd17d6f2ca323a216ef2007cc527e33ec694bd0e8411c96a704220b8be
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A0B2EBD17D6F2CA323A216EF2007CC527E33EC694BD0E8411C96A704220B8BE"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8313
Expires: Wed, 08 Feb 2023 09:08:16 GMT
Date: Wed, 08 Feb 2023 06:49:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11233
Expires: Wed, 08 Feb 2023 09:56:56 GMT
Date: Wed, 08 Feb 2023 06:49:43 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 38 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 28344ce7f6553f67d57e56cbd5023a01
a2dc6a1b29e6807ccda638705a0b01f2df8d99dd
49b41ab7b022c748e784c548f22097f28317d34d05d34e856818d01f930f5c9a
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: dzI4OiYfztsyD-ZLSq1o5VZLd61Hn7C10ORPzZpyrZMu_2ohppwG4Q==
content-encoding: gzip
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
content-length: 38360
date: Wed, 08 Feb 2023 06:38:48 GMT
age: 655
content-type: application/json
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ocyLcGsJpxr7pPGS2PohVwfarGETr5bHxTogNLA+kT7AapkpET3nvAVrgTj2HsIUHHkBqvi6AVg=
x-amz-request-id: K845Y3YY6PPKAABF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 06:13:53 GMT
age: 2150
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3541
Expires: Wed, 08 Feb 2023 07:48:44 GMT
Date: Wed, 08 Feb 2023 06:49:43 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 06:36:36 GMT
content-type: application/json
age: 787
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.westinyokohamaweddings.com/
301 Moved Permanently 0 B URL HTTP/1.1 www.westinyokohamaweddings.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.westinyokohamaweddings.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 08 Feb 2023 06:49:43 GMT
Location: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Content-Length: 0
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 06:49:43 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 771bdef904b98cef9ef3cf52191413af
ad9f196d81cc0f58ed666e1b6123a9b5909e9cf2
fb1b3f80a0f267dc2c9561d189957fd33d6b85b2ea78f9d00d7a153af7c18629
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "FB1B3F80A0F267DC2C9561D189957FD33D6B85B2EA78F9D00D7A153AF7C18629"
Last-Modified: Wed, 08 Feb 2023 05:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3539
Expires: Wed, 08 Feb 2023 07:48:42 GMT
Date: Wed, 08 Feb 2023 06:49:43 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ccea102d392ddcfb99024041654130a0
3b7c7c9b548e6040beba05c8d86e321afba6424e
e8351949e83b0d93dc2a36bbfa987d0728345182eac7242f0a1e3921924b6a9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5908
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:43 GMT
Etag: "63e28273-1d7"
Last-Modified: Wed, 08 Feb 2023 05:11:15 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 06:14:52 GMT
age: 2092
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Tue, 07 Feb 2023 18:20:45 GMT
Age: 44939
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13766
Expires: Wed, 08 Feb 2023 10:39:10 GMT
Date: Wed, 08 Feb 2023 06:49:44 GMT
Connection: keep-alive
shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
200 OK 8 B URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
IP
Hash 29fc57841962e407cb50c1be60284bf7
ce968a77e2996da5eee8925182318f171ccdce47
ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1
Host: shavar.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Date: Wed, 08 Feb 2023 06:49:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FLkDLnqQWaJNboObl+pMCg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5EJrqdw+Qyac3yTWMFfr+SFkO1Y=
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675808113340%22
200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221675808113340%22
IP
File type JSON data\012- , ASCII text, with very long lines (21681), with no line terminators
Hash 55012e1b3af0fc95bfadb44668f148e8
606062404e89594c099a810cd299f1b105194bdc
0c2a171c78600c8a574746fc2d040e22284325bd944e38e8fd9e3f6f19ef1eeb
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221675808113340%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21681
via: 1.1 google
date: Wed, 08 Feb 2023 06:17:10 GMT
age: 1954
last-modified: Tue, 07 Feb 2023 22:15:13 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675773437082&_since=%221666204638208%22
200 OK 29 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675773437082&_since=%221666204638208%22
IP
File type JSON data\012- , ASCII text, with very long lines (29137), with no line terminators
Hash 27dd1297c6266a7456f0ff3dba62f141
53994ca0a94ecbc35dfa12a3ea47c36f7aeb1a01
2f635d6800b663f8d80ec42481dae02446308fcc1876690b097f7028049dfa7c
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1675773437082&_since=%221666204638208%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 29137
via: 1.1 google
date: Wed, 08 Feb 2023 06:06:01 GMT
age: 2623
last-modified: Tue, 07 Feb 2023 12:37:17 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Cf2S/D0wCQV4uf2K7a7Cmi86t0g4FIQLojZCpdip3QowSNvp7ToOc6kwpqr5nIexT4UdUYIqNi0=
x-amz-request-id: 3EHZ7R7XGQX0RMKW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 06:45:52 GMT
age: 232
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 06:34:12 GMT
content-type: application/json
age: 932
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89ab7a8f2f51b53ecef0795c64f31534
7d86d1d99955320b9ec97f9819ef6ca8e0409a29
25f11a6100923f5f64e4b6069edfbba73d4188e6698fc6777b00c2d997020dc7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F11A6100923F5F64E4B6069EDFBBA73D4188E6698FC6777B00C2D997020DC7"
Last-Modified: Tue, 07 Feb 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16307
Expires: Wed, 08 Feb 2023 11:21:31 GMT
Date: Wed, 08 Feb 2023 06:49:44 GMT
Connection: keep-alive
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
200 OK 807 kB URL HTTP/2 firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin
IP
Size 807 kB (807180 bytes)
Hash 914be443bdfbe8a1c3ded61e1c114bd6
4fe7c5ff83f6a29e6699f4cebc17550891504661
41b036d0c889509d547296b238027a063c313261ad52d5f7bb81922011791857
GET /staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dguZsNlgt0E45bClSnS3eklmiykznZzPHsVWHNdaaMzEAaRGO4cZgbeZnkXLWgpuuMWxb90zRhY=
x-amz-request-id: 7YF2ZWT19PGFW512
x-amz-version-id: K1ODzappZsD35qeu0OM5zvs_BP1eybj7
accept-ranges: bytes
server: AmazonS3
content-length: 807180
via: 1.1 google
date: Sat, 04 Feb 2023 15:34:39 GMT
age: 314105
last-modified: Tue, 10 Jan 2023 12:38:46 GMT
etag: "914be443bdfbe8a1c3ded61e1c114bd6"
content-type: application/octet-stream
cache-control: public,max-age=604800
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675799860323&_since=%221666279968541%22
200 OK 78 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675799860323&_since=%221666279968541%22
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 599e4b408d1ad854cb9be1385bf41b9a
32ffd647953aa074c42ee4bc0c449860156bb920
f6315e550e8b98dcd2b48f5fce2028ed7dafdc977e6d5e333de71c73080af38b
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1675799860323&_since=%221666279968541%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 77652
via: 1.1 google
date: Wed, 08 Feb 2023 06:41:17 GMT
age: 508
last-modified: Tue, 07 Feb 2023 19:57:40 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22
IP
File type JSON data\012- , ASCII text, with very long lines (1718), with no line terminators
Hash fb8364b979ee4d6ab16983257209c5aa
e7749d6314f37c996014ed25444215c50d585634
4ae5e5eea70f358d81e21e3861a48532d484b883a30041c4abaf709457ac4cc4
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1667238122278&_since=%221656585893704%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1718
via: 1.1 google
date: Wed, 08 Feb 2023 06:21:16 GMT
age: 1709
last-modified: Tue, 07 Feb 2023 16:36:46 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
200 OK 1.3 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22
IP
File type JSON data\012- , ASCII text, with very long lines (1251), with no line terminators
Hash 84877e5233cbfb37ee8e3a229a105c5a
1de2638f59470efebfeb21250ec19dcc6f2092cf
d3a86e1ca60b2a4b4ffc1fb159f17bf8e590072e2f8f141087cb42c3c612b1eb
GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1251
via: 1.1 google
date: Wed, 08 Feb 2023 06:48:50 GMT
age: 55
last-modified: Tue, 07 Feb 2023 16:36:45 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1675734066429&_since=%221662044085942%22
200 OK 5.6 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1675734066429&_since=%221662044085942%22
IP
File type JSON data\012- , ASCII text, with very long lines (5628), with no line terminators
Hash ba20fa4a4d0b101ba8c0184be4ab1114
f6babf918e8cd29dd4bae3b5cd1333d408671840
889093cfc512eaefd30a50503286ec7a6d0e46adbd05feeb71a0cb254ad5fefe
GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1675734066429&_since=%221662044085942%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 5628
via: 1.1 google
date: Wed, 08 Feb 2023 05:55:07 GMT
age: 3278
last-modified: Tue, 07 Feb 2023 01:41:06 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
200 OK 681 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
IP
File type JSON data\012- , ASCII text, with very long lines (681), with no line terminators
Hash 49248eff154dc4c57a2941a8ea08b148
f1c61090e04394494721aa17ddb4814293e66e89
674b33af069dc532553d499551583e97162232c880bb2f47bfe3787aeba2640c
GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 681
via: 1.1 google
date: Wed, 08 Feb 2023 06:49:41 GMT
age: 4
last-modified: Mon, 06 Feb 2023 16:36:54 GMT
etag: "1675701414813"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
200 OK 932 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22
IP
File type JSON data\012- , ASCII text, with very long lines (932), with no line terminators
Hash 22ad217b8542124e6c8821717559faf6
4330760a23c61ac654d088a592408e3b5c3b0bc5
a003887785e0e602be4c05929a584b7f3f1f79f27460e7eb35a4998663c5436b
GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 932
via: 1.1 google
date: Wed, 08 Feb 2023 06:11:46 GMT
age: 2279
last-modified: Sun, 05 Feb 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
200 OK 1.5 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22
IP
File type JSON data\012- , ASCII text, with very long lines (1505), with no line terminators
Hash 5fbaf2b7815ccde4e006732f60cf45c3
358f788e1494eb1777de83a84aa1e831c6189ec9
d95422b3bbfa32ed668a90e5db3f3dd703e46d69e169e82a1e014b64b6b2d703
GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1505
via: 1.1 google
date: Wed, 08 Feb 2023 06:01:40 GMT
age: 2885
last-modified: Sat, 04 Feb 2023 16:36:45 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1675468864323&_since=%221666483264567%22
200 OK 52 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1675468864323&_since=%221666483264567%22
IP
File type JSON data\012- , ASCII text, with very long lines (52267), with no line terminators
Hash 06e189dc52881e7f5616b0214ff59542
16bd38b5d24dbc7fb6d44561cad597d6f555cf52
3b59d876391dc2db99e43edcffa3ed5a184468b0c937ef6293fc392ed7426df8
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1675468864323&_since=%221666483264567%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 52267
via: 1.1 google
date: Wed, 08 Feb 2023 06:45:41 GMT
age: 244
last-modified: Sat, 04 Feb 2023 00:01:04 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22
200 OK 2.1 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22
IP
File type JSON data\012- , ASCII text, with very long lines (2144), with no line terminators
Hash 5cfd74fcbede0ee061689b95c597b11b
75d870f627cdc06f4cb7fa47751ae56c740da850
c68708f43d2bf28e3d619542c6fd7ab408f034a7f87de731ed11356efc4453eb
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1674132577705&_since=%221657747510534%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 2144
via: 1.1 google
date: Wed, 08 Feb 2023 06:07:37 GMT
age: 2528
last-modified: Thu, 02 Feb 2023 16:36:44 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1675353179510&_since=%221661199949574%22
200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1675353179510&_since=%221661199949574%22
IP
File type JSON data\012- , ASCII text, with very long lines (22471), with no line terminators
Hash 86e5267005f7001a7a7fb7f25d7e02b9
67ea12312364541e026dfd85800ce5f4280601c5
9c469d6cd61cb4f4e3f06e980f86f3ee16cb4ec776ed105998810bcabbe12969
GET /v1/buckets/main/collections/search-config/changeset?_expected=1675353179510&_since=%221661199949574%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 22471
via: 1.1 google
date: Wed, 08 Feb 2023 06:25:47 GMT
age: 1438
last-modified: Thu, 02 Feb 2023 15:52:59 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22
200 OK 1.7 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22
IP
File type JSON data\012- , ASCII text, with very long lines (1742), with no line terminators
Hash 22092e301760ed865af6ece6eb04b1be
557b52e40ec2d8f2fe080580a1858c8666791bf2
12afba8f5929ab372e9cffbbe57e8bb562c60fc0a98b751c69de1adc04fb4aea
GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 1742
via: 1.1 google
date: Wed, 08 Feb 2023 06:33:07 GMT
age: 998
last-modified: Wed, 01 Feb 2023 16:36:43 GMT
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10265
Expires: Wed, 08 Feb 2023 09:40:50 GMT
Date: Wed, 08 Feb 2023 06:49:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10265
