bookworm-bilgeadam.blogspot.ru/search/label/Ay%C5%9Fe%20Kulin
302 Moved Temporarily 209 B URL HTTP/1.1 bookworm-bilgeadam.blogspot.ru/search/label/Ay%C5%9Fe%20Kulin
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash fc03081ce761bc7c77ce811a427a0473
3964be97f25f37fc432b85b2266fcd181701b60b
9d4a34d92506fd766dec7ff09f867cb12eaf71723dfcee21ef15ae46e6b9a347
GET /search/label/Ay%C5%9Fe%20Kulin HTTP/1.1
Host: bookworm-bilgeadam.blogspot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://bookworm-bilgeadam.blogspot.com/search/label/Ay%C5%9Fe%20Kulin
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 06:42:24 GMT
Expires: Sat, 26 Nov 2022 06:42:24 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 209
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4613
Expires: Sat, 26 Nov 2022 07:59:17 GMT
Date: Sat, 26 Nov 2022 06:42:24 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5059
Cache-Control: max-age=105189
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:24 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:55:33 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 06:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1391
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12278
Expires: Sat, 26 Nov 2022 10:07:02 GMT
Date: Sat, 26 Nov 2022 06:42:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pEiwHGXKppIgbkpO/iVbl3iETUpoW+oaxVRGRZdukyLFZ4wP7l9/8chCkoHJ36IT5e7ViA3XDcU=
x-amz-request-id: HZC8E0Q24JG0F02V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 06:41:06 GMT
age: 78
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 06:08:54 GMT
cache-control: public,max-age=3600
age: 2010
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
bookworm-bilgeadam.blogspot.com/search/label/Ay%C5%9Fe%20Kulin
200 OK 28 kB URL HTTP/1.1 bookworm-bilgeadam.blogspot.com/search/label/Ay%C5%9Fe%20Kulin
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1984)
Hash 4404ec5b8a687cb9cd69e56760c8546f
d0f9d1a732ccb19a4fba02b24e60395d3bf8becd
24a3767579e8d6661fffeb55261285dfb8592895f958a5372e7e0ec0566d4cac
GET /search/label/Ay%C5%9Fe%20Kulin HTTP/1.1
Host: bookworm-bilgeadam.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sat, 26 Nov 2022 06:42:24 GMT
Date: Sat, 26 Nov 2022 06:42:24 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 21 Nov 2022 12:22:53 GMT
ETag: W/"d6a77c8b0755133aa14cdab30e9934b71ac9eea4967768cc1bdc11f95850c95a"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 27814
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f575aee4f3f9ed92647e6efd5d92b195
ed485eaa177873f0cb7f42817c6d0a4435cf3a76
ef7c5f6de7d3e3c93a6863c1e6525d172fe699807f79ea3183d69dece05f0009
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bookworm-bilgeadam.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 bookworm-bilgeadam.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: bookworm-bilgeadam.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/search/label/Ay%C5%9Fe%20Kulin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 12:46:17 GMT
Expires: Wed, 30 Nov 2022 12:46:17 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 23 Nov 2022 10:49:48 GMT
Content-Type: text/javascript
Age: 237368
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6983392700438f228fa9b5bba4594fc5
d27c65105b44a2e1ff7663ba0021a475b5b30cd2
557627dbab910f61773f0f818efc6b18bb2b5816175199b997684a799c1c97e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6983392700438f228fa9b5bba4594fc5
d27c65105b44a2e1ff7663ba0021a475b5b30cd2
557627dbab910f61773f0f818efc6b18bb2b5816175199b997684a799c1c97e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/show_ads.js
200 OK 42 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/show_ads.js
IP
File type ASCII text, with very long lines (2512)
Hash fd511e0af73d25c4da0a55b306559213
fc492c64625c1d9c47015c460e75fafe1badf1b2
e536226d29f63285f8f8de0cfe5a7ecd7ee2604dc12975daebdb3d3e983ea1bf
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 9769316119214243803
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 42121
X-XSS-Protection: 0
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 52 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (4885)
Hash bfcb2b8ad5f89c8df2536c6ced1d7271
0ac9ee403be1b4cc3d26aa1a421e3f32df9900d9
6c736657ea70ffcec5133d1f5c95e70e8c17ddeac8fc2d4dba7364a8460a1b74
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 9687855055034161182
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 51940
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Sat, 26 Nov 2022 06:42:25 GMT
expires: Sat, 26 Nov 2022 06:42:25 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1337
Cache-Control: max-age=96403