Expires: Wed, 08 Feb 2023 09:40:50 GMT
Date: Wed, 08 Feb 2023 06:49:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13794
Expires: Wed, 08 Feb 2023 10:39:39 GMT
Date: Wed, 08 Feb 2023 06:49:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb0e725719ac378134b01b6473a6581
a8a1780c88e8ae219048bed28ecfbd8019d9af35
187d4e83edc0af857334f84bd6853234193d4654d06c43367f39b4e125defe08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6679
x-amzn-requestid: 97c19ad5-c127-4dc1-b529-1eca84645316
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f59MzHgloAMFwow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a8b8-79d6b8d31b69153d4929b7b7;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x_tr-xummuF51PvAM4y3DgvLWuJOwxgquKO8baQfcoN6ta5M3ll7ug==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 07:49:38 GMT
age: 82807
etag: "a8a1780c88e8ae219048bed28ecfbd8019d9af35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6ac124e-27b8-4818-9240-77708d007004.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6ac124e-27b8-4818-9240-77708d007004.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 845e4e4051f1162b20d3df5f208e8d3e
076462f67531c60b31ec768a275c96317292306d
40996d8929ab92f342328fc018518d6131c6222b0ec23051775eda276a602026
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6ac124e-27b8-4818-9240-77708d007004.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4168
x-amzn-requestid: 24814225-0063-49fb-86ff-e78869538b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjQFS_IAMFtLQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-67307c42182089b3096e98b5;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f90qZAgSmdYFuW_BDTZVivBlk_c5SrirTSeJmvoysOmCcOjxtFZrbA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:03 GMT
age: 32862
etag: "076462f67531c60b31ec768a275c96317292306d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99e021e8-f66e-44fd-94ca-b30d25a8f5b4.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99e021e8-f66e-44fd-94ca-b30d25a8f5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 544181f4aba24fc687a14522dd20f720
2b117270563b8c466ec774acce55271c38f6135b
607c45cc5b4726b92c8507988bbb90ac6a44a3cf22b290030d440266350099a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99e021e8-f66e-44fd-94ca-b30d25a8f5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4961
x-amzn-requestid: c3b9db99-726f-4473-a6b6-9cff0dceb949
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fswe1GeRoAMFiAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db612b-17b52fcd74e374f1104af709;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 07:07:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S8zeMZ-IZHNe6x_IFZJgCv1V8fwSkBh0aNnKfwgGOP5r6U7LjT61qg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 05:48:02 GMT
age: 3703
etag: "2b117270563b8c466ec774acce55271c38f6135b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 726928e5de19ef978faebbe933c34008
bdaba3ed0c7efb65de88af96063d830683c8499b
c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xU_uVO78ZQRKon3Cz-fVcHJuPEMMgzDsVuY8BXoKL6ntJwkl-SLeQA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:42:03 GMT
age: 32862
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash be9f475292d4b5b0502d4381ccdf455b
ecb943b48c822b086ea699d802f8f1bb5ee26651
ed22a5102709dc7a067107a6c0cde26931f7781065de9cee49e22de6b9086e31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce53bc9b-2505-4efd-9151-fa75ed70138a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8703
x-amzn-requestid: 6456aa7d-11f7-4066-a833-9ac5312c0c24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_O7JGLTIAMFqdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c513-0679a75676cdc19251c81bdd;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DLVp9hiUjE2w5BiukFfUMALWxvcobbJcJRO-7CdXj3cy6rAdFhPRFQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:44:01 GMT
age: 32744
etag: "ecb943b48c822b086ea699d802f8f1bb5ee26651"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f31c82179856e39ee5fc43d7f0b685
5b37f807a19ffc80c0b9334e6d24d5bb717496ce
c099c91c6f2125a8a89ee6e9dc0e37e2c2c9914adadb2c8b77795063baa62037
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6805
x-amzn-requestid: 9f067f0c-2991-41ae-8dd0-5719a5438abc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_PHwEn4IAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c564-730d01807c13643373d64897;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:40:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eSU1CSydRTodwnN5DNTXbYD3d3kYFCHiCvPRq5DZTTDSTH2L-GV_1g==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:19:17 GMT
age: 30628
etag: "5b37f807a19ffc80c0b9334e6d24d5bb717496ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
detectportal.firefox.com/success.txt?ipv4
200 OK 8 B URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4
IP
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Tue, 07 Feb 2023 18:20:45 GMT
Age: 44940
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
200 OK 22 kB URL HTTP/2 modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (610), with CRLF, LF line terminators
Hash 758a8023a03145dbe924b8448fcdc8ec
25f69a38fff01af2476a1505e1374878845bfd67
e25b9f512e69b0d7a91c542e69f110363520a8eeb466cfdfd01a3e12a56aa790
GET /wedding-fair/jp/tyowy-the-westin-yokohama HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:46 GMT
content-type: text/html; charset=utf-8
content-length: 22124
cache-control: public
content-encoding: gzip
etag: 2062023155730
vary: User-Agent,Accept-Encoding
x-trace-id: ae5648b2-b74d-4224-b01a-bc9797dd3783
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-content, p-293163, pt-406439, mdl-115848, cg-627812, cg-649967, cg-603974, cg-603820, cg-605551, cg-607613, m-5298, f-468224, f-455947, m-4702, m-5494, m-5495, f-456177, f-456179, f-456178, m-4717, f-454568, m-4701, f-454409, f-510333, m-4703, m-4704, f-454411, m-4705, m-4706, f-454412, m-4707, m-4708, m-4710, m-4709, m-4711, f-454413, m-4714, m-4715, f-454566, m-4716, f-454569, f-454570, f-455948, f-510334
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:2222bae7-6b65-488b-a7a8-8f50b5e55838
access-control-expose-headers: Request-Context
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 79626d51e84db515-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
assets.adobedtm.com/launch-ENc5bce53fadfd42dbb08b27acb53dc333-staging.min.js
200 OK 117 kB URL HTTP/2 assets.adobedtm.com/launch-ENc5bce53fadfd42dbb08b27acb53dc333-staging.min.js
IP
File type ASCII text, with very long lines (32763)
Size 117 kB (116745 bytes)
Hash 612804b4a2e4a0277c7a9e7f5936a5b1
3e9782fedf1cc649a1428dd1978979e54e045b26
e5917751631896ef6ab9f1e165f2dae20365c60ce1d8301e795ecf4a2e1c7d62
GET /launch-ENc5bce53fadfd42dbb08b27acb53dc333-staging.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "c1205a81a14237c34510c81a416831e6:1672857234.088324"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
expires: Wed, 08 Feb 2023 06:49:46 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 Feb 2023 06:49:46 GMT
content-length: 116745
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8d5417d247d259e3c0186136b83d9f75
49fbcf99a352669aee2559579ef73fa60f46d38d
3c013921158ec27e44d5e80a5108557de80a27f38089ac3a52c6c1cf5636f585
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NL43MZS
200 OK 13 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NL43MZS
IP
Hash 8298d10a60c49ca920e2212c4e39cb46
30f0d2e2f18b01cad6ad6269c6bbb5da37e59c60
8ca91491502c82c7b2cc621516b063ba7c0dd753b4cae0c06e91e3e47075c584
GET /gtm.js?id=GTM-NL43MZS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 08 Feb 2023 06:49:46 GMT
expires: Wed, 08 Feb 2023 06:49:46 GMT
cache-control: private, max-age=900
last-modified: Wed, 08 Feb 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69772
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.adobedtm.com/extensions/EP971e6ad26efe44ab86e98d3905a44621/AppMeasurement_Module_AudienceManagement.min.js
200 OK 8.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EP971e6ad26efe44ab86e98d3905a44621/AppMeasurement_Module_AudienceManagement.min.js
IP
File type exported SGML document, ASCII text, with very long lines (25042)
Hash 641a795b67797b0c45fa9e3cdfe9be48
e5e33adcb04a3b66027bf5d62f7046194f18995f
e3de82ba7d0a2ed47990b11b2be8a5244a00bc2ff4426ded8eab451736f3d719
GET /extensions/EP971e6ad26efe44ab86e98d3905a44621/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "e539ea6425ae55fa9f68995bc5a68886:1559603018"
last-modified: Mon, 03 Jun 2019 23:03:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 8640
expires: Wed, 08 Feb 2023 07:49:46 GMT
date: Wed, 08 Feb 2023 06:49:46 GMT
cache-control: no-cache
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5cee7b98e5150c1f893636a54fc4a6a3
a4a5c0b5271d7489985e25bc9c5d912d4e2552d6
695a2faaf6485e37d403123c99b79a6c3cdf768592b487862cc23a10a6ab407e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1968
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:46 GMT
Last-Modified: Wed, 08 Feb 2023 06:16:58 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/id?d_visid_ver=4.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=664516D751E565010A490D4C%40AdobeOrg&d_nsid=0&ts=1675839039681
200 OK 1.7 kB URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=4.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=664516D751E565010A490D4C%40AdobeOrg&d_nsid=0&ts=1675839039681
IP
File type JSON data\012- , ASCII text, with very long lines (5454), with no line terminators
Hash 3b7e86de97a93dea905d05d0d9e2c2c5
5b7d0d1c227d8c4e48a971cd1b24fb8d6d212fe9
aa1e23658675d67e23ac7a321335e4b14e6bc36043df140667a48fe8ab8e2ee1
GET /id?d_visid_ver=4.3.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=664516D751E565010A490D4C%40AdobeOrg&d_nsid=0&ts=1675839039681 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://modules.marriott.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-03c381005.edge-irl1.demdex.com 9 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=20425576610272577514194597536839578570; Max-Age=15552000; Expires=Mon, 07 Aug 2023 06:49:46 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: FckHUBK7TrI=
Content-Length: 1710
Connection: keep-alive
modules.marriott.com/wedding-fair/images/bonvoy_logo_color.svg
200 OK 4.9 kB URL HTTP/2 modules.marriott.com/wedding-fair/images/bonvoy_logo_color.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (519), with CRLF line terminators
Hash 95394d963ad4f272fceb89994998e08f
41c0baf06c78732bae80b44ece7c3fb7cb3220e8
e87dce6f7f774ec39df988e7904dd3a38c6a90f0f4efbdb3255b83d12dc0c555
GET /wedding-fair/images/bonvoy_logo_color.svg HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:46 GMT
content-type: image/svg+xml; charset=utf-8
content-length: 4936
cache-control: public, max-age=10800, s-maxage=432000
expires: Wed, 15 Feb 2023 06:49:46 GMT
last-modified: Thu, 22 Oct 2020 06:13:15 GMT
etag: 2062023155730
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-assets
x-xss-protection: 1,mode=block
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d600ed3b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/resourcefiles/hotelprofile/tyowy-logo.png?version=7142022100811
200 OK 7.1 kB URL HTTP/2 modules.marriott.com/wedding-fair/resourcefiles/hotelprofile/tyowy-logo.png?version=7142022100811
IP
File type PNG image data, 438 x 116, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b6d241fdbd351951da9a4f26b03e382
95227b89ac84ded17745291a8c4f0c685fe9ec1f
3514424b790d30a3dfd39369f36e80c4db61de1529854f9bff7c5ac9598b9d4c
GET /wedding-fair/resourcefiles/hotelprofile/tyowy-logo.png?version=7142022100811 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:46 GMT
content-type: image/png; charset=utf-8
content-length: 7060
cache-control: public, max-age=10800, s-maxage=432000
expires: Wed, 15 Feb 2023 06:49:46 GMT
last-modified: Tue, 12 Jul 2022 05:15:47 GMT
etag: 2062023155730
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-assets
x-xss-protection: 1,mode=block
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d600ed6b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-review-slider-image/night-ironbay.jpg
200 OK 103 kB URL HTTP/2 modules.marriott.com/wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-review-slider-image/night-ironbay.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 970x546, components 3\012- data
Size 103 kB (102928 bytes)
Hash f356514f784b30ca1b579a96d4656cce
a59acfe02dae7735fbe95563f7fd052360f2be0e
d5349337477ea73ebd63aa2abec37ad6a408fdcf7ecb15da61e1d7b14ee99724
GET /wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-review-slider-image/night-ironbay.jpg HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:47 GMT
content-type: image/jpeg; charset=utf-8
content-length: 102928
cache-control: public, max-age=10800, s-maxage=432000
expires: Wed, 15 Feb 2023 06:49:46 GMT
last-modified: Wed, 25 Jan 2023 06:33:33 GMT
etag: 2062023155730
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-assets
x-xss-protection: 1,mode=block
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d600edbb515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-review-slider-image/image-1.jpg
200 OK 110 kB URL HTTP/2 modules.marriott.com/wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-review-slider-image/image-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 970x546, components 3\012- data
Size 110 kB (110115 bytes)
Hash a80e6695e0ab08035467b55c026d86b0
1571eac10e99debd0af70d1b986e6714ed73d1f7
458c1c35323097ae0cd5d2361a68e595c1fa8a67a929d60380ead47ccdd5872a
GET /wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-review-slider-image/image-1.jpg HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:47 GMT
content-type: image/jpeg; charset=utf-8
content-length: 110115
cache-control: public, max-age=10800, s-maxage=432000
expires: Wed, 15 Feb 2023 06:49:46 GMT
last-modified: Thu, 14 Jul 2022 04:16:06 GMT
etag: 2062023155730
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-assets
x-xss-protection: 1,mode=block
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d600edcb515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-hero-image/top.jpg
200 OK 290 kB URL HTTP/2 modules.marriott.com/wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-hero-image/top.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1800x700, components 3\012- data
Size 290 kB (289789 bytes)
Hash 90658632b0ae978cd55f18f401b64696
f7779f4e3801ffca3e5d3be0a980c5ebc11004ae
867e9808403632beadfc9ae1d0f5aaf546ed2c6047d56078b65459058c0601ec
GET /wedding-fair/resourcefiles/the-westin-yokohama-wedding-jp-tyowy-japanese-weddings-hero-image/top.jpg HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:47 GMT
content-type: image/jpeg; charset=utf-8
content-length: 289789
cache-control: public, max-age=10800, s-maxage=432000
expires: Wed, 15 Feb 2023 06:49:46 GMT
last-modified: Wed, 31 Aug 2022 04:56:53 GMT
etag: 2062023155730
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-assets
x-xss-protection: 1,mode=block
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d600ed8b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/marriott.woff?b37gqz
200 OK 5.7 kB URL HTTP/2 modules.marriott.com/wedding-fair/fonts/marriott.woff?b37gqz
IP
File type Web Open Font Format, TrueType, length 5676, version 1.0\012- data
Hash 45c2a9c2262bbd57fb71a419d0717c26
664a5aef13f8e5105ae2f37d1edbbb4bc198390f
004cb6ed27b4239b91cad830d6e5efba84cbb1b2b52731c92ec9cada5d1463c4
GET /wedding-fair/fonts/marriott.woff?b37gqz HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:47 GMT
content-type: font/x-woff; charset=utf-8
content-length: 5676
cache-control: private
expires: Wed, 15 Feb 2023 06:49:47 GMT
last-modified: Fri, 23 Dec 2022 09:26:39 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d695899b515-OSL
X-Firefox-Spdy: h2
marriottinternationa.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 marriottinternationa.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: marriottinternationa.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Wed, 8 Feb 2023 06:49:48 GMT
DCS: dcs-prod-irl1-1-v045-0a637d725.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 11:02:56 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: Jb79+1MrQg4=
Content-Length: 2791
Connection: keep-alive
modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
200 OK 86 kB URL HTTP/2 modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
IP
File type Unicode text, UTF-8 text, with very long lines (409), with CRLF, LF line terminators
Hash a3e0e1aa683ddd354e4756e3c7d5c8fa
e0a159578de2dc0fd32885e5b755d6af186f100b
74b9c609957797a87aa6e3482487a32fe6de3b38a5edc9329bc5d06453e00472
GET /wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:47 GMT
content-type: text/css; charset=utf-8
cache-control: public, stale-while-revalidate=180, max-age=15600, s-maxage=156000
content-encoding: gzip
vary: User-Agent,Accept-Encoding
x-trace-id: e0823474-66e9-42d6-91b1-35d32e94e5ee
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-css, df-1828517, df-1828518, df-1828519, df-1828520, df-1828523, df-1828562, df-1828568, df-1861922, pt-406439
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:2222bae7-6b65-488b-a7a8-8f50b5e55838
access-control-expose-headers: Request-Context
last-modified: Wed, 08 Feb 2023 06:49:47 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 79626d600eceb515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/proximanova-regular.woff2
200 OK 34 kB URL HTTP/2 modules.marriott.com/wedding-fair/fonts/proximanova-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34192, version 1.0\012- data
Hash 0071b00b4d686a9bf227e289c40d6f55
a5df17ced56e84a530d5ff031ea11f1191ce7f42
83a8f7c87f37437a3920dc2aec1a1fc93a55220b4aa4e55d4e6a20299557e411
GET /wedding-fair/fonts/proximanova-regular.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Connection: keep-alive
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:49 GMT
content-type: application/font-woff2; charset=utf-8
content-length: 34192
cache-control: private
expires: Wed, 15 Feb 2023 06:49:48 GMT
last-modified: Thu, 22 Oct 2020 11:03:59 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d6cdc44b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/swiss721bt-boldcondensed.woff2
200 OK 20 kB URL HTTP/2 modules.marriott.com/wedding-fair/fonts/swiss721bt-boldcondensed.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19752, version 1.0\012- data
Hash 6ade61a6e4497f96888f5d851b1a921d
85b2aeaa94e24976300ac412434c3f16d74250eb
9a1a6b9fac3b29ace218d897ca982ae0a93e1dea13aca2c62d95627f30595157
GET /wedding-fair/fonts/swiss721bt-boldcondensed.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Connection: keep-alive
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:49 GMT
content-type: application/font-woff2; charset=utf-8
content-length: 19752
cache-control: private
expires: Wed, 15 Feb 2023 06:49:48 GMT
last-modified: Thu, 22 Oct 2020 11:03:58 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d6d6cd8b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/freightdisppromedium-regular.woff2
200 OK 36 kB URL HTTP/2 modules.marriott.com/wedding-fair/fonts/freightdisppromedium-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35572, version 1.0\012- data
Hash 9c9d846f313eb03262eeaaac2343cc13
8695375b982fce53af29b8b48d836f3a95ae8631
43101d47afbc6542b4e38bc0eef2a3d0d0a8ddbe45b55a2c081fc2538b9f8dff
GET /wedding-fair/fonts/freightdisppromedium-regular.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Connection: keep-alive
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:49 GMT
content-type: application/font-woff2; charset=utf-8
content-length: 35572
cache-control: private
expires: Wed, 15 Feb 2023 06:49:48 GMT
last-modified: Thu, 22 Oct 2020 11:03:59 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d6d4cb0b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/proximanova-bold.woff2
200 OK 34 kB URL HTTP/2 modules.marriott.com/wedding-fair/fonts/proximanova-bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34164, version 1.0\012- data
Hash 26507f8e38e05d86d4980f09f01ea66e
9b61c0c9dec8514db93348a086a36fa7dfd566ba
5eacccb90425ae5151eb0d97b8c122a991fdc04e7dc404b6a20ccabea565c8db
GET /wedding-fair/fonts/proximanova-bold.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Connection: keep-alive
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:49 GMT
content-type: application/font-woff2; charset=utf-8
content-length: 34164
cache-control: private
expires: Wed, 15 Feb 2023 06:49:48 GMT
last-modified: Thu, 22 Oct 2020 11:03:59 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d6d7cebb515-OSL
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC78d2ab32ef0d4ee6a18f0b50fcc75be4-source.min.js
200 OK 335 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC78d2ab32ef0d4ee6a18f0b50fcc75be4-source.min.js
IP
File type ASCII text, with very long lines (426)
Hash d70b158c94d71f98894b8bb9097bf574
6c41c98bdb18b2eebedf0da418c07d223c4a9f1f
5ed9651135f9f2fcb64db197ab6f48713acaf6ebe290be2fb36f555630174393
GET /697d0c070f1e/d405339bb010/261131673dec/RC78d2ab32ef0d4ee6a18f0b50fcc75be4-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 335
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCa5ed73b2eef54820a2200065c47aced4-source.min.js
200 OK 776 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCa5ed73b2eef54820a2200065c47aced4-source.min.js
IP
File type ASCII text, with very long lines (1551)
Hash 14bc83b23ed7aa1a6dc80f3d3882c368
93c41b76f7b2c31dc7ff9783ddc14689d849f9d8
4957f78935a0d6f6403f3633dac908c87cdca0877a3a16446c4f5f55c6940193
GET /697d0c070f1e/d405339bb010/261131673dec/RCa5ed73b2eef54820a2200065c47aced4-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 776
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 08 Feb 2023 05:45:20 GMT
expires: Wed, 08 Feb 2023 07:45:20 GMT
cache-control: public, max-age=7200
age: 3869
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6a04429df489dcff6b131a95af319157
223f0a28b399c98baff3e53605aa86fa1c763b11
400e073898e632e177b232cde3e7cbce796c2a38ca9f947cf2acf568a4f93777
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 06:49:49 GMT
Last-Modified: Wed, 08 Feb 2023 05:26:00 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DdtZvRnTbhblDsPpTdGszFPqbsTz4PwWfL2I7BGJ_79_KJQeO-mzvQ==
Age: 5029
cm.everesttech.net/cm/dd?d_uuid=20425576610272577514194597536839578570
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=20425576610272577514194597536839578570
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=20425576610272577514194597536839578570 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Wed, 08 Feb 2023 06:49:49 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y_NGDQAAAFLrcAMx; Domain=.everesttech.net; Expires=Thu, 08-Feb-2024 06:49:49 GMT; Path=/
everest_session_v2="Y@NGDQAAAFLrcQMx"; Version=1; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx
Server: AMO-cookiemap/1.1
ocsp.digicert.com/
200 OK 471 B IP
Hash 8d2ef74b3a8d4c0e26b8875f104ca51c
6319984e8f3dde40924dfd29913da0cb4485bb5c
a473b25dd829f6b66feb865e1c9cc63b56a509ad0e20a6ae74c527fc1a1f7f58
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3811
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Last-Modified: Wed, 08 Feb 2023 05:46:18 GMT
Server: ECS (amb/6BB3)
X-Cache: HIT
Content-Length: 471
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/otSDKStub.js?5670605821198834
200 OK 6.9 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/otSDKStub.js?5670605821198834
IP
File type ASCII text, with very long lines (20884)
Hash 5b659555dab4aa444de9651e45619401
12409bdbb526656fdeb4d5279a5843a76b1d6a3a
6cca76915139d3a4f75006830d07976aac58e4151727e5810c74a5da8c7314cd
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/otSDKStub.js?5670605821198834 HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "67b989d4e95276950bf7da56f7c0598d:1654544327.296254"
last-modified: Mon, 06 Jun 2022 19:38:47 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2165036
expires: Sun, 05 Mar 2023 08:13:45 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 6886
access-control-allow-origin: *
X-Firefox-Spdy: h2
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/consent/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test.json
200 OK 4.0 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/consent/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test.json
IP
File type JSON data\012- , ASCII text, with very long lines (4006), with no line terminators
Hash 2f1c841426300bd3781a1752ab891f7c
244c8de27dc9cc1e149bd8cd0394bcbab2c735e6
7316c1dfbc9f061b2280befce5285d9576624d84376031f96583df11d82ea916
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/consent/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test.json HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/json
etag: "2f1c841426300bd3781a1752ab891f7c:1654545293.924385"
last-modified: Mon, 06 Jun 2022 19:54:53 GMT
server: AkamaiNetStorage
content-length: 4006
cache-control: max-age=132996
expires: Thu, 09 Feb 2023 19:46:25 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: *
set-cookie: _abck=7EDB125B248F72166FF5C2866164F1FE~-1~YAAQJXchF+h85hCGAQAAx6TJLwl0k4tQd41Y2LlESNGcMz3936zS4yK44xlQtPMLBdO4d1K51Kpv8uy0Ai6F1qzlgoEYrt68z8yEQWZ4bMrH7752SlpdWWIFaEZtEoeFz2tdpDC2fV2NKGLaPCH2YjsT9AUQUb77C4qmYdVtDgTJtRvn6ptcUNEGaIg8T464p5q3CZZGocDrbntRfQMXNsZSCRgVfAp/BOz8ccSMSA7ii+f9sgESTcRdYJYGmVNkd1Arefl1DmrKMm0CLPEtoYLc/0L978yfwE5H6AqDfngl8dmUTj0paUdqTEN94PWxJ8Y4i0NiSStp18RW7P82FZMt5V8rJ47l0MXCibfvm5S6gqm9JZpDN63xXF6VbW8=~-1~-1~-1; Domain=.marriott.com; Path=/; Expires=Thu, 08 Feb 2024 06:49:49 GMT; Max-Age=31536000; Secure
ak_bmsc=A04FF17841F16D4B849CB629B84825E2~000000000000000000000000000000~YAAQJXchF+l85hCGAQAAx6TJLxJr92S5tdTcpeXJXe/4vQ76mpaLesoP2tsS3CDNzXHRYXf6d1n9X6ls7YUE/K9n4mI/EXo1xLw9ZEDdOqwZFHZwe+a/RLpPxR2PeznDeIzuzZWhJNspBdDu9QRHR4Zp4g5J5Ju+EfZRZ+ZTxuB0aeXrowodlKevzRcohLsGaO8blp82PZtj+xooh4XAapAhGtGkk+nPSzE+h2skXjKONuXzmgUzqmXdcdTOje+XXs2O3NI3Bx7Ke7Htebo9AMjNe8ZtrDDgxOXcc2SdvxPHtwQsOESXK8fvx/JHOhxUZSWuk+LGxFcS1edZhHQU3GLwU8O1J42PqH6f7w6JryIbDFY843nN6uZRtRrm54Bo9xXUCl3ajmlKr3Q=; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 08:49:49 GMT; Max-Age=7200; HttpOnly
bm_sz=744E399784909A57EB6B3095A207999E~YAAQJXchF+p85hCGAQAAx6TJLxLeE9xb7L/cwgyvtfyJkDfCGGz/xxW8fL0lNz6IPS0T/bDQOgtW3by6pfR/DSwLcPufyY1OWqyTwn6AGuGXCuBofZ7LEutqDXtTgzz/stkhBx31yn6e0ydfCFJjBs9c5BSSPiaNEQKJiSc9Xpf9GeZETdSNwdVegmPBaxamp8F9xnxsMz3dv/mOsHwXB7GwW+OByr/mq7JQbeoJh6NwWlJ9SRWfSfFHWRraoVQMZP2foN6YVC0H55fnnZKK+6Js3nRqzQAN0vDDGw0AdNtquwYVtQ==~4338502~3682357; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 10:49:49 GMT; Max-Age=14400