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:29:08 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:12:52 GMT
expires: Wed, 22 Nov 2023 18:12:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 18:53:15 GMT
content-type: text/css
age: 304173
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-netvibes.png
200 OK 1.4 kB URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-netvibes.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash c52a5f4ecb6be5d7e93b23ef4122ee4e
4e698a5f455daf3a8ea1e219b1998079f0546716
71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 04:30:11 GMT
expires: Wed, 30 Nov 2022 04:30:11 GMT
cache-control: public, max-age=604800
last-modified: Wed, 23 Nov 2022 02:52:49 GMT
content-type: image/png
age: 267134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon_feed12.png
200 OK 500 B URL HTTP/2 resources.blogblog.com/img/icon_feed12.png
IP
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 44e7355a788fd1082deff0018883758e
50e3a28a44978e85d13c30522e0c71c8d0b24675
3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
GET /img/icon_feed12.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 12:43:16 GMT
expires: Tue, 29 Nov 2022 12:43:16 GMT
cache-control: public, max-age=604800
last-modified: Mon, 21 Nov 2022 21:54:35 GMT
content-type: image/png
age: 323949
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_email.gif
200 OK 164 B URL HTTP/2 resources.blogblog.com/img/icon18_email.gif
IP
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:02:17 GMT
expires: Tue, 29 Nov 2022 15:02:17 GMT
cache-control: public, max-age=604800
last-modified: Mon, 21 Nov 2022 18:53:15 GMT
content-type: image/gif
age: 315608
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/arrow_dropdown.gif
200 OK 141 B URL HTTP/2 resources.blogblog.com/img/widgets/arrow_dropdown.gif
IP
File type GIF image data, version 89a, 13 x 10\012- data
Hash 2964a07d60a4e76b299130fb1b4115f6
3b72dcc19f3ad685513eaba612e07e0ed495f2e1
28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 19:19:11 GMT
expires: Tue, 29 Nov 2022 19:19:11 GMT
cache-control: public, max-age=604800
last-modified: Tue, 22 Nov 2022 14:54:22 GMT
content-type: image/gif
age: 300194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-yahoo.png
200 OK 580 B URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-yahoo.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash 79f602b6ac18bee79b4e2353a6674010
28accf82263aa1a11bb821439d4d185865662530
bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 12:20:26 GMT
expires: Wed, 30 Nov 2022 12:20:26 GMT
cache-control: public, max-age=604800
last-modified: Wed, 23 Nov 2022 07:50:07 GMT
content-type: image/png
age: 238919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3GfbETSsfTZYZ9DCJT7KDZSAVjXRnuYFkTSswWfpUm0TBD8StSqIAnvM49kdEXsasioH-R0UzuKE0SjGvIu2iiGenW0xCk_lbUhC2xmmA77MHlKw5luJBTda7JAGuywIXg3f9_Q6GhRIJWr-DuAVzLTaQaj6EyRy_OGHVeYaThXfU8YQ-ubw=w72-h72-p-k-no-nu
200 OK 3.3 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3GfbETSsfTZYZ9DCJT7KDZSAVjXRnuYFkTSswWfpUm0TBD8StSqIAnvM49kdEXsasioH-R0UzuKE0SjGvIu2iiGenW0xCk_lbUhC2xmmA77MHlKw5luJBTda7JAGuywIXg3f9_Q6GhRIJWr-DuAVzLTaQaj6EyRy_OGHVeYaThXfU8YQ-ubw=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash cbbbf3bb7b15b7eead3c8e6c4ab9c0c9
9697069ea0a0bc837032f2a8f591b8494ef87b5c
a3f8833d2726dd727cfe193d4d8c4a29c95af093216cda7c6cffaede370040fb
GET /blogger_img_proxy/ANbyha3GfbETSsfTZYZ9DCJT7KDZSAVjXRnuYFkTSswWfpUm0TBD8StSqIAnvM49kdEXsasioH-R0UzuKE0SjGvIu2iiGenW0xCk_lbUhC2xmmA77MHlKw5luJBTda7JAGuywIXg3f9_Q6GhRIJWr-DuAVzLTaQaj6EyRy_OGHVeYaThXfU8YQ-ubw=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sun, 27 Nov 2022 06:42:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:42:25 GMT
server: fife
content-length: 3345
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2aproxw1hyqLo7MWVTCYCykEZ79-OI7wtsit3CPRFKpl_GUW2TVlQ9V-Xk4BntZiCjncur17eqU0Fl8C7zMQpJP_6U711_c6d8xQKWfZO9NPmgDmNSrnCkO1aC7CG36arBXcFOuLI=w72-h72-p-k-no-nu
200 OK 3.1 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2aproxw1hyqLo7MWVTCYCykEZ79-OI7wtsit3CPRFKpl_GUW2TVlQ9V-Xk4BntZiCjncur17eqU0Fl8C7zMQpJP_6U711_c6d8xQKWfZO9NPmgDmNSrnCkO1aC7CG36arBXcFOuLI=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash c93badb9263932a542f357a467ac584a
977c236de2c637e3456393655d998cd739c7ffcb
2e3f73ea041dc4def75bc3dccb6f4587916f0e8b3000b2fa63f9ae38b3166e52
GET /blogger_img_proxy/ANbyha2aproxw1hyqLo7MWVTCYCykEZ79-OI7wtsit3CPRFKpl_GUW2TVlQ9V-Xk4BntZiCjncur17eqU0Fl8C7zMQpJP_6U711_c6d8xQKWfZO9NPmgDmNSrnCkO1aC7CG36arBXcFOuLI=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sun, 27 Nov 2022 06:42:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:42:25 GMT
server: fife
content-length: 3086
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0rIdksDN5bfq_Q_TmRSSQ9-yAF5Sw85PL9rWiaYd8Kn6d9248cS7iWJHTyo5qThlHW9f7NN_CIYqvTqt-jrxqFIcXEzj1J0STyMLHtUE0Oi9EjG1btZwdgCHY=w72-h72-p-k-no-nu
200 OK 3.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0rIdksDN5bfq_Q_TmRSSQ9-yAF5Sw85PL9rWiaYd8Kn6d9248cS7iWJHTyo5qThlHW9f7NN_CIYqvTqt-jrxqFIcXEzj1J0STyMLHtUE0Oi9EjG1btZwdgCHY=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash c313c4f656ce6b4985b819f162cc2bcf
ee484416be0561d5c4259e6a6cb69d4787ce394f
52d655bb4db59ed388875c36eab77d8a0e4d782e5a72c7ab83582225978f9455
GET /blogger_img_proxy/ANbyha0rIdksDN5bfq_Q_TmRSSQ9-yAF5Sw85PL9rWiaYd8Kn6d9248cS7iWJHTyo5qThlHW9f7NN_CIYqvTqt-jrxqFIcXEzj1J0STyMLHtUE0Oi9EjG1btZwdgCHY=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sun, 27 Nov 2022 06:42:25 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:42:25 GMT
server: fife
content-length: 3808
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1_Tsp4pFTnDixEbcamFWUcuo6tojXfZ3z2eULk_vz7Kp8TrqbhmSc0AFpBbzJVQh64bvKozwB8TGZ6oB0-2PkY62kDwCsiE3Vd3mZSPf7RztG7TgRPhxNeLVbc5QAaR0_tuGlKAeo84ySDSw=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1_Tsp4pFTnDixEbcamFWUcuo6tojXfZ3z2eULk_vz7Kp8TrqbhmSc0AFpBbzJVQh64bvKozwB8TGZ6oB0-2PkY62kDwCsiE3Vd3mZSPf7RztG7TgRPhxNeLVbc5QAaR0_tuGlKAeo84ySDSw=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c45acdf31fa8171b308c04de8dc59642
3717f398cc57aa36ea9776c6ca7d0cc220c3b3d9
a651dbbabecb2e5100f584cb95cbe4285346287ba31f0d62772f0c798909791d
GET /blogger_img_proxy/ANbyha1_Tsp4pFTnDixEbcamFWUcuo6tojXfZ3z2eULk_vz7Kp8TrqbhmSc0AFpBbzJVQh64bvKozwB8TGZ6oB0-2PkY62kDwCsiE3Vd3mZSPf7RztG7TgRPhxNeLVbc5QAaR0_tuGlKAeo84ySDSw=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:42:25 GMT
server: fife
content-length: 1747
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 16:02:03 GMT
expires: Tue, 21 Nov 2023 16:02:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 00:52:59 GMT
content-type: text/javascript
age: 398422
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Fri, 25 Nov 2022 10:51:13 GMT
Expires: Fri, 09 Dec 2022 10:51:13 GMT
Cache-Control: public, max-age=1209600
Age: 71472
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
bumerang.hurriyet.com.tr/show_ads.js
200 OK 1.2 kB URL HTTP/1.1 bumerang.hurriyet.com.tr/show_ads.js
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type ASCII text, with CRLF line terminators
Hash efafc786c6b70e2f6dd9793187cf96b8
ec35f24abf100ae3382ffe944407cd13576e8299
e1b4bbbe35c54d33512a263265e34cd7035a31bfffd400be82b8570dfe78619c
GET /show_ads.js HTTP/1.1
Host: bumerang.hurriyet.com.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Thu, 04 Aug 2016 14:47:25 GMT
Accept-Ranges: bytes
ETag: "8261811d5feed11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 1195
Set-Cookie: NSC_JOgbbvpgeocp2mkbisummyespuwpmbq=ffffffffd6fb0e0b45525d5f4f58455e445a4a423661;path=/
1.bp.blogspot.com/-qImFTs0DKKQ/Umv3TIqzuOI/AAAAAAAADic/3rpggnWvcWQ/w72-h72-p-k-no-nu/kitap-okumak.jpg
200 OK 4.9 kB URL HTTP/1.1 1.bp.blogspot.com/-qImFTs0DKKQ/Umv3TIqzuOI/AAAAAAAADic/3rpggnWvcWQ/w72-h72-p-k-no-nu/kitap-okumak.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 49580bf15d6c9cd5b8571621b4e8141c
8e889626f8507eebff70a7e5c74c7348a364c64d
3424d8286f316866dad95f4686bb070e35be4ee7c12cb0975bb159731208b7ae
GET /-qImFTs0DKKQ/Umv3TIqzuOI/AAAAAAAADic/3rpggnWvcWQ/w72-h72-p-k-no-nu/kitap-okumak.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="kitap-okumak.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4949
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Sat, 26 Nov 2022 09:45:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "ve28"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/-YHtWiPnE-Cs/TLQ5xxjyGgI/AAAAAAAAAY4/6yNpEqf6Pgo/w72-h72-p-k-no-nu/kitap-oku.jpg
200 OK 3.1 kB URL HTTP/1.1 1.bp.blogspot.com/-YHtWiPnE-Cs/TLQ5xxjyGgI/AAAAAAAAAY4/6yNpEqf6Pgo/w72-h72-p-k-no-nu/kitap-oku.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ac3f4df0da2ce5b690bc60ec031c74fd
43e53edaa32b7a59e89f3b0b0ceacded3e90a1a7
e05ca378e82578b751fc4561442f8f1c646d7a157df2f5e67bc564bb8b810a6a
GET /-YHtWiPnE-Cs/TLQ5xxjyGgI/AAAAAAAAAY4/6yNpEqf6Pgo/w72-h72-p-k-no-nu/kitap-oku.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="kitap-oku.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3135
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Thu, 24 Nov 2022 12:46:18 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v18e"
Content-Type: image/jpeg
Age: 0
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 813b15c3004464f6bd39fd0773b04757