X-Firefox-Spdy: h2
smetrics.marriott.com/b/ss/marriottglobalstage/10/JS-2.14.0-LCXS/s0521792949295?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=8%2F1%2F2023%206%3A50%3A42%203%200&d.&nsid=0&jsonv=1&.d&mid=20350679876346193904202044200100724131&aamlh=6&ce=UTF-8&pageName=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&g=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c5=US&c8=D%3Dv15&v15=Weekday%20%3A%20Wednesday%20%3A%201%3A30AM&c26=Launch&v41=US&c71=Off-Platform%20Basic&v101=Default%20Cookie%20Opt-in&v192=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&v237=en&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=664516D751E565010A490D4C%40AdobeOrg&AQE=1
200 OK 5.4 kB URL HTTP/2 smetrics.marriott.com/b/ss/marriottglobalstage/10/JS-2.14.0-LCXS/s0521792949295?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=8%2F1%2F2023%206%3A50%3A42%203%200&d.&nsid=0&jsonv=1&.d&mid=20350679876346193904202044200100724131&aamlh=6&ce=UTF-8&pageName=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&g=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c5=US&c8=D%3Dv15&v15=Weekday%20%3A%20Wednesday%20%3A%201%3A30AM&c26=Launch&v41=US&c71=Off-Platform%20Basic&v101=Default%20Cookie%20Opt-in&v192=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&v237=en&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=664516D751E565010A490D4C%40AdobeOrg&AQE=1
IP
File type ASCII text, with very long lines (5392)
Hash 42441ff0028fc03a69825163eacd5cb3
330aa8cdcef81083e9b826a1d08f5dae0cc1b412
a27a7c4928b856974f10852e636edfbcbf500fa36761588794840d4c3bc78289
GET /b/ss/marriottglobalstage/10/JS-2.14.0-LCXS/s0521792949295?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=8%2F1%2F2023%206%3A50%3A42%203%200&d.&nsid=0&jsonv=1&.d&mid=20350679876346193904202044200100724131&aamlh=6&ce=UTF-8&pageName=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&g=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c5=US&c8=D%3Dv15&v15=Weekday%20%3A%20Wednesday%20%3A%201%3A30AM&c26=Launch&v41=US&c71=Off-Platform%20Basic&v101=Default%20Cookie%20Opt-in&v192=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&v237=en&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=664516D751E565010A490D4C%40AdobeOrg&AQE=1 HTTP/1.1
Host: smetrics.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1; _ga=GA1.2.712684317.1675839042; _gid=GA1.2.718188137.1675839042; _gat_UA-141180002-1=1; s_tbm=true; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-origin: *
date: Wed, 08 Feb 2023 06:49:49 GMT
expires: Tue, 07 Feb 2023 06:49:49 GMT
last-modified: Thu, 09 Feb 2023 06:49:49 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3598836825763020800-4619382801051882310
vary: *
dcs: dcs-prod-irl1-1-v045-093556e0f.edge-irl1.demdex.com 7 ms
x-aam-tid: j3MRafjkRSo=
content-type: application/x-javascript;charset=utf-8
content-length: 5393
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 08d827599d6e17ec20d1e0ee75678fee
6a5ef595a553bf56a2d77580abf6c7e52d6c743c
8383c49e6fb801f926fe44ed60d2686b38c0232f47e2b989f7abdecfe6991519
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4708
Cache-Control: max-age=169892
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Etag: "63e3284d-117"
Expires: Fri, 10 Feb 2023 06:01:21 GMT
Last-Modified: Wed, 08 Feb 2023 04:42:53 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 78 B URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Hash a6dd87e1d9b1dad4396f71d2dbde4c2b
7c3f8d47e21bbea48e3721e8565b466d3d60f4a3
853361c5ecb42eaf8489d13cd391eee861a64d6b1d3e67990d26405a5677aac1
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:49 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79626d74afe60b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0f9127447.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=56115421285537748780060603632742973641; Max-Age=15552000; Expires=Mon, 07 Aug 2023 06:49:49 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: YndnQsggSOc=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y_NGDQAAAFLrcAMx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v045-0ebeee8d5.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: ksv/dJpvR3c=
Content-Length: 59
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7ec32dff957003dae195c36ca9e3bd6c
6761a20819b0d5a48216d74782e3ea752af7257a
953a3a2d35250df7b506b42f7d1d8813301dd1f9f9bcc30d2d100bd0788e4c76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/consent/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test/3509a96c-aa3e-429d-8eeb-04eaf007b8d5/en.json
200 OK 99 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/consent/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test/3509a96c-aa3e-429d-8eeb-04eaf007b8d5/en.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Hash 1e411a80fdfb8e365a2654e9af22506d
ef20544c40705f623cdd2d25025960c6d45e78b8
7fc5b20a8b03a8e8ab84e59afb867002c362f3aa5f0109cf4e5a9a1b00d88852
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/consent/b9c54897-9a69-45f1-bbe2-55b2ae0ba593-test/3509a96c-aa3e-429d-8eeb-04eaf007b8d5/en.json HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Origin: https://modules.marriott.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/json
etag: "1e411a80fdfb8e365a2654e9af22506d:1654544896.862281"
last-modified: Mon, 06 Jun 2022 19:48:16 GMT
server: AkamaiNetStorage
content-length: 98722
cache-control: max-age=116222
expires: Thu, 09 Feb 2023 15:06:51 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: *
set-cookie: _abck=7FF3573F08230ECEEA19873788E27EF4~-1~YAAQJXchF+t85hCGAQAAV6XJLwnOEWBJynWAKHg9HES87JN5YccuFkwM0fy6MrMrAN0YiTgJ0mOf0g2sGYcZlKvKpYWOuJyzEWCPH3dOnEEh9Kgil7uYaaT3F8m/xlGkazZouBJ15onvG6VhVMWCUcmnDtne3QwX8gbCZMwUbtWsdHJ0EWdiFNUl9L/ntk3+Jx9GxYSJURdV+AC8U/wejbDfKLCKGe28VakiJIE5uQghhrBOR24XyyrhI98/tRRebPxkN3pAXokscImxLVs0qAHe01z55tcqeaUsuqaUcJ7nOrq8hlH3rJBfhDHHHF7WqXw9El9CKPIG7KI93s3ufgdM0vQnSQme0SPFCjMJyetu06Tml0eXH1WkZljkAZo=~-1~-1~-1; Domain=.marriott.com; Path=/; Expires=Thu, 08 Feb 2024 06:49:49 GMT; Max-Age=31536000; Secure
ak_bmsc=6D207F669C813039C1EB7DE95867B46A~000000000000000000000000000000~YAAQJXchF+x85hCGAQAAV6XJLxIfVeodyguo/Ijk3XvDAcTfTbIbwD5M05rMsQgLrXGb2yjpoxnHsQ1RW5R8QY6f6vJpgR2sraYD1ycLvwSHgu4tBPBslZZgG4BLF844tcbRoma43XlVo4d6i5Vt14J+euDClC/9eMNRt67y4Ac5Yl0OyjbqKZdaOBtrHzz2T6AZYhotjryUWwrfZo1NAaG1qXIIcMnUXYkDmXzuQ9mo6cQgSumpg1KQWmlveVAlah+oNd99jrB7Z7E4/nebX2771IwskyTH4X6yPkpZaxCD/5h9iIqZlthISVzoj6sxKagA0KB/QizywqJqNLJOvh3/axUG5gIX2sIBQI/h9nfhntQFKrgLC6oj1Nv3g9MzEY5uI15ahH0W7bM=; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 08:49:49 GMT; Max-Age=7200; HttpOnly
bm_sz=A9198335BA1FC35CA7B05CC7251B7D00~YAAQJXchF+185hCGAQAAV6XJLxJ0jot3mRBtpwcyKJd6tVjMF3vd3gyJG6vgQHaKGPbvf29df7tGv6duhJRtinZkdjgxx/AxTcgT0s+td7GaH2qXGb/MCtPhwMUcrFtrXZOQIweANIifWFaFz1NYOvFQm4eXu+K7kGmjOT6ntaCBrqKCXaW1dXsO7FTaqvEat32sEIdCxVEpJTKVO7EfdwwvLHtIZ1+fxfrfd1Og0NT9FTsqilX+rGHbEgkCKD4NLnDYnlHN9LMbuyIHRACHSNQeQ3w4jWOwB/vGpIFd4+WOk45eLg==~4338502~3682357; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 10:49:49 GMT; Max-Age=14400
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&gjid=1941120677&_gid=718188137.1675839042&_u=YEBAAEAAAAAAACAAI~&z=1410399808
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&gjid=1941120677&_gid=718188137.1675839042&_u=YEBAAEAAAAAAACAAI~&z=1410399808
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&gjid=1941120677&_gid=718188137.1675839042&_u=YEBAAEAAAAAAACAAI~&z=1410399808 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://modules.marriott.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 08 Feb 2023 06:49:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb500618f5ce84b22ac56f249cbc4d22d-source.min.js
200 OK 270 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb500618f5ce84b22ac56f249cbc4d22d-source.min.js
IP
Hash 1b737741d5d13ebca26760458b599093
d3fe10a3fbe99e81811810e3e9d7dc47fb54a5f0
41380cf6027aebc01e8e19efcd0dda30f3315dc82e5049c407d67f2e4c94d808
GET /697d0c070f1e/d405339bb010/261131673dec/RCb500618f5ce84b22ac56f249cbc4d22d-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 270
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCe7ed036bb4cb4dc89bdf084029e843a5-source.min.js
200 OK 496 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCe7ed036bb4cb4dc89bdf084029e843a5-source.min.js
IP
File type ASCII text, with very long lines (629)
Hash 5fd79376df853eb4570c4929ee41fdb9
b8b07f1d156fc7ed4e4d56b19361855ef48fdc2b
7e096a53e938ac40bf39bdc050ab98f987d263cfa2fe9e9484d8f4a6d5b3ec28
GET /697d0c070f1e/d405339bb010/261131673dec/RCe7ed036bb4cb4dc89bdf084029e843a5-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 496
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC9cb1ec8ecf2a461187113443b47b5896-source.min.js
200 OK 714 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC9cb1ec8ecf2a461187113443b47b5896-source.min.js
IP
File type ASCII text, with very long lines (1227)
Hash a91190129cf1e2260bd0e3c5725bed4a
5a686c8247d6a6c3901a6df11a978929e81dfbef
0cca993388eccbe0cf1d428bb0cc5afbcdb00d8ccaa52899c7ccede9fa14c401
GET /697d0c070f1e/d405339bb010/261131673dec/RC9cb1ec8ecf2a461187113443b47b5896-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 714
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC62a22fd426a0470dad9c40c7f2f4b2fb-source.min.js
200 OK 410 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC62a22fd426a0470dad9c40c7f2f4b2fb-source.min.js
IP
File type ASCII text, with very long lines (501)
Hash d848bbc1770de6fa348c9ecda2887811
97407057bb2ed67f8b7e287cdaede983d2a58738
fdff91c22113d700b008f22a9e26c1f13641b786c3ac922882ba4ff3f0311890
GET /697d0c070f1e/d405339bb010/261131673dec/RC62a22fd426a0470dad9c40c7f2f4b2fb-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 410
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb12bd1abf26341f99678f8b654526b0f-source.min.js
200 OK 617 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb12bd1abf26341f99678f8b654526b0f-source.min.js
IP
File type ASCII text, with very long lines (1683)
Hash 50fc7f8053882cf9e3b30d82e5a548e0
da036b5860e5bf16eda68f90906d39c495173de8
b5a568c3fdf63e6d23c8ee411ef8ef14ddfdb43792ed71300a93c99420c6fe97
GET /697d0c070f1e/d405339bb010/261131673dec/RCb12bd1abf26341f99678f8b654526b0f-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 617
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC7397178f0a1540d798c3f1a3d2c85c1b-source.min.js
200 OK 644 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC7397178f0a1540d798c3f1a3d2c85c1b-source.min.js
IP
File type ASCII text, with very long lines (1193)
Hash be92c0b628feefccb450bba6c6bf0eba
2f7856f0f7e5001504302c0d8a901da7bad509a3
b4f29ab34352776736a8753176f78bd22c3319a8cc6071fd2beb42b360dd8e1a
GET /697d0c070f1e/d405339bb010/261131673dec/RC7397178f0a1540d798c3f1a3d2c85c1b-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 644
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCc37891c0d65e4f2581d609fc16498257-source.min.js
200 OK 297 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCc37891c0d65e4f2581d609fc16498257-source.min.js
IP
File type ASCII text, with very long lines (401)
Hash 6d4778846a69ec36ac360ca1318cdbef
dbd7cb89e94fc25324c420a8b1baf2ad71c2cd5d
bb1c98bb7cb36d6f7f78cb2351414c49282130de09b2f2ea7e7e50b79299be80
GET /697d0c070f1e/d405339bb010/261131673dec/RCc37891c0d65e4f2581d609fc16498257-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 297
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/otBannerSdk.js
200 OK 78 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash 34a1656649724db4342ba462bebdbd42
bc467dba8e97111052bd46bb5760934e3b0f0e42
94e60c9ef7368be751fd9b35548f33f0aa5f4e2e3bbd36b58cb769b0bc5572f1
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/otBannerSdk.js HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1; _ga=GA1.2.712684317.1675839042; _gid=GA1.2.718188137.1675839042; _gat_UA-141180002-1=1; s_tbm=true; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "aa2e3ff705d27b77a2480d446a15e46b:1654544357.83096"
last-modified: Mon, 06 Jun 2022 19:39:17 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=2101259
expires: Sat, 04 Mar 2023 14:30:48 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC28f29f2c23a143e0acc4cd8133230ddf-source.min.js
200 OK 727 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC28f29f2c23a143e0acc4cd8133230ddf-source.min.js
IP
File type ASCII text, with very long lines (1670)
Hash 9e3440d93e572e03e6e8f6add8c696ff
77a3e6efeab8be88e9425cd405b8c53c26c079fe
81b1764ebdcae28932ea3093d842d0c4d14becc42e75f37d6bcc5aeb93cb2186
GET /697d0c070f1e/d405339bb010/261131673dec/RC28f29f2c23a143e0acc4cd8133230ddf-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 727
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC69b12fc347724763b4d1d6b2bbb7bc67-source.min.js
200 OK 617 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC69b12fc347724763b4d1d6b2bbb7bc67-source.min.js
IP
File type ASCII text, with very long lines (1096)
Hash 0a00213fe89f3a42f6bb86d5d6a913df
d0bed2d63ef78f4d25312b3f152bfb9a380abc20
d3070747768db5995c26b62c03d8601d31a60233b372debbf1ae1714ff59fb55
GET /697d0c070f1e/d405339bb010/261131673dec/RC69b12fc347724763b4d1d6b2bbb7bc67-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 617
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC9f906a1934ae46f6b85351f19bfa52f0-source.min.js
200 OK 905 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC9f906a1934ae46f6b85351f19bfa52f0-source.min.js
IP
File type ASCII text, with very long lines (2026)
Hash f3624b18172b703c2d27762757131681
c84dd6b859e71b407d957709e23b098c6e757224
a118fc967f1442f75dc49199e7e27d82fd7fcf3e07fcd5ad51b75f4cac31141c
GET /697d0c070f1e/d405339bb010/261131673dec/RC9f906a1934ae46f6b85351f19bfa52f0-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 905
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb6c3578477864b5583591694fb0c7548-source.min.js
200 OK 1.1 kB URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb6c3578477864b5583591694fb0c7548-source.min.js
IP
File type ASCII text, with very long lines (3602)
Hash a3dc701722171d06337a6ad3736ba27e
9e67c0b1533cd407c8f64a4a9873635f67e3f65a
469eb8e838def6d86c329a84a9819f1b61b2164ee343ba3d076997d354a5626c
GET /697d0c070f1e/d405339bb010/261131673dec/RCb6c3578477864b5583591694fb0c7548-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 1130
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC1b12bbad598c4c1380765438bb0467a9-source.min.js
200 OK 454 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC1b12bbad598c4c1380765438bb0467a9-source.min.js
IP
File type ASCII text, with very long lines (571)
Hash b4943044299a3b2cbd7e0d090e58ad3c
e92e64f4b75888319d9006147abcf222ed7b2c09
5cc61f20c29fa251dc41d5c918a2fba3a92af5d2228fe9235cf89bc737c36754
GET /697d0c070f1e/d405339bb010/261131673dec/RC1b12bbad598c4c1380765438bb0467a9-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 454
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb70d7bef713543b09b57afbc6f9e056a-source.min.js
200 OK 1.1 kB URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RCb70d7bef713543b09b57afbc6f9e056a-source.min.js
IP
File type ASCII text, with very long lines (2791)
Hash cb03cedfc1827d02fff9855380787b97
fed8cefb4887ae79c24589280c3624adc4062b92
31da2d072e22a8f0120f397ad5a64b0974ebbb57d903304e57bc4bb8f3af1266
GET /697d0c070f1e/d405339bb010/261131673dec/RCb70d7bef713543b09b57afbc6f9e056a-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1097
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC5144740cc710431e95a7dd7c05b8b386-source.min.js
200 OK 679 B URL HTTP/2 assets.adobedtm.com/697d0c070f1e/d405339bb010/261131673dec/RC5144740cc710431e95a7dd7c05b8b386-source.min.js
IP
File type ASCII text, with very long lines (1304)
Hash 724dcf5145c8cba2e4811f87882698df
0595426fcd3814d7ac70d601378c6c41b9a728a1
1e9a6d43994a6ac2f857e736aa05bff9f8b6af6ad0c1e6193094e8b6ca23db11
GET /697d0c070f1e/d405339bb010/261131673dec/RC5144740cc710431e95a7dd7c05b8b386-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "01a97a8337c265092748cbcdb1a58595:1672857234.946752"
last-modified: Wed, 04 Jan 2023 18:33:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 08 Feb 2023 07:49:49 GMT
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 679
access-control-allow-origin: https://modules.marriott.com
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7ec32dff957003dae195c36ca9e3bd6c
6761a20819b0d5a48216d74782e3ea752af7257a
953a3a2d35250df7b506b42f7d1d8813301dd1f9f9bcc30d2d100bd0788e4c76
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E53FF462B053414D8A3C10A657865C6D Ref B: OSL30EDGE0420 Ref C: 2023-02-08T06:49:49Z
date: Wed, 08 Feb 2023 06:49:49 GMT
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 07 Feb 2023 07:31:39 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wZkzRag7CpHQ0OtOkEXb6tkWckrVnL-3mvnvQbdoJ5IZz0dq9h1wQA==
Age: 83891
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5bcb9125c18e4ed3562ceb950dc6eaad
a6c6944804b772de3a487723e3e866c0219de230
94947430d745a6648a2e87f163bf474b4fd4513519360bf4bfecfabc141e5ff1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&_u=YEBAAEAAAAAAACAAI~&z=871018192
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&_u=YEBAAEAAAAAAACAAI~&z=871018192
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&_u=YEBAAEAAAAAAACAAI~&z=871018192 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&_u=YEBAAEAAAAAAACAAI~&z=871018192
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&_u=YEBAAEAAAAAAACAAI~&z=871018192
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-141180002-1&cid=712684317.1675839042&jid=1094049100&_u=YEBAAEAAAAAAACAAI~&z=871018192 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (31034), with no line terminators
Hash aebfe79a43ab3b40d473082cb240bfe7
e176237cc68803a9dfc6ac7f5db919a6c8f4c5c3
a562e759047435340c5e9816df15a44f08f49c04482365e139a1591f1d1507ac
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13295
server: CloudFront
date: Wed, 08 Feb 2023 06:49:49 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Thu, 09 Feb 2023 05:29:12 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: GeneratedResponse from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: imtrB16rTeCdgLPZwpLDUtYzcgSiuF9eaT_QTG3UH7VZ9kkrEO4E3g==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ccbef7dcf1b1d32956833f5127c1ad5
af220576c82f064130ee7bfa3ea966d033e51707
f6eceec81f5b6deb7005fa9f3855ecb54e4bd6b3159c705decf0921e3a49067d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=8728
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8e4313b85758dbfee6025731c8ff1b6f
0a67eed5faf450db9cd21692a786ce9c2a2446b4
37b2097b59c1205957ba02b37c67f7a771728f16c294ee8150f7c9ad61d44e04
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2958
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Last-Modified: Wed, 08 Feb 2023 06:00:31 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 8e4313b85758dbfee6025731c8ff1b6f
0a67eed5faf450db9cd21692a786ce9c2a2446b4
37b2097b59c1205957ba02b37c67f7a771728f16c294ee8150f7c9ad61d44e04
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2958
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Last-Modified: Wed, 08 Feb 2023 06:00:31 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
static.sojern.com/marriott/mhotels.html?p=undefined&hprid=&hpr=&hb=undefined&hc1=undefined&hn1=undefined&hs1=undefined&ffl=undefined&hl=&t=undefined&hr=undefined&hd1=&hd2=&hconfno=&hp=undefined&hcu=&hrp=undefined&hdc=undefined&rew=undefined&l=undefined&vid=hot&cid=
200 OK 9.7 kB URL HTTP/2 static.sojern.com/marriott/mhotels.html?p=undefined&hprid=&hpr=&hb=undefined&hc1=undefined&hn1=undefined&hs1=undefined&ffl=undefined&hl=&t=undefined&hr=undefined&hd1=&hd2=&hconfno=&hp=undefined&hcu=&hrp=undefined&hdc=undefined&rew=undefined&l=undefined&vid=hot&cid=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 61166aab6d850b40153da0ce87a22993
2a828ef7a340348ee6628de92a9492244391d1ad
2cac89100642acb92e8c705a639a012b32de7eb32db954a31890da8a091610c3
GET /marriott/mhotels.html?p=undefined&hprid=&hpr=&hb=undefined&hc1=undefined&hn1=undefined&hs1=undefined&ffl=undefined&hl=&t=undefined&hr=undefined&hd1=&hd2=&hconfno=&hp=undefined&hcu=&hrp=undefined&hdc=undefined&rew=undefined&l=undefined&vid=hot&cid= HTTP/1.1
Host: static.sojern.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtKmEZI8qGJTQZLAhICbKeCZ19hJl1RvT6t4f-Nw-iLfnrrFuAFyLZEq_Sw5XDEh0uHF0hdCzYwnXnJxNFSCRLY
vary: X-Goog-Allowed-Resources
x-goog-generation: 1675445173923779
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9706
x-goog-hash: crc32c=9DJkug==, md5=YRZqq22FC0AVPaDOh6Ipkw==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 9706
server: UploadServer
date: Wed, 08 Feb 2023 06:37:42 GMT
expires: Wed, 08 Feb 2023 07:37:42 GMT
cache-control: public, max-age=3600
age: 727
last-modified: Fri, 03 Feb 2023 17:26:13 GMT
etag: "61166aab6d850b40153da0ce87a22993"
content-type: text/html
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c0251492cae08969a77cc1f8b4fa25e5
110161e230f81ac3a954dc1d5114c7401c1ecd93
6483e465b117e6af3950e659d8692acc4bb38f60c7dc312ec8c6824ac5f000ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5991
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Last-Modified: Wed, 08 Feb 2023 05:09:59 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 8e4313b85758dbfee6025731c8ff1b6f
0a67eed5faf450db9cd21692a786ce9c2a2446b4
37b2097b59c1205957ba02b37c67f7a771728f16c294ee8150f7c9ad61d44e04
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2958
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:49 GMT
Last-Modified: Wed, 08 Feb 2023 06:00:31 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
beacon.sojern.com/pixel/p/140436?f_v=v6_js&p_v=1&vid=hot&pc=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&cid=
200 OK 854 B URL HTTP/2 beacon.sojern.com/pixel/p/140436?f_v=v6_js&p_v=1&vid=hot&pc=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&cid=
IP
Hash f62ac1c55c9bfe446e74d3b7358fb685
8c114d8420377ceee624e44eb2b8e1633d7f3728
f769e650eb7804771077d3715e6716c70a0226717fe8e863c2e3a9db283fc585
GET /pixel/p/140436?f_v=v6_js&p_v=1&vid=hot&pc=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&cid= HTTP/1.1
Host: beacon.sojern.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript
p3p: policyref="/w3c/p3p.xml", CP="ADMa OUR IND DSP NON LAW"
set-cookie: cid=5ed55556-5bab-0633-12c3-1204ca665218#1676419200000; Path=/; Domain=sojern.com; Max-Age=31536000; Secure; SameSite=None
vary: Accept-Encoding
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 854
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: gQi9duDS/bTStlK1Wa7d5h8K8QfJOymUpztBs6dfXJnZHep7AT9riW1X2+e8svHQARCnQS9jk46d5+ITbVz9Og==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1679558926
date: Wed, 08 Feb 2023 06:49:49 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bat.bing.com/p/action/5140893.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/5140893.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5140893.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BDBDDC08EDBD408594704E0998CBF59D Ref B: OSL30EDGE0420 Ref C: 2023-02-08T06:49:49Z
date: Wed, 08 Feb 2023 06:49:49 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c0251492cae08969a77cc1f8b4fa25e5
110161e230f81ac3a954dc1d5114c7401c1ecd93
6483e465b117e6af3950e659d8692acc4bb38f60c7dc312ec8c6824ac5f000ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5992
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:09:59 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
bat.bing.com/action/0?ti=5140893&tm=al001&Ver=2&mid=da2e7d45-cdc6-4f73-8237-457c903a7ef5&sid=e8357df0a77c11ed8fa2ddd48d901ad1&vid=e8357fa0a77c11edbada3f1bd3fac9e6&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Westin%20Yokohama&p=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&r=<=6414&pt=1675839036500,,,,,428,435,483,483,703,487,703,2874,2875,2880,5867,5892,5902,6375,6375,6414&pn=0,0&evt=pageLoad&sv=1&rn=492846
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5140893&tm=al001&Ver=2&mid=da2e7d45-cdc6-4f73-8237-457c903a7ef5&sid=e8357df0a77c11ed8fa2ddd48d901ad1&vid=e8357fa0a77c11edbada3f1bd3fac9e6&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Westin%20Yokohama&p=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&r=<=6414&pt=1675839036500,,,,,428,435,483,483,703,487,703,2874,2875,2880,5867,5892,5902,6375,6375,6414&pn=0,0&evt=pageLoad&sv=1&rn=492846
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5140893&tm=al001&Ver=2&mid=da2e7d45-cdc6-4f73-8237-457c903a7ef5&sid=e8357df0a77c11ed8fa2ddd48d901ad1&vid=e8357fa0a77c11edbada3f1bd3fac9e6&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Westin%20Yokohama&p=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&r=<=6414&pt=1675839036500,,,,,428,435,483,483,703,487,703,2874,2875,2880,5867,5892,5902,6375,6375,6414&pn=0,0&evt=pageLoad&sv=1&rn=492846 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2836973F4881646826CD858D49D66587; domain=.bing.com; expires=Mon, 04-Mar-2024 06:49:50 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FAEC1657F3604D1F8701321D5B21A46B Ref B: OSL30EDGE0420 Ref C: 2023-02-08T06:49:49Z
date: Wed, 08 Feb 2023 06:49:49 GMT
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 7b87dc21657a316303ec828c5c08d0fb
c6ba04ab65f6599aa74e5fc3bcd334b61d0ce0b6
742b38dc90591c33c97917ecbaf63c0f1ab70ef481f2a2daebeecd66c89e6ed4
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 12 Feb 2023 03:26:46 GMT
ETag: "c6ba04ab65f6599aa74e5fc3bcd334b61d0ce0b6"
Last-Modified: Wed, 08 Feb 2023 03:26:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3241
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79626d782c3fb518-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 878940fb0bb1730fbd1f9d21ac21eb01
0235e184f27cd464e82ccd586f4f1806b1fc57f5
c282d06fad44cefcc695a283a0d6e8cca9bc185f38c25ba2ce479b000d17993a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3847
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:45:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 878940fb0bb1730fbd1f9d21ac21eb01
0235e184f27cd464e82ccd586f4f1806b1fc57f5
c282d06fad44cefcc695a283a0d6e8cca9bc185f38c25ba2ce479b000d17993a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4070
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:42:00 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 878940fb0bb1730fbd1f9d21ac21eb01
0235e184f27cd464e82ccd586f4f1806b1fc57f5
c282d06fad44cefcc695a283a0d6e8cca9bc185f38c25ba2ce479b000d17993a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3847
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:45:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 81cb953fadf9e47b0a9c2ae51c8bfbdd