bd2218fe1e647f61132aad70d29cd91fd0416f26
446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 09:56:18 GMT
expires: Thu, 23 Nov 2023 09:56:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
age: 247567
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-jjAXEjIDro0/URulzNLVHCI/AAAAAAAADBQ/lhzHEdjl4gs/w72-h72-p-k-no-nu/can+s%C4%B1k%C4%B1nt%C4%B1s%C4%B1.jpg
200 OK 2.5 kB URL HTTP/1.1 1.bp.blogspot.com/-jjAXEjIDro0/URulzNLVHCI/AAAAAAAADBQ/lhzHEdjl4gs/w72-h72-p-k-no-nu/can+s%C4%B1k%C4%B1nt%C4%B1s%C4%B1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 36f16f09a5115ffed779db71133f0710
ce3ea0e6716770c580959d62c7c285bdd31632d5
859cd33d4518e807061488fdfa08a55708739ae88633328346574688899a1520
GET /-jjAXEjIDro0/URulzNLVHCI/AAAAAAAADBQ/lhzHEdjl4gs/w72-h72-p-k-no-nu/can+s%C4%B1k%C4%B1nt%C4%B1s%C4%B1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="can s_k_nt_s_.jpg";filename*=UTF-8''can%20s%C4%B1k%C4%B1nt%C4%B1s%C4%B1.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2526
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Sat, 26 Nov 2022 09:45:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vc14"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/-6MrBShV8Cv0/Umv4jn59laI/AAAAAAAADio/SFjK-u0QZCY/s1600/nerelerde_kitap_okunur.jpg
200 OK 24 kB URL HTTP/1.1 1.bp.blogspot.com/-6MrBShV8Cv0/Umv4jn59laI/AAAAAAAADio/SFjK-u0QZCY/s1600/nerelerde_kitap_okunur.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 245x372, components 3\012- data
Hash 236d5a35ee196634d6618435be21e5a1
ce5221e81ca6a3b7d195a04009e8d28f14d1c18c
82348a8f23dc69296e399f9e8073dcbe4e265e8e8a7b4e0b06aeb4da8d366f26
GET /-6MrBShV8Cv0/Umv4jn59laI/AAAAAAAADio/SFjK-u0QZCY/s1600/nerelerde_kitap_okunur.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="nerelerde_kitap_okunur.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 23635
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Sat, 26 Nov 2022 09:45:23 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "ve2b"
Content-Type: image/jpeg
Age: 0
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL HTTP/2 www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 19:10:58 GMT
expires: Tue, 29 Nov 2022 19:10:58 GMT
cache-control: public, max-age=604800
last-modified: Tue, 22 Nov 2022 03:55:22 GMT
content-type: image/png
age: 300687
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
logo.onlinewebstat.com/logo/c.gif
200 OK 613 B URL HTTP/1.1 logo.onlinewebstat.com/logo/c.gif
IP
ASN #20649 FS Veri Merkezi Internet Teknolojileri Limited Sirketi
File type GIF image data, version 89a, 20 x 14\012- data
Hash 71568e3bef1945b53531d1e7d64e60db
0ea4fd52ba859aed188a7ac646a1bb926a84bbb7
88a9b0fd0969e4815f0465824311b1c015dfd93c326b627ce5b10e8104b42f5f
GET /logo/c.gif HTTP/1.1
Host: logo.onlinewebstat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:24 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Thu, 27 Sep 2007 15:42:10 GMT
ETag: "270-43b1fd034f880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 613
Connection: close
Content-Type: image/gif
sayac.onlinewebstat.com/c.js
200 OK 2.4 kB URL HTTP/1.1 sayac.onlinewebstat.com/c.js
IP
ASN #20649 FS Veri Merkezi Internet Teknolojileri Limited Sirketi
File type ASCII text, with CRLF line terminators
Hash 93e259972860a0e13edf59ab0ac01fbc
e5c790c39dca158666bfa94013512ec579042557
a98c5155f8586678344d1c2a312e8098bf72dcc832a5b0c15406c44ed19a7d94
GET /c.js HTTP/1.1
Host: sayac.onlinewebstat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:24 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Sun, 18 Jan 2015 06:57:45 GMT
ETag: "251e-50ce7b90a6c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2418
Connection: close
Content-Type: application/javascript
www.blogger.com/dyn-css/authorization.css?targetBlogID=7477769263351366370&zx=15b48567-b6c9-489b-bb01-da346b7ea509
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=7477769263351366370&zx=15b48567-b6c9-489b-bb01-da346b7ea509
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=7477769263351366370&zx=15b48567-b6c9-489b-bb01-da346b7ea509 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 06:42:25 GMT
last-modified: Sat, 26 Nov 2022 06:42:25 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-c7gXQjyGiCg/UJtSyQZwyKI/AAAAAAAACxQ/RP3Q7LIyPZ4/s80/anatomy.gif
200 OK 9.4 kB URL HTTP/1.1 3.bp.blogspot.com/-c7gXQjyGiCg/UJtSyQZwyKI/AAAAAAAACxQ/RP3Q7LIyPZ4/s80/anatomy.gif
IP
File type GIF image data, version 89a, 80 x 67\012- data
Hash c623657241ae3b196a536deff4f2c2a3
2691e12c46d950a22c3a228e1897ef6002689469
344a085a5778689f03282da04e55d535de1f32a6775eb251576056f5b4500621