c3001b3f0e3909a89b5b063eac41299443eb941a
a159e5324ecdf7e5c2fbd27226180b80b96a23a6235df2ffa3d71ca157001672
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "81cb953fadf9e47b0a9c2ae51c8bfbdd"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1146
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
tr.snapchat.com/cm/i?pid=fbf5aa06-3f82-45b5-86ba-4c4fe9c75a96&u_scsid=328162a0-cda7-41c3-a4b8-98a515d76e67&u_sclid=7d9850f2-6cbc-4996-90a9-c290de2ea86c
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=fbf5aa06-3f82-45b5-86ba-4c4fe9c75a96&u_scsid=328162a0-cda7-41c3-a4b8-98a515d76e67&u_sclid=7d9850f2-6cbc-4996-90a9-c290de2ea86c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=fbf5aa06-3f82-45b5-86ba-4c4fe9c75a96&u_scsid=328162a0-cda7-41c3-a4b8-98a515d76e67&u_sclid=7d9850f2-6cbc-4996-90a9-c290de2ea86c HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/otFloatingRounded.json
200 OK 9.9 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/otFloatingRounded.json
IP
File type JSON data\012- , ASCII text, with very long lines (7980)
Hash becf963d0b2b5f4544a5ec243252794c
f248653acbd8ffded09cdf61b9a16c23d12d2f59
777ab0cb5c6ffd6b2d455918b8df70fdb4c74ecb18d62f54be1afdaf3733c10d
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/otFloatingRounded.json HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Origin: https://modules.marriott.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/json
etag: "becf963d0b2b5f4544a5ec243252794c:1654544379.603934"
last-modified: Mon, 06 Jun 2022 19:39:39 GMT
server: AkamaiNetStorage
content-length: 9894
cache-control: max-age=196529
expires: Fri, 10 Feb 2023 13:25:19 GMT
date: Wed, 08 Feb 2023 06:49:50 GMT
access-control-allow-origin: *
set-cookie: _abck=43F4A9D2C8AE8F8D67C8DDFAD9E3C9B9~-1~YAAQJXchF+585hCGAQAAR6fJLwm7+mTLzOZRHhuaH9cqefWMylcUAEOlX+uxCedGUHgf17kcFaLSFg3NO5csSmOk3VRuNd8usgkjIwP/tRirDJrER0PZRYfmmv+GqIoqToYSf34R7buemZZmmyrN/1oCoUwWc0VNMzjPWop7oPSspFumpkRXxGD2lPXMHy786ERG9lk9NYt4oQrF++ZdQBjyPkUa0MiKfuSegZnoIcoXusu12vDlu9k4s2jjK4NroleeLY6n1tsXq4DjYoaNb4o0TkbXzXiYyI0Yz0WWNPL1azkELoHusO9bhKOCZZ+XXH+dOPoLv7PnezNZblKgc4Y6w7WeQ971eQoB+yrVJFwM7nrjRtuCR/HFUq1XPgg=~-1~-1~-1; Domain=.marriott.com; Path=/; Expires=Thu, 08 Feb 2024 06:49:50 GMT; Max-Age=31536000; Secure
ak_bmsc=DD78D75B8F85AF555C6DC2F40B6603C3~000000000000000000000000000000~YAAQJXchF+985hCGAQAAR6fJLxLODvg1b47RxQYXjKjhnka8tDc9Krqi/PW6yZrDp8o+bCFBaMGszDuDaDP7OotfHOkiszIAV1Z1gHpQYv7lRS+PCbzF4tiINvn1cEL+zPKB2DU9vnjVKJ9ByMX35+ZOE3f5urpnPIgKErjWJ8/J6EekEtQcaqf5or2mxx53/3NgF1o+mnletdGxrvzUhu0BA4JEhGBOawgy4DP8bzis/m7bAqF4j68w825vtcf4AekCkRSAdGJflhEMbaf+mBpeux80/cTG+AFC1mVCEV05xJYQvgcxUOueQypRDGvqbXIrS6CuDBmDQm72fPWoS65eLcdSfWYVKPxXw5wP/OUNp6sBCyetf7uBg9+8MThUDEXysQdivq/5d/w=; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 08:49:50 GMT; Max-Age=7200; HttpOnly
bm_sz=368260461FBDC523D6E746065299820C~YAAQJXchF/B85hCGAQAAR6fJLxIyF6OND7qShP7TpPgG6otqludDRy2qS2/CMkfP/yxe6Ye1dNR1/CNKWVnQqcx7VtSwq0IzbhqSiBTmZL9FW5JI/yxT8HbXQm36McMZdSdB/0HdMm0WNkl2G950KbXhcf3k4730WqAs8NUZ7279vZNlolj4PJkpcBtLjRIXT2sNVLoAMEmkc5JnUhEJShGLSIthcgqLLdryuKsxiBg49/OElpd5Lr7J9xm5kZ01J2AYRT2nYdLJxFsizqwLil4Qtyi7Z+aZlq0DyG4BX45Kmb+bNg==~3617840~3225925; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 10:49:50 GMT; Max-Age=14400
X-Firefox-Spdy: h2
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/otCommonStyles.css
200 OK 4.1 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/otCommonStyles.css
IP
File type ASCII text, with very long lines (11123)
Hash fa9e2d2183e65ab108397973040bbd40
5250f3400e60bdacac3b759ba29f25ac390ac736
81099a71b62d0cf269f997baad75bbfa87a43a75f17e6b2923bed409e7e5b4c2
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/otCommonStyles.css HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Origin: https://modules.marriott.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/css
etag: "61ee8e79970dcae1685a883b098b34d0:1654544379.290447"
last-modified: Mon, 06 Jun 2022 19:39:39 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1104087
expires: Tue, 21 Feb 2023 01:31:17 GMT
date: Wed, 08 Feb 2023 06:49:50 GMT
content-length: 4130
access-control-allow-origin: *
X-Firefox-Spdy: h2
cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/v2/otPcTab.json
200 OK 48 kB URL HTTP/2 cache.marriott.com/aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/v2/otPcTab.json
IP
File type JSON data\012- , ASCII text, with very long lines (36077)
Hash 398ef3d808c735374c8e1b4d3984d51a
64a0f74836e637587829d25cbb3938e59aa0ed05
4efca4768dedb757f956b51f3620d1521be4e8f065080515489defc83c2de704
GET /aka-fonts/OneTrust/R1.3/oneTrust_test/scripttemplates/6.26.0/assets/v2/otPcTab.json HTTP/1.1
Host: cache.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Origin: https://modules.marriott.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/json
etag: "398ef3d808c735374c8e1b4d3984d51a:1654544407.4634"
last-modified: Mon, 06 Jun 2022 19:40:07 GMT
server: AkamaiNetStorage
content-length: 47745
cache-control: max-age=97354
expires: Thu, 09 Feb 2023 09:52:24 GMT
date: Wed, 08 Feb 2023 06:49:50 GMT
access-control-allow-origin: *
set-cookie: _abck=E5F3EFE969E5ADBE6AE4603B26060E77~-1~YAAQJXchF/F85hCGAQAATKfJLwk62/W2l5pNJCgzCWPK9Qt9f7PPPaoZ5caUIpKZZNkkvFprhEnx4jpwsjuhaPnSDlwtQA1tIj1jqKnhJ4PeWOQ8MgeTryXuRrkGtUOFgWFu5MQay55giQiMite/nK7Egsq00WXApW5X8fjlIa6cPkpMGUk9bOAIPe0rcN+U7gn47EO7N3PufL8WrkzPOb1dAieRaKzcPaOb53BljA4qN/xF7UCsLQ9KqiQOY4iLx0EWPqyoASq3LUakWtR+U7Vhw24GTMVLLhuqKWtJRTg1Jl2x9J+dcpStnycLBoJ98jsSDnJlcZXd6M8rL/tQbk5Vgv5fDS4C3Gn8wTNhnLF5wf27/H06OPNY2LvbiMw=~-1~-1~-1; Domain=.marriott.com; Path=/; Expires=Thu, 08 Feb 2024 06:49:50 GMT; Max-Age=31536000; Secure
ak_bmsc=DB94286CB89DDAE8AAC0A8C6AAD5443B~000000000000000000000000000000~YAAQJXchF/J85hCGAQAATKfJLxIPLi11MBibsFCgDuYVUcpsHOd0DznSq0HMZP6wc6cCsie//IC0QKPMJve5nhfSqkUv4/ZvbCnH/Xmu04ueZ6AZyfygsYsUxPkMw0ddgQYVVUnCeLjfOBitx1wUFQFO3fOkAddhnZjDLp/z7x23aDBYa35T/nGGCEO+ssxYW42KJlgzPCo8LvqgU65K6HPg+4WxIl8pafTvs2XFxjqgQTV+aUtbHq0fds61346LvvKaYgbZ+Rqv6qBrSJGH6e/nhTkEnjcqYQ7QJ6ck4dl7DVucbcoThCCIq2nr2oNYAPMXZKjGpDvE0bQ73MZml/io0EU85nCPWx44LzzyfsccVO5YgH4mMebKG80SyRywdyGlTqdf0ZbKgAs=; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 08:49:50 GMT; Max-Age=7200; HttpOnly
bm_sz=D46B03FF60C2969696BCA24DAC676FDE~YAAQJXchF/N85hCGAQAATKfJLxIKPH9Ri0aHcO5oCcUj8/xk5VuFls/4GPA+0fQeflc1nHM+ZRWraqP29pJ6rN0LrIyXCqWaqKz3qblSJz83vknpO1zKEcxljdaPWM1eOe7jge9gTgKqA3Oz++OZpGnSDw57st4eBKscyqqNDQNsRdduZVdP6FxtcpkJhZa3UnyzgmGh+L39uOYVRzv5RLeOs812SXT/qGgqdMP0vLcjlWGUtgAOR7NuKFj46WlSDYFGLwjrAtpIgapC4BnGOltJsPbA3g1tGEEBPWBCA32RQeJbdQ==~3617840~3225925; Domain=.marriott.com; Path=/; Expires=Wed, 08 Feb 2023 10:49:50 GMT; Max-Age=14400
X-Firefox-Spdy: h2
tr.snapchat.com/p
200 OK 68 B IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 437
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
access-control-allow-origin: https://modules.marriott.com
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgRUAIAQFwIm8h6T+OCWmMHx3eOZXmEmXJZlnEMKKQsoBRZ463eJr7rEBbv6V3LuJMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 6
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6d70c8a1d3b98a7f8da372bff10f99a6
8b5655a73977b9fa56ac443d26351c3732446f10
4a2f007f1d85543e7891a50aefe52a932da5eed257d1649d434bace483c6fe5e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5672
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:15:18 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
login.dotomi.com/ucm/UCMController?dtm_com=28&dtm_cid=2814&dtm_cmagic=8e987c&dtm_format=5&dtm_fid=101&cli_promo_id=2&dtmc_marsha_code=&canonical_url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&dtm_user_token=&dtmc_ref=&dtmc_loc=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&fpc_status=
200 OK 181 B URL HTTP/2 login.dotomi.com/ucm/UCMController?dtm_com=28&dtm_cid=2814&dtm_cmagic=8e987c&dtm_format=5&dtm_fid=101&cli_promo_id=2&dtmc_marsha_code=&canonical_url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&dtm_user_token=&dtmc_ref=&dtmc_loc=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&fpc_status=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ae5f5d9ecac33a3bfcc1b428d7e57393
371f7865180383bdbecde5066f96f4e96306091c
9170f96d6133c832c41b8243196ad1955708ecb7f17e8d3dd0797d6a96ed6189
GET /ucm/UCMController?dtm_com=28&dtm_cid=2814&dtm_cmagic=8e987c&dtm_format=5&dtm_fid=101&cli_promo_id=2&dtmc_marsha_code=&canonical_url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&dtm_user_token=&dtmc_ref=&dtmc_loc=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&fpc_status= HTTP/1.1
Host: login.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: text/html
content-length: 181
cache-control: no-cache, private, max-age=0, no-store
expires: 0
pragma: no-cache
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP NID OUR STP"
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.0 kB IP
ASN #203220 Yahoo! UK Services Limited
Hash 4ce6b0212c2344e8b88fe66269f43a7d
4f6d8c13d98f2b84260eb725b9d3f83142a4ab24
762e6a24ea0b98cf18f3bcff793f5b5e5859d885320a5181f4e800426bc992ce
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nXOJ5V8dWf9mAjMkuy4BI85ufaJwgOn7gsb7Hv0Kt4gzv8MlAyYSY5Tr8CWT2F8unh7gVq9WgAk=
x-amz-request-id: E2X7R8SX4RT1F61D
date: Wed, 08 Feb 2023 06:49:28 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 23
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 878940fb0bb1730fbd1f9d21ac21eb01
0235e184f27cd464e82ccd586f4f1806b1fc57f5
c282d06fad44cefcc695a283a0d6e8cca9bc185f38c25ba2ce479b000d17993a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3847
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:45:43 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c471b21d134490ae24442cdb78208a9d
bfa9c84e2ee28ac6fdc9d505fd00439d8792043b
d1b607c65d35a568c2b04ae86635d85bb84912cfe78f6e2915e325d659259b08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c471b21d134490ae24442cdb78208a9d
bfa9c84e2ee28ac6fdc9d505fd00439d8792043b
d1b607c65d35a568c2b04ae86635d85bb84912cfe78f6e2915e325d659259b08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c471b21d134490ae24442cdb78208a9d
bfa9c84e2ee28ac6fdc9d505fd00439d8792043b
d1b607c65d35a568c2b04ae86635d85bb84912cfe78f6e2915e325d659259b08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/ddm/activity/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID]
302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID]
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID] HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 07:04:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3Drs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ
AN-X-Request-Uuid: b274e547-2643-44a6-95ac-0e327e99fd2a
Set-Cookie: uuid2=3641591031574704316; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/activity;src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama?
302 Found 0 B URL HTTP/2 ad.doubleclick.net/activity;src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /activity;src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama? HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 07:04:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=29464183&t=1
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=29464183&t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=29464183&t=1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D29464183%26t%3D1
AN-X-Request-Uuid: d62535f6-d9e4-41c3-87e4-5cfd532a7e54
Set-Cookie: uuid2=3294801185248470320; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D360572%26time%3D1675839043235%26url%3Dhttps%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJybjGN8xHbUAAAAYYvyae_aQ-ghgSv6-LTIOelEbWAcZXmm5BMk1IpdVEQZgykGVg4UQKlApUacQ; Max-Age=2592000; Expires=Fri, 10 Mar 2023 06:49:50 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJ_H77WzGbyBAAAAYYvyae_3vy_EKAxFxaCBbS7eQnQlVBma6Y64Km3DCEyzUcZrshLy7f5TEQEtDFDgda6Ig; Max-Age=2592000; Expires=Fri, 10 Mar 2023 06:49:50 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
bcookie="v=2&b2f4c694-a8e2-4266-8ff4-2e64b5dcd1b9"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 08-Feb-2024 06:49:50 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675838990:t=1675925390:v=2:sig=AQE3kMH3M7GEJse8mtlKk5sW26jJIM0K"; Expires=Thu, 09 Feb 2023 06:49:50 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0Kqu3LhQfwHAiT7DiIQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: FE3DAAD5A4BE44BA989AB4E9EF405B7A Ref B: OSL30EDGE0408 Ref C: 2023-02-08T06:49:50Z
date: Wed, 08 Feb 2023 06:49:49 GMT
content-length: 0
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern_adh
302 Found 305 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern_adh
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 1fc377c35656ac34dae5f6fbf3d030f9
2044057ba752c18481c3f6642ee39ddf4980bfda
bcf6fa8bacb8ab06670ef07ba05b73e3953a159ebe7cadacc74b2d6ddeed8acc
GET /pixel?google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern_adh HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern_adh&google_tc=
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 305
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 07:04:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.doubleclick.net/activity;src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama?
302 Found 0 B URL HTTP/2 ad.doubleclick.net/activity;src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /activity;src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama? HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 07:04:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c471b21d134490ae24442cdb78208a9d
bfa9c84e2ee28ac6fdc9d505fd00439d8792043b
d1b607c65d35a568c2b04ae86635d85bb84912cfe78f6e2915e325d659259b08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cm.g.doubleclick.net/pixel?google_cm=true&google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ&sjrn_ula=673976618
302 Found 461 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_cm=true&google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ&sjrn_ula=673976618
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash d62e2d5c0459bc8d7efd229446ec7b54
14852f16b9691cf84304cb5931732f4d5880e935
ce95e97040643f51b240d0b54ed144f376269c484bbbaa7343ee91d80774b3de
GET /pixel?google_cm=true&google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ&sjrn_ula=673976618 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_cm=true&google_hm=XtVVVlurBjMSwxIEymZSGA&google_nid=sojern__adx_open_bidder_seat&google_sc=true&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ&sjrn_ula=673976618&google_tc=
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 461
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 08-Feb-2023 07:04:50 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pxl.jivox.com/tags/re/pxrc.php?px=958deafa6b01b7&ret=img&cData=N/A&px_558deaefe29b99=N/A&px_45c37cd1a3ffb5=%27%27&px_75c37cd56820dd=N/A%20&px_65c37cdd1171be=1&px_95c37ce084b3e1=1&px_15b33b35ba04d9=N/A&px_65b33b372611c8=modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama&px_45b33b3b62bcfa=N/A&px_25b33b3e68bd91=N/A&px_05b33b3f8d42f0=N/A&px_25d820700bc474=%27%27&px_25b33b410cb604=N/A&px_25d8208f4381f8=N/A
200 OK 43 B URL HTTP/2 pxl.jivox.com/tags/re/pxrc.php?px=958deafa6b01b7&ret=img&cData=N/A&px_558deaefe29b99=N/A&px_45c37cd1a3ffb5=%27%27&px_75c37cd56820dd=N/A%20&px_65c37cdd1171be=1&px_95c37ce084b3e1=1&px_15b33b35ba04d9=N/A&px_65b33b372611c8=modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama&px_45b33b3b62bcfa=N/A&px_25b33b3e68bd91=N/A&px_05b33b3f8d42f0=N/A&px_25d820700bc474=%27%27&px_25b33b410cb604=N/A&px_25d8208f4381f8=N/A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /tags/re/pxrc.php?px=958deafa6b01b7&ret=img&cData=N/A&px_558deaefe29b99=N/A&px_45c37cd1a3ffb5=%27%27&px_75c37cd56820dd=N/A%20&px_65c37cdd1171be=1&px_95c37ce084b3e1=1&px_15b33b35ba04d9=N/A&px_65b33b372611c8=modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama&px_45b33b3b62bcfa=N/A&px_25b33b3e68bd91=N/A&px_05b33b3f8d42f0=N/A&px_25d820700bc474=%27%27&px_25b33b410cb604=N/A&px_25d8208f4381f8=N/A HTTP/1.1
Host: pxl.jivox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: image/gif
content-length: 43
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
pragma: no-cache
access-control-allow-origin: *
p3p: CP='IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA'
access-control-allow-headers: content-type
set-cookie: jvxsync=tvfHClVujhaq; Path=/; Domain=.jivox.com; Expires=Tue, 09-May-2023 06:49:50 GMT; Max-Age=7776000; Secure; SameSite=None
expires: Thu, 01 Jan 1970 00:00:00 GMT
server: Jetty(9.4.39.v20210325)
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ddbcc8409304b59c7d2faa53ed360fb5
98746db490891a3e5aa21f3dff58438d0c7795d5
b0ffc1ea39f25451920b84f09d650c564bd412bca0e2db72d99e736e385a176d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tr.snapchat.com/config/com/fbf5aa06-3f82-45b5-86ba-4c4fe9c75a96.js
200 OK 590 B URL HTTP/2 tr.snapchat.com/config/com/fbf5aa06-3f82-45b5-86ba-4c4fe9c75a96.js
IP
File type ASCII text, with very long lines (1603), with no line terminators
Hash 9beb07690cd8eff7e866d17607fdc670
96f15c0c09a8649421db657503599e0bed49e557
7ef1a1aca06439ac540a4531dedb0a3b0f7e864beaf6fe5c907a698fc50deccc
GET /config/com/fbf5aa06-3f82-45b5-86ba-4c4fe9c75a96.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
access-control-allow-origin: https://modules.marriott.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.yimg.com/wi/config/405909.json
200 OK 44 B URL HTTP/2 s.yimg.com/wi/config/405909.json
IP
ASN #203220 Yahoo! UK Services Limited
File type JSON data\012- , ASCII text, with no line terminators
Hash bef1253818c00b6e13b42804c46f2014
db6b66ebe34ec37ff27f8883143d7fbe21829661
fad2b41a387ad2bff0c05ed1475f79529e13a17163eb6e36f8953822d96ded88
GET /wi/config/405909.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: L2i3/01C8a/9KcbC1hqj4basdeSFTNCjQ1ZJcXFtI4N5C1pYgary+p5vhrwc8N3s79LU5LHuqE8=
x-amz-request-id: KD2XS53JXJWR69K3
date: Wed, 08 Feb 2023 06:49:51 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Thu, 23 Jun 2022 20:00:54 GMT
x-amz-expiration: expiry-date="Sat, 29 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "bef1253818c00b6e13b42804c46f2014"
x-amz-server-side-encryption: AES256
x-amz-version-id: 50Tr4LaAL2FlcpH6YjQKudKvwqwxbYro
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 44
referrer-policy: no-referrer-when-downgrade
age: 0
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://pixel.sojern.com/idsync/apn?id=$UID&sjrn_id=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.sojern.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DWckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV
AN-X-Request-Uuid: f5100d30-ad2c-446c-a633-96b8ceda3370
Set-Cookie: uuid2=2798989848301208805; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/px?id=1228256&t=1
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/px?id=1228256&t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px?id=1228256&t=1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.sojern.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fpx%3Fid%3D1228256%26t%3D1
AN-X-Request-Uuid: 6080af2e-8596-41eb-998c-c7f744681cb6
Set-Cookie: uuid2=1967450943144286985; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
secure.adnxs.com/seg?add=21126164&t=1
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=21126164&t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=21126164&t=1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.sojern.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D21126164%26t%3D1
AN-X-Request-Uuid: b9eaf059-bb17-4110-b343-68519357974f
Set-Cookie: uuid2=6873216902251644480; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=ombl9hp&ttd_puid=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.sojern.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
s.pinimg.com/ct/lib/main.39a1a5ee.js
200 OK 20 kB URL HTTP/2 s.pinimg.com/ct/lib/main.39a1a5ee.js
IP
File type ASCII text, with very long lines (57032), with no line terminators
Hash aa3ae2cb7b86f08a8eaf0b80a5d59e5d
bf33432e533dd9379f9d75f2b808dc8252127756
417137f3ec6fd9e519921555d898b61a2ea12e3e23835fe87612d6d16c31ad6c
GET /ct/lib/main.39a1a5ee.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "aa3ae2cb7b86f08a8eaf0b80a5d59e5d"
content-encoding: gzip
accept-ranges: bytes
content-type: application/javascript
content-length: 19691
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3Drs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3Drs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3Drs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://pixel.sojern.com/idsync/apn?id=0&sjrn_id=rs3Jeapo0iK0eZ77SE7ggs0-zhTxn5XQerzNNJo6aUYETksY13uu-IdkNWfnPhKQ
AN-X-Request-Uuid: a369cdbb-4a8f-4914-a7fe-c9f8a89074e4
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D29464183%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D29464183%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fseg%3Fadd%3D29464183%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: e576217d-e749-48ca-8fc3-21b1212a3ded
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C$MenSWR!]tbP6j2F-XstGt!@D3+$R/Vc; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 1c53335f74d9b477ca1afd4d80ec2206
5ff6c66fca5909269d2312914b2e54d48d17398d
a9ebd0e8e61e721aa4057a7dbf654aa52a81a735a7678f6e808883fac44c880c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 Feb 2023 21:38:18 GMT
Expires: Wed, 08 Feb 2023 21:38:18 GMT
ETag: "5ff6c66fca5909269d2312914b2e54d48d17398d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash be230e733d3ee86b51994d9efdeff0f6
1c6bf0c00ad39457eff1d754ca02369fa06498ec
0f355f73a980dbc9d81313d4174e035c46053c900ebbaa2d5b4667ba983297ce
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 08 Feb 2023 06:49:50 GMT
Last-Modified: Wed, 08 Feb 2023 05:41:29 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: W8KRzrZ8Uq9EQFN9XEs5Ute3QSiDUZsFwDLDe8OPFAd3O7yfBjZb4Q==
Age: 4101
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed3f32fef9b843f5511bb882c0a38358
a1a60921f7cb6ab14b645c77bb7d77c20b8201ef
9a4b9e269aa66258c1d9b10fb1af899a3e669de3e244dcfd843a0bce87646f8e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tag.yieldoptimizer.com/ps/ps?t=s&p=1057&si=US&ln=EN&hbc=HRS&pg=ot
302 Found 0 B URL HTTP/2 tag.yieldoptimizer.com/ps/ps?t=s&p=1057&si=US&ln=EN&hbc=HRS&pg=ot
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/ps?t=s&p=1057&si=US&ln=EN&hbc=HRS&pg=ot HTTP/1.1
Host: tag.yieldoptimizer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Apache-Coyote/1.1
cache-control: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR TAIo PSAo PSDo HISo OUR BUS UNI INT DEM OTC"
set-cookie: ph=%7B%22p%22%3A%5B%5D%2C%22t%22%3A%5B%5D%7D; Domain=yieldoptimizer.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
fbh0=%7B%7D; Domain=yieldoptimizer.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
dph=%7B%22t%22%3A%5B%5D%2C%22dp%22%3A%5B%5D%7D; Domain=yieldoptimizer.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
gcma=%7B%22t%22%3A0%2C%22o%22%3Afalse%7D; Domain=yieldoptimizer.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
rmxc=%7B%22t%22%3A0%2C%22e%22%3A%22%22%2C%22i%22%3Afalse%7D; Domain=yieldoptimizer.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
cktst=245863844; Domain=yieldoptimizer.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
pragma: no-cache
location: https://tag.yieldoptimizer.com/ps/ps?tc=245863844&t=s&p=1057&si=US&ln=EN&hbc=HRS&pg=ot
content-length: 0
date: Wed, 08 Feb 2023 06:49:49 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/
302 Found 0 B URL HTTP/2 adservice.google.com/ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/ HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.no/ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
302 Found 0 B URL HTTP/2 adservice.google.com/ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.no/ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DWckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DWckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fpixel.sojern.com%2Fidsync%2Fapn%3Fid%3D%24UID%26sjrn_id%3DWckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.sojern.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://pixel.sojern.com/idsync/apn?id=0&sjrn_id=WckPgiYRb-swXg78X4wyNMRdb804VEHziGSx1woUYPjPoAneNPzscC1W9GzRDZjV
AN-X-Request-Uuid: 813d792a-7665-4008-b9ba-17bd361d2449
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 950.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fpx%3Fid%3D1228256%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fpx%3Fid%3D1228256%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fpx%3Fid%3D1228256%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.sojern.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: cf7a9786-7c49-44d4-b502-da60ae5a4aeb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
adservice.google.com/ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
302 Found 0 B URL HTTP/2 adservice.google.com/ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.no/ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D21126164%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D21126164%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fseg%3Fadd%3D21126164%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://static.sojern.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: f633b65b-cd72-449c-b473-22c0e0af8523
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C$MenSWR!]tbP6j2F-XstGt!@D3+$R/Vc; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 09-May-2023 06:49:50 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: p.tvpixel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://modules.marriott.com/
Origin: https://modules.marriott.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://modules.marriott.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 1c53335f74d9b477ca1afd4d80ec2206
5ff6c66fca5909269d2312914b2e54d48d17398d
a9ebd0e8e61e721aa4057a7dbf654aa52a81a735a7678f6e808883fac44c880c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 07 Feb 2023 21:38:18 GMT
Expires: Wed, 08 Feb 2023 21:38:18 GMT
ETag: "5ff6c66fca5909269d2312914b2e54d48d17398d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D360572%26time%3D1675839043235%26url%3Dhttps%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D360572%26time%3D1675839043235%26url%3Dhttps%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D360572%26time%3D1675839043235%26url%3Dhttps%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&liSync=true
set-cookie: bcookie="v=2&0a42060c-7e26-466f-8000-0da0bb2ae8dd"; Domain=.linkedin.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230208064950cd6f83c9-985c-4d02-8ede-0c833e75f9ebAQFmsipybAga2MB19T6u3z4I0F9DguRr"; Domain=.www.linkedin.com; Expires=Thu, 08-Feb-2024 06:49:50 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzU4Mzg5OTA7MjswMjF99VPYkPUSN/MKJA+wcOZ+wjURJyircPQcTcfXOt9FBw==; Domain=.linkedin.com; Expires=Mon, 07 Aug 2023 06:49:50 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2427:u=1:x=1:i=1675838990:t=1675925390:v=2:sig=AQFR9tJ-cPPIB8I-MvevPHn3TwsBeAJ2"; Expires=Thu, 09 Feb 2023 06:49:50 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAX0Kqu7uxq2GaukJJy0Fg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 1EB1A08A80034F7C8A87449F7F7BDAC6 Ref B: OSL30EDGE0408 Ref C: 2023-02-08T06:49:50Z
date: Wed, 08 Feb 2023 06:49:50 GMT
content-length: 0
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fpx%3Fid%3D1565798%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fpx%3Fid%3D1565798%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fpx%3Fid%3D1565798%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Wed, 08 Feb 2023 06:49:50 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 34daab11-ebdb-44cf-8997-f8e220964ee1
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ct.pinterest.com/v3/?tid=2613977086519&pd=%7B%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675839043758
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2613977086519&pd=%7B%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675839043758
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2613977086519&pd=%7B%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1675839043758 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1575140843638497
date: Wed, 08 Feb 2023 06:49:50 GMT
akamai-grn: 0.274f2417.1675838990.3df0a03a
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=836072006419889&ev=PageView&dl=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&rl=&if=false&ts=1675839043737&cd[brand]=brand&cd[level]=&cd[signin]=&cd[language]=&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675839043736.937255917&it=1675839043351&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=836072006419889&ev=PageView&dl=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&rl=&if=false&ts=1675839043737&cd[brand]=brand&cd[level]=&cd[signin]=&cd[language]=&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675839043736.937255917&it=1675839043351&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=836072006419889&ev=PageView&dl=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&rl=&if=false&ts=1675839043737&cd[brand]=brand&cd[level]=&cd[signin]=&cd[language]=&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1675839043736.937255917&it=1675839043351&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 08 Feb 2023 06:49:50 GMT
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2613977086519&pd=%7B%7D&cb=1675839043756&dep=2%2CPAGE_LOAD
200 OK 380 B URL HTTP/2 ct.pinterest.com/user/?tid=2613977086519&pd=%7B%7D&cb=1675839043756&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (538), with no line terminators
Hash 509f9f17664ea845ece0a38f0f7a70bf
849d5513fa36d2441b3325575ff2d074594e1591
4869150f10b5577c79966bc43ba24d1d9e7b2bb8cb89964263015cb7dae9a9e8
GET /user/?tid=2613977086519&pd=%7B%7D&cb=1675839043756&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://modules.marriott.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 380