GET /-c7gXQjyGiCg/UJtSyQZwyKI/AAAAAAAACxQ/RP3Q7LIyPZ4/s80/anatomy.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="anatomy.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9363
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Thu, 24 Nov 2022 12:46:18 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vdd7"
Content-Type: image/gif
Age: 0
i.dr.com.tr/cache/600x600-0/originals/0000000719091-1.jpg
200 OK 31 kB URL HTTP/1.1 i.dr.com.tr/cache/600x600-0/originals/0000000719091-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 406x600, components 3\012- data
Hash 25af008ad3f2858b1ae3de8fe49f67fd
d449b23843c06872730ac1c7a344cd13a5004451
462a98446d9eff1fdd473680de24d1e038fbb420bb7bd17a2340e197d3d8a56d
GET /cache/600x600-0/originals/0000000719091-1.jpg HTTP/1.1
Host: i.dr.com.tr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 31431
Connection: keep-alive
Date: Tue, 22 Nov 2022 11:21:28 GMT
Expires: Tue, 29 Nov 2022 11:21:28 GMT
Cache-Control: max-age=604800,must-revalidate,proxy-revalidate,public
Via: TMGRUP, 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
ETag: "60d0e261-7ac7"
Server: nginx/1.8.1
Last-Modified: Mon, 21 Jun 2021 19:02:57 GMT
nnCoection: close
Pragma: public
Accept-Ranges: bytes
Access-Control-Allow-Origin: *, *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zk0ts7YKH322IOpNOKU4cGuXxm6f_6kBmNoWFbLp1rHyqgfY2CbDlA==
Age: 328858
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BOgHY5Jnz5C4C3TiHyGM6g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Rc/BsbO7y/J/4Y7knkQmssyMu2o=
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1_Tsp4pFTnDixEbcamFWUcuo6tojXfZ3z2eULk_vz7Kp8TrqbhmSc0AFpBbzJVQh64bvKozwB8TGZ6oB0-2PkY62kDwCsiE3Vd3mZSPf7RztG7TgRPhxNeLVbc5QAaR0_tuGlKAeo84ySDSw=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1_Tsp4pFTnDixEbcamFWUcuo6tojXfZ3z2eULk_vz7Kp8TrqbhmSc0AFpBbzJVQh64bvKozwB8TGZ6oB0-2PkY62kDwCsiE3Vd3mZSPf7RztG7TgRPhxNeLVbc5QAaR0_tuGlKAeo84ySDSw=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c45acdf31fa8171b308c04de8dc59642
3717f398cc57aa36ea9776c6ca7d0cc220c3b3d9
a651dbbabecb2e5100f584cb95cbe4285346287ba31f0d62772f0c798909791d
GET /blogger_img_proxy/ANbyha1_Tsp4pFTnDixEbcamFWUcuo6tojXfZ3z2eULk_vz7Kp8TrqbhmSc0AFpBbzJVQh64bvKozwB8TGZ6oB0-2PkY62kDwCsiE3Vd3mZSPf7RztG7TgRPhxNeLVbc5QAaR0_tuGlKAeo84ySDSw=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:42:25 GMT
server: fife
content-length: 1747
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6983392700438f228fa9b5bba4594fc5
d27c65105b44a2e1ff7663ba0021a475b5b30cd2
557627dbab910f61773f0f818efc6b18bb2b5816175199b997684a799c1c97e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/widgets/s_top.png
200 OK 335 B URL HTTP/2 resources.blogblog.com/img/widgets/s_top.png
IP
File type PNG image data, 144 x 400, 4-bit colormap, non-interlaced\012- data
Hash c4908f4189f7698dc8afdd67df8ce041
b6f7cd64ff84e7cedb4b8b92ceb8b9800ad7624a
cfe1d5dd45c7f0897d769e6c95ae9036fbdc7dad76ac9ed6ce6b21a785ecd6de
GET /img/widgets/s_top.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 335
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 09:56:23 GMT
expires: Wed, 30 Nov 2022 09:56:23 GMT
cache-control: public, max-age=604800
last-modified: Wed, 23 Nov 2022 04:53:50 GMT
content-type: image/png
age: 247562
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/s_bottom.png
200 OK 172 B URL HTTP/2 resources.blogblog.com/img/widgets/s_bottom.png
IP
File type PNG image data, 144 x 3, 4-bit colormap, non-interlaced\012- data
Hash a9bbd1bf495055e06e61aec7f8c1b6c4
491c1a006da8a9eea4f3d1bb27e5815ab66a9f45
91fe35689444e53c1bf3e04f24c154fa0468be9edd3c84344f9f64c2eff89eeb
GET /img/widgets/s_bottom.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 172
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:03:32 GMT
expires: Tue, 29 Nov 2022 15:03:32 GMT
cache-control: public, max-age=604800
last-modified: Mon, 21 Nov 2022 14:52:53 GMT
content-type: image/png
age: 315533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6983392700438f228fa9b5bba4594fc5
d27c65105b44a2e1ff7663ba0021a475b5b30cd2
557627dbab910f61773f0f818efc6b18bb2b5816175199b997684a799c1c97e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-chs4dUajyec/TxH82AG-8vI/AAAAAAAABlI/aqx_0IwwvEQ/s200/F%25C3%25BCreya+%2528Ay%25C5%259Fe+Kulin%2529.jpg
200 OK 12 kB URL HTTP/1.1 4.bp.blogspot.com/-chs4dUajyec/TxH82AG-8vI/AAAAAAAABlI/aqx_0IwwvEQ/s200/F%25C3%25BCreya+%2528Ay%25C5%259Fe+Kulin%2529.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 140x200, components 3\012- data
Hash 0f54e08441fcd9e2894869c9fbf0ccd6
a13da1abc35f557677ad24ecfa5ba50ae300f02a
db43cefd14025c47a1560ea8f1770fcc709b47a9efdbdd69e6cae68d378575b2
GET /-chs4dUajyec/TxH82AG-8vI/AAAAAAAABlI/aqx_0IwwvEQ/s200/F%25C3%25BCreya+%2528Ay%25C5%259Fe+Kulin%2529.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v652"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="F_reya (Ay_e Kulin).jpg";filename*=UTF-8''F%C3%BCreya%20(Ay%C5%9Fe%20Kulin).jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 11501
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogblog.com/1kt/awesomeinc/tabs_gradient_light.png
200 OK 182 B URL HTTP/1.1 www.blogblog.com/1kt/awesomeinc/tabs_gradient_light.png
IP
File type PNG image data, 20 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash a3c2c1c288eca66ee27f75ea41dcd96f
77dbd443ccabca3cfb43a48a2ccb44f752f5a77a
5e516df49b160c3efcb1ea09dd4c5f5b7c99a23a18a2a882acc379179bdbaacd
GET /1kt/awesomeinc/tabs_gradient_light.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 182
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 07:13:21 GMT
Expires: Wed, 30 Nov 2022 07:13:21 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 23 Nov 2022 06:49:48 GMT
Content-Type: image/png
Age: 257344
1.bp.blogspot.com/-eW3kdfDCu4M/TxHgaBIhPLI/AAAAAAAABko/fr4Vu2uDUzw/s200/%25C4%25B0%25C3%25A7imde+K%25C4%25B1z%25C4%25B1l+Bir+G%25C3%25BCl+Gibi+ay%25C5%259Fe+kulin.jpeg
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-eW3kdfDCu4M/TxHgaBIhPLI/AAAAAAAABko/fr4Vu2uDUzw/s200/%25C4%25B0%25C3%25A7imde+K%25C4%25B1z%25C4%25B1l+Bir+G%25C3%25BCl+Gibi+ay%25C5%259Fe+kulin.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 139x200, components 3\012- data
Hash 2965438eb44a6f303fa535ddbe8074b0
67b3590032d71ea34183d78cffb5ad44cdaa3c61
f4e2842d429960256ca9129519427ab8928d791e3e189e920b6c24d5f63eac76
GET /-eW3kdfDCu4M/TxHgaBIhPLI/AAAAAAAABko/fr4Vu2uDUzw/s200/%25C4%25B0%25C3%25A7imde+K%25C4%25B1z%25C4%25B1l+Bir+G%25C3%25BCl+Gibi+ay%25C5%259Fe+kulin.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v64a"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="__imde K_z_l Bir G_l Gibi ay_e kulin.jpeg";filename*=UTF-8''%C4%B0%C3%A7imde%20K%C4%B1z%C4%B1l%20Bir%20G%C3%BCl%20Gibi%20ay%C5%9Fe%20kulin.jpeg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 11779
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-GNuEAXejU0s/TxHis98Ek2I/AAAAAAAABk4/at79rei3MBA/s200/Gizli+Anlar%25C4%25B1n+Yolcusu+ay%25C5%259Fe+kulin.jpg
200 OK 14 kB URL HTTP/1.1 1.bp.blogspot.com/-GNuEAXejU0s/TxHis98Ek2I/AAAAAAAABk4/at79rei3MBA/s200/Gizli+Anlar%25C4%25B1n+Yolcusu+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 157x200, components 3\012- data
Hash 8c56cc79b7bca5eb320b15c35269a0d4
3074840d83ebd0b1b3bc31960a5facaf9ec57fe5
0b77270770ffc1267c7aa244942a5a5866511e2263157a2558eb476894e8dfcf
GET /-GNuEAXejU0s/TxHis98Ek2I/AAAAAAAABk4/at79rei3MBA/s200/Gizli+Anlar%25C4%25B1n+Yolcusu+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v64e"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Gizli Anlar_n Yolcusu ay_e kulin.jpg";filename*=UTF-8''Gizli%20Anlar%C4%B1n%20Yolcusu%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 13783
X-XSS-Protection: 0
1.bp.blogspot.com/-u8haA9t7CWE/TwB9N6UiBKI/AAAAAAAABHE/O0nRTJhX8Sk/w72-h72-p-k-no-nu/en+g%25C3%25BCzel+kitap+oku.jpg
200 OK 5.0 kB URL HTTP/1.1 1.bp.blogspot.com/-u8haA9t7CWE/TwB9N6UiBKI/AAAAAAAABHE/O0nRTJhX8Sk/w72-h72-p-k-no-nu/en+g%25C3%25BCzel+kitap+oku.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d959c4c88baf56ba285135a00eedf0c0
22d40e06fe2d669f3dbffb02330cc938f78134f6
a8e12299bb04d2c44b4afdb99d76de3ed90f4864238fffa2a8340d653e2ade78
GET /-u8haA9t7CWE/TwB9N6UiBKI/AAAAAAAABHE/O0nRTJhX8Sk/w72-h72-p-k-no-nu/en+g%25C3%25BCzel+kitap+oku.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="en g_zel kitap oku.jpg";filename*=UTF-8''en%20g%C3%BCzel%20kitap%20oku.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5015
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Thu, 24 Nov 2022 12:46:18 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v471"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221110/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20221110/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Fri, 25 Nov 2022 18:45:12 GMT
expires: Fri, 09 Dec 2022 18:45:12 GMT
cache-control: public, max-age=1209600
age: 43033
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-EScL_Altdg4/UJu4ry_v2GI/AAAAAAAACyU/hnVRj4iSpsY/s1600/Ba%25C5%259Fl%25C4%25B1k.jpg
200 OK 279 B URL HTTP/1.1 4.bp.blogspot.com/-EScL_Altdg4/UJu4ry_v2GI/AAAAAAAACyU/hnVRj4iSpsY/s1600/Ba%25C5%259Fl%25C4%25B1k.jpg
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /-EScL_Altdg4/UJu4ry_v2GI/AAAAAAAACyU/hnVRj4iSpsY/s1600/Ba%25C5%259Fl%25C4%25B1k.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Ba_l_k.jpg";filename*=UTF-8''Ba%C5%9Fl%C4%B1k.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 39837