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1509591035764261
date: Wed, 08 Feb 2023 06:49:50 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1675838990.3df0a091
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=pagevisit&tid=2613977086519&cb=1675839043757&dep=5%2CEVENT_TAGS_ABSENT
200 OK 380 B URL HTTP/2 ct.pinterest.com/user/?event=pagevisit&tid=2613977086519&cb=1675839043757&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (538), with no line terminators
Hash 509f9f17664ea845ece0a38f0f7a70bf
849d5513fa36d2441b3325575ff2d074594e1591
4869150f10b5577c79966bc43ba24d1d9e7b2bb8cb89964263015cb7dae9a9e8
GET /user/?event=pagevisit&tid=2613977086519&cb=1675839043757&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVpXWTNNMlkwTlRjdFlqQTNZaTAwWlRrMExUZzNNbU10TjJOallqRTVZams1Tnpkag
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://modules.marriott.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 380
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1349677442023102
date: Wed, 08 Feb 2023 06:49:50 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1675838990.3df0a0a7
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=custom&ed=%7B%22value%22%3A334%2C%22currency%22%3A%22USD%22%7D&tid=2613977086519&cb=1675839043758&dep=5%2CEVENT_TAGS_ABSENT
200 OK 380 B URL HTTP/2 ct.pinterest.com/user/?event=custom&ed=%7B%22value%22%3A334%2C%22currency%22%3A%22USD%22%7D&tid=2613977086519&cb=1675839043758&dep=5%2CEVENT_TAGS_ABSENT
IP
File type JSON data\012- , ASCII text, with very long lines (538), with no line terminators
Hash 509f9f17664ea845ece0a38f0f7a70bf
849d5513fa36d2441b3325575ff2d074594e1591
4869150f10b5577c79966bc43ba24d1d9e7b2bb8cb89964263015cb7dae9a9e8
GET /user/?event=custom&ed=%7B%22value%22%3A334%2C%22currency%22%3A%22USD%22%7D&tid=2613977086519&cb=1675839043758&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU9HWTJOemc1WlRZdE5tWXhOeTAwTlRGbUxUZ3dPV0V0TmpaaU1ESXpPRGczTXpkag
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://modules.marriott.com
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 380
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1832506298540430
date: Wed, 08 Feb 2023 06:49:50 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1675838990.3df0a0b8
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=1359549;type=marri003;cat=m1m_m0;ord=2534966007725;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 3759937274494320
date: Wed, 08 Feb 2023 06:49:50 GMT
vary: Accept-Encoding
akamai-grn: 0.274f2417.1675838990.3df0a2cb
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=9035495;type=b2bma0;cat=m1m_g0;ord=5905053761832;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u1=;u2=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=9035495;type=b2bma0;cat=m1m_g0;ord=5905053761832;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u1=;u2=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=9035495;type=b2bma0;cat=m1m_g0;ord=5905053761832;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u1=;u2=modules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=4810757;type=sales;cat=5myqls5f;qty=1;cost=0;u1=;u16=https%253A%252F%252Fmodules.marriott.com%252Fwedding-fair%252Fjp%252Ftyowy-the-westin-yokohama;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;npa=;ord=[OrderID];~oref=https://modules.marriott.com/ HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
200 OK 42 B URL HTTP/2 adservice.google.no/ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ddm/fls/p/src=1359549;type=marri001;cat=m1m_g0;ord=1;num=6536279516709;gtm=45fe3260;npa=1;auiddc=1988368436.1675839043;u7=%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama;~oref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=360572&time=1675839043235&url=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: bcookie="v=2&b436cdcd-364b-4c30-8d50-16e6dae18c7e"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 08-Feb-2024 06:49:50 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2481:u=1:x=1:i=1675838990:t=1675925390:v=2:sig=AQE3kMH3M7GEJse8mtlKk5sW26jJIM0K"; Expires=Thu, 09 Feb 2023 06:49:50 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAX0Kqu+fzvTdBPXaUSzeA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: E98263073E3D4B31AC73EE8DE7250F11 Ref B: OSL30EDGE0408 Ref C: 2023-02-08T06:49:50Z
date: Wed, 08 Feb 2023 06:49:50 GMT
content-length: 0
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&b=The%20Westin%20Yokohama&.yp=405909&f=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&enc=UTF-8&yv=1.13.0&hsr=&et=custom&ea=ViewProduct&cc=&cio=%7C&cid=&tagmgr=gtm%2Cadobe
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&b=The%20Westin%20Yokohama&.yp=405909&f=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&enc=UTF-8&yv=1.13.0&hsr=&et=custom&ea=ViewProduct&cc=&cio=%7C&cid=&tagmgr=gtm%2Cadobe
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&b=The%20Westin%20Yokohama&.yp=405909&f=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&enc=UTF-8&yv=1.13.0&hsr=&et=custom&ea=ViewProduct&cc=&cio=%7C&cid=&tagmgr=gtm%2Cadobe HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
expires: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBA5G42MCENKzFF7vlkVC4iq9ylRgC6kFEgEBAQGX5GPtYwAAAAAA_eMAAA&S=AQAAAoZVfR-IHkCZl0LEvUQoZxI; Expires=Thu, 8 Feb 2024 12:49:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2008%20Feb%202023%2006%3A50%3A43%20GMT&n=0&b=The%20Westin%20Yokohama&.yp=405909&f=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Wed%2C%2008%20Feb%202023%2006%3A50%3A43%20GMT&n=0&b=The%20Westin%20Yokohama&.yp=405909&f=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Wed%2C%2008%20Feb%202023%2006%3A50%3A43%20GMT&n=0&b=The%20Westin%20Yokohama&.yp=405909&f=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&enc=UTF-8&yv=1.13.0&tagmgr=gtm%2Cadobe HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
expires: Wed, 08 Feb 2023 06:49:50 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBA5G42MCEAwn46e6tkHI96mqd9R-feAFEgEBAQGX5GPtYwAAAAAA_eMAAA&S=AQAAAhWMt4exvlnO94j9IiIOox4; Expires=Thu, 8 Feb 2024 12:49:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=custom&ed=%7B%22value%22%3A334%2C%22currency%22%3A%22USD%22%7D&tid=2613977086519&cb=1675839043980&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=custom&ed=%7B%22value%22%3A334%2C%22currency%22%3A%22USD%22%7D&tid=2613977086519&cb=1675839043980&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=custom&ed=%7B%22value%22%3A334%2C%22currency%22%3A%22USD%22%7D&tid=2613977086519&cb=1675839043980&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 8666168614608843
date: Wed, 08 Feb 2023 06:49:50 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZaYUN5L0t6dzlRL0ZJZVVHcGkrY3pSWGprMHpFZzYza0VDMnpYZFA0R2FBdHBlSHVIbGtXVWZTNUI0NkF1Q281Sm1TS0hUdGNjSy9nVmhGa25yQ1E1ZlJPSFJiZnhPNXR0VVZ2L3NYVFlqWT0mV3crMjcrajlsY2FNNTM0a05xckJsTS9jRW9NPQ=="; Expires=Thu, 08 Feb 2024 06:49:50 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.274f2417.1675838990.3df0a65c
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=pagevisit&tid=2613977086519&cb=1675839043961&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?event=pagevisit&tid=2613977086519&cb=1675839043961&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&tid=2613977086519&cb=1675839043961&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22pin_unauth%22%3A%22dWlkPVpUSm1abVl6TlRJdFpUUmxaQzAwTm1VM0xXSTJOVGt0TkdGaFpXSTNabVUxWkRJeQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2239a1a5ee%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: *
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 4214895300637816
date: Wed, 08 Feb 2023 06:49:50 GMT
set-cookie: _pinterest_ct_ua="TWc9PSZENXpGaURNSEdPY3BoeVNLWlUvM3prbC8yVHRzVUVaYWR5dHovQlJ4WmFwZkkxdER0UTFTNm5CanJNb085ZHVvbE5ueTUvNzRweWJVSkUyMktqbkh1QXdYYzFYM3RpTUNVcGI4Sm1Da0NNaz0mZytYYSs2YXFURTdLeUswNVNnWjR0ZDAyRng4PQ=="; Expires=Thu, 08 Feb 2024 06:49:50 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
akamai-grn: 0.274f2417.1675838990.3df0a65b
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 p.tvpixel.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: p.tvpixel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1796
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=d4216815-0a80-46e8-8b0b-89ed233ce414; Expires=Thu, 08 Feb 2024 06:49:50 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://modules.marriott.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/js/moment.aspx
200 OK 44 kB URL HTTP/2 modules.marriott.com/wedding-fair/js/moment.aspx
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Hash 598bb8909d1a74d4ad474ad552f2ac06
9807f140deaafd0874c670a94a0bafa5cb0bcf19
3905de8d47568d2176038dd6dcc3ac519be03e59bf007cf97f567af8bd859c73
GET /wedding-fair/js/moment.aspx HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CMCSYNCSOP%7C411-19404%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1; _ga=GA1.2.712684317.1675839042; _gid=GA1.2.718188137.1675839042; _gat_UA-141180002-1=1; s_tbm=true; s_cc=true; _uetsid=e8357df0a77c11ed8fa2ddd48d901ad1; _uetvid=e8357fa0a77c11edbada3f1bd3fac9e6; _dpm_ses.be2e=*; _dpm_id.be2e=0ec6bddb-221e-4fc5-ac7f-e26919bf1832.1675839043.1.1675839043.1675839043.b8815732-9f36-433e-9a12-6ccd4e625f0c; _scid=6075d812-66b2-4297-9929-2f6c7a7273be; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Feb+08+2023+06%3A50%3A43+GMT%2B0000+(Coordinated+Universal+Time)&version=6.26.0&isIABGlobal=false&hosts=&consentId=43879e8d-6f77-4b6d-b7c9-5d0458a8f396&interactionCount=0&landingPath=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama; _gcl_au=1.1.1988368436.1675839043
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:51 GMT
content-type: text/javascript; charset=utf-8
content-length: 44301
cache-control: public, stale-while-revalidate=180, max-age=15600, s-maxage=156000
content-encoding: gzip
expires: Wed, 15 Feb 2023 06:49:50 GMT
last-modified: Tue, 08 Feb 2022 06:49:50 GMT
vary: Accept-Encoding
x-trace-id: 1dea7873-aead-43d2-a9fa-4b550c2f0939
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-js, df-1832265
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:2222bae7-6b65-488b-a7a8-8f50b5e55838
access-control-expose-headers: Request-Context
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 79626d78b83cb515-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash e35d64afb481cc8d2035ee1a596366b7
e24c3f55eb7898759a4232a6229ed0d3ef0e91ea
8077094ba8ce9867e542a548e3cd2740fa485dcee272158318708a6d524fb033
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 08 Feb 2023 06:49:52 GMT
Last-Modified: Wed, 08 Feb 2023 05:52:58 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 278
modules.marriott.com/wedding-fair/fonts/ProximaNova-Bold.woff2
301 Moved Permanently 0 B URL HTTP/2 modules.marriott.com/wedding-fair/fonts/ProximaNova-Bold.woff2
IP
GET /wedding-fair/fonts/ProximaNova-Bold.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 08 Feb 2023 06:49:48 GMT
content-type: text/html
location: https://modules.marriott.com/wedding-fair/fonts/proximanova-bold.woff2
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d699905b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/FreightDispProMedium-Regular.woff2
301 Moved Permanently 0 B URL HTTP/2 modules.marriott.com/wedding-fair/fonts/FreightDispProMedium-Regular.woff2
IP
GET /wedding-fair/fonts/FreightDispProMedium-Regular.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 08 Feb 2023 06:49:48 GMT
content-type: text/html
location: https://modules.marriott.com/wedding-fair/fonts/freightdisppromedium-regular.woff2
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d695891b515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/Swiss721BT-BoldCondensed.woff2
301 Moved Permanently 0 B URL HTTP/2 modules.marriott.com/wedding-fair/fonts/Swiss721BT-BoldCondensed.woff2
IP
GET /wedding-fair/fonts/Swiss721BT-BoldCondensed.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 08 Feb 2023 06:49:48 GMT
content-type: text/html
location: https://modules.marriott.com/wedding-fair/fonts/swiss721bt-boldcondensed.woff2
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d6988deb515-OSL
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/dynamic/js/westin-home.aspx?version=12232022070948
200 OK 0 B URL HTTP/2 modules.marriott.com/wedding-fair/dynamic/js/westin-home.aspx?version=12232022070948
IP
GET /wedding-fair/dynamic/js/westin-home.aspx?version=12232022070948 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/jp/tyowy-the-westin-yokohama
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:48 GMT
content-type: text/javascript; charset=utf-8
cache-control: public, stale-while-revalidate=180, max-age=15600, s-maxage=156000
content-encoding: gzip
vary: User-Agent,Accept-Encoding
x-trace-id: 4c63f437-1867-4368-aef9-f8e615b5dbb0
x-frame-options: SAMEORIGIN
ms-content-tags: 10322-cms-js, df-1828521, df-1828522, df-1828574, df-1861923, df-1828293, pt-406439
x-xss-protection: 1
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
request-context: appId=cid-v1:2222bae7-6b65-488b-a7a8-8f50b5e55838
access-control-expose-headers: Request-Context
last-modified: Wed, 08 Feb 2023 06:49:48 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 79626d68dfdcb515-OSL
X-Firefox-Spdy: h2
c.tvpixel.com/js/current/dpm_pixel_min.js?aid=marriott-0af76d19-dfba-4407-860e-54c7ed29bed4
200 OK 0 B URL HTTP/2 c.tvpixel.com/js/current/dpm_pixel_min.js?aid=marriott-0af76d19-dfba-4407-860e-54c7ed29bed4
IP
GET /js/current/dpm_pixel_min.js?aid=marriott-0af76d19-dfba-4407-860e-54c7ed29bed4 HTTP/1.1
Host: c.tvpixel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 08 Feb 2023 06:07:03 GMT
last-modified: Thu, 16 Sep 2021 18:14:59 GMT
etag: W/"08e770c8a17bf087d50cec01af0892c2"
x-amz-version-id: oMk5SFqHXboEDRm2.vDWImtx_4ARYxEl
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xPdBsztDqOc9jO9HUy2J6i7mtt4tlPjhzMJVjzHQEAEOonECv6I7YQ==
age: 2567
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0
302 Found 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0
IP
GET /track/up?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://modules.marriott.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: text/html; charset=utf-8
location: https://match.adsrvr.org/track/upb/?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=ab5637cf-3c71-47ec-90a4-78390b550a29; domain=.adsrvr.org; expires=Thu, 08-Feb-2024 06:49:50 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
match.adsrvr.org/track/upb/?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0
200 OK 0 B URL HTTP/2 match.adsrvr.org/track/upb/?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0
IP
GET /track/upb/?adv=hbq9bjg&ref=https%3A%2F%2Fmodules.marriott.com%2Fwedding-fair%2Fjp%2Ftyowy-the-westin-yokohama&upid=byw7ch4&upv=1.1.0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modules.marriott.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 08 Feb 2023 06:49:50 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/360572/domain/modules.marriott.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/360572/domain/modules.marriott.com/token
IP
GET /partner/360572/domain/modules.marriott.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modules.marriott.com
Connection: keep-alive
Referer: https://modules.marriott.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 08 Feb 2023 05:57:17 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qN3BUfTHM4tWjIbUK8gc5F5p_xnQWixw1g0DLrshpnpx9uXQ9m19Vw==
age: 3153
X-Firefox-Spdy: h2
modules.marriott.com/wedding-fair/fonts/ProximaNova-Regular.woff2
301 Moved Permanently 0 B URL HTTP/2 modules.marriott.com/wedding-fair/fonts/ProximaNova-Regular.woff2
IP
GET /wedding-fair/fonts/ProximaNova-Regular.woff2 HTTP/1.1
Host: modules.marriott.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://modules.marriott.com/wedding-fair/dynamic/css/westin-home.aspx?version=12232022092411
Cookie: AMCV_664516D751E565010A490D4C%40AdobeOrg=-1712354808%7CMCIDTS%7C19397%7CMCMID%7C20350679876346193904202044200100724131%7CMCAAMLH-1676443839%7C6%7CMCAAMB-1676443839%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1675846239s%7CNONE%7CvVersion%7C4.3.0; AMCVS_664516D751E565010A490D4C%40AdobeOrg=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
date: Wed, 08 Feb 2023 06:49:48 GMT
content-type: text/html
location: https://modules.marriott.com/wedding-fair/fonts/proximanova-regular.woff2
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 79626d690840b515-OSL
X-Firefox-Spdy: h2
165.160.13.20
87.248.119.251
104.18.27.85
212.82.100.181
104.110.10.32
31.13.72.36
37.252.171.84
13.37.25.97
64.158.223.140