X-XSS-Protection: 0
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Thu, 24 Nov 2022 12:46:18 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vb25"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-FKGr7e-ZHeE/TxH--rAExWI/AAAAAAAABlY/mlsPoPtZTd8/s200/Bir+Varm%25C4%25B1%25C5%259F+Bir+Yokmu%25C5%259F+ay%25C5%259Fe+kulin.jpeg
200 OK 17 kB URL HTTP/1.1 1.bp.blogspot.com/-FKGr7e-ZHeE/TxH--rAExWI/AAAAAAAABlY/mlsPoPtZTd8/s200/Bir+Varm%25C4%25B1%25C5%259F+Bir+Yokmu%25C5%259F+ay%25C5%259Fe+kulin.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 139x200, components 3\012- data
Hash 5cf578056c83c537e29b140c656156a5
4928f30c700478b8ab590bccde7982ec14e259bc
52667a84090eb085ab10bdf9f4771449894f5a298e43b3d661706d9fac39c88b
GET /-FKGr7e-ZHeE/TxH--rAExWI/AAAAAAAABlY/mlsPoPtZTd8/s200/Bir+Varm%25C4%25B1%25C5%259F+Bir+Yokmu%25C5%259F+ay%25C5%259Fe+kulin.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v656"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Bir Varm__ Bir Yokmu_ ay_e kulin.jpeg";filename*=UTF-8''Bir%20Varm%C4%B1%C5%9F%20Bir%20Yokmu%C5%9F%20ay%C5%9Fe%20kulin.jpeg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 17293
X-XSS-Protection: 0
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202211140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7168214029370425&plah=bookworm-bilgeadam.blogspot.com&bust=31070924
200 OK 119 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202211140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7168214029370425&plah=bookworm-bilgeadam.blogspot.com&bust=31070924
IP
File type ASCII text, with very long lines (6138)
Size 119 kB (119226 bytes)
Hash 20894db36d0ad43a22d15c297e340c8f
6f4f537fbf0470c642f90f7587ceb152e9b500e5
46bc0ad88d2017dfaffcecfa036a13d27ec8e79e0464fe5a571d4f098902e8b2
GET /pagead/managed/js/adsense/m202211140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-7168214029370425&plah=bookworm-bilgeadam.blogspot.com&bust=31070924 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 26 Nov 2022 06:42:25 GMT
expires: Sat, 26 Nov 2022 06:42:25 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 3285172000328248748
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 119226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
217.195.203.216/analiz.gif?user=bookwormbilgeadam&wnos=99&wnobr=31&k=ccyes&agent=Mozilla/5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0%2529%2520Gecko/20100101%2520Firefox/105.0&l=http%3A//bookworm-bilgeadam.blogspot.com/search/label/Ay%25C5%259Fe%2520Kulin&w=1280&h=1024&n=1&ce=true&r=0.1065043022710177&ns=1
200 OK 43 B URL HTTP/1.1 217.195.203.216/analiz.gif?user=bookwormbilgeadam&wnos=99&wnobr=31&k=ccyes&agent=Mozilla/5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0%2529%2520Gecko/20100101%2520Firefox/105.0&l=http%3A//bookworm-bilgeadam.blogspot.com/search/label/Ay%25C5%259Fe%2520Kulin&w=1280&h=1024&n=1&ce=true&r=0.1065043022710177&ns=1
IP
ASN #20649 FS Veri Merkezi Internet Teknolojileri Limited Sirketi
File type GIF image data, version 89a, 1 x 1\012- data
Hash ff8a32564f433c5abbc7c446ade8802c
66dd592e78f6536f10986695527e16b7b1e1e391
48a4d21a5b9c82c4bda4b48532965ecc561f32212403de37e2359e6ff7857071
Analyzer Verdict Alert quad9 Sinkholed
GET /analiz.gif?user=bookwormbilgeadam&wnos=99&wnobr=31&k=ccyes&agent=Mozilla/5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0%2529%2520Gecko/20100101%2520Firefox/105.0&l=http%3A//bookworm-bilgeadam.blogspot.com/search/label/Ay%25C5%259Fe%2520Kulin&w=1280&h=1024&n=1&ce=true&r=0.1065043022710177&ns=1 HTTP/1.1
Host: 217.195.203.216
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
X-Powered-By: PHP/5.4.16
Pragma: no-cache
Cache-Control: max-age=0, no-store, no-cache, must-revalidate
Expires: Thu, 1 Jan 1970 00:00:00 GMT
Connection: close
Vary: User-Agent
Content-Length: 43
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-4a8JWBuNOi8/TxIHVL36meI/AAAAAAAABmo/OoFLERv29hk/s200/adi+aylin+ayse+kulin.jpg
200 OK 15 kB URL HTTP/1.1 1.bp.blogspot.com/-4a8JWBuNOi8/TxIHVL36meI/AAAAAAAABmo/OoFLERv29hk/s200/adi+aylin+ayse+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 136x200, components 3\012- data
Hash c605595f65c10ab0a3e5e0abea0d5acb
efa5ace253f5e6071206296855fb8975b7f170d2
f4ad08168bfa324535ef4411b35849cdc5cc05bc727532eae759e5dd160172c3
GET /-4a8JWBuNOi8/TxIHVL36meI/AAAAAAAABmo/OoFLERv29hk/s200/adi+aylin+ayse+kulin.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v66a"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="adi aylin ayse kulin.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 15243
X-XSS-Protection: 0
4.bp.blogspot.com/-h54-E7E1nPU/TxH-EUUbaSI/AAAAAAAABlQ/uBimsOhMiCw/s200/Foto+Sabah+Resimleri+ay%25C5%259Fe+kulin.jpg
200 OK 14 kB URL HTTP/1.1 4.bp.blogspot.com/-h54-E7E1nPU/TxH-EUUbaSI/AAAAAAAABlQ/uBimsOhMiCw/s200/Foto+Sabah+Resimleri+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 137x200, components 3\012- data
Hash 7efe64f6bd05e16a6e6d742feda93f87
099cbabc9e876c1efa8459d848d18bbe06e6419b
652ff54c2b1b9eaecf8c2e16723d778a4d142c11f88cec6564d4c5bc6e655c20
GET /-h54-E7E1nPU/TxH-EUUbaSI/AAAAAAAABlQ/uBimsOhMiCw/s200/Foto+Sabah+Resimleri+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v654"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Foto Sabah Resimleri ay_e kulin.jpg";filename*=UTF-8''Foto%20Sabah%20Resimleri%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 13556
X-XSS-Protection: 0
2.bp.blogspot.com/-6P2skIrMjpE/TxIAK_94DTI/AAAAAAAABlg/7U37FJgzZ-k/s200/bir+g%25C3%25BCn+ay%25C5%259Fe+kulin.jpg
200 OK 17 kB URL HTTP/1.1 2.bp.blogspot.com/-6P2skIrMjpE/TxIAK_94DTI/AAAAAAAABlg/7U37FJgzZ-k/s200/bir+g%25C3%25BCn+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 137x200, components 3\012- data
Hash f13ff0788ecdcdc80e1f7e83cc28a8bf
27dbd2118c08aed1eaae52ec674bde7181240ec2
bba819677b05efb4be4e2ecefca169ecb1eec7a0cbd6c93ded08caadc7f77474
GET /-6P2skIrMjpE/TxIAK_94DTI/AAAAAAAABlg/7U37FJgzZ-k/s200/bir+g%25C3%25BCn+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v658"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bir g_n ay_e kulin.jpg";filename*=UTF-8''bir%20g%C3%BCn%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 16644
X-XSS-Protection: 0
bumerangeski.boomads.com/showadvert.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074&ctype=58
200 OK 339 B URL HTTP/1.1 bumerangeski.boomads.com/showadvert.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074&ctype=58
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type ASCII text, with no line terminators
Hash ad85ada71f79ce3d7f9287c6cb929636
a5fdd34a3d80b8a17b37ded463fec8cc6cdfd11d
f9f48eb70f0c6ad075c74703b78991a9572efd74f12b80e43ef0a2cc6b7befa5
GET /showadvert.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074&ctype=58 HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=windows-1254
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
Set-Cookie: HurriyetNewSiteUser=RequestURL=http://bumerangeski.boomads.com/showadvert.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074&ctype=58; expires=Fri, 25-Nov-2022 06:42:22 GMT; path=/
ASP.NET_SessionId=2mcfnen1tqlxr3glthiry1ps; path=/; HttpOnly; SameSite=Lax
BMDSD365TP50BFACTEX=9b26f84b-dfe6-409c-b38f-da4814564074=1; expires=Sun, 27-Nov-2022 06:42:22 GMT; path=/
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 339
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a22bc94a1116f343d9c3377cfd4fc5b2
b0bad6a620abd0c33a96c32721ad87849da9f9e6
294cd4b44650b17a93cbe9a4de887ad1da8ab8c11105707cccff17812a8d5890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-7hKO4SlZ1kk/TxHjpYxF-8I/AAAAAAAABlA/Ir9WSrU6604/s200/Geni%25C5%259F+Zamanlar+ay%25C5%259Fe+kulin.jpg
200 OK 16 kB URL HTTP/1.1 2.bp.blogspot.com/-7hKO4SlZ1kk/TxHjpYxF-8I/AAAAAAAABlA/Ir9WSrU6604/s200/Geni%25C5%259F+Zamanlar+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 153x200, components 3\012- data
Hash b0314a410b2a829b6752e818eb294b82
e19aacf965341af314a9c363605d7e9393640d10
35cb2a6a41764cc9813978a3fbebc1a7dcd154bf604d8fa1c3f8e5c7560b0379
GET /-7hKO4SlZ1kk/TxHjpYxF-8I/AAAAAAAABlA/Ir9WSrU6604/s200/Geni%25C5%259F+Zamanlar+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v650"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Geni_ Zamanlar ay_e kulin.jpg";filename*=UTF-8''Geni%C5%9F%20Zamanlar%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 15769
X-XSS-Protection: 0
4.bp.blogspot.com/-LdXS-GwLeac/TxIB7tM9U_I/AAAAAAAABlo/f5AUeiqWW6U/s200/H%25C3%25BCz%25C3%25BCn+D%25C3%25BCrb%25C3%25BCn%25C3%25BCmde+K%25C4%25B1rk+Sene+ay%25C5%259Fe+kulin.jpg
200 OK 14 kB URL HTTP/1.1 4.bp.blogspot.com/-LdXS-GwLeac/TxIB7tM9U_I/AAAAAAAABlo/f5AUeiqWW6U/s200/H%25C3%25BCz%25C3%25BCn+D%25C3%25BCrb%25C3%25BCn%25C3%25BCmde+K%25C4%25B1rk+Sene+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 139x200, components 3\012- data
Hash 4460f39a9e72ea913b40644c3103a30d
7f4117c4ed683211fa0a77d3f67e3ca89f46d7eb
6a0fd909140279f97a6af25b3e370e81778cab9ca6fed40090c56574cbe37500
GET /-LdXS-GwLeac/TxIB7tM9U_I/AAAAAAAABlo/f5AUeiqWW6U/s200/H%25C3%25BCz%25C3%25BCn+D%25C3%25BCrb%25C3%25BCn%25C3%25BCmde+K%25C4%25B1rk+Sene+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v65a"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="H_z_n D_rb_n_mde K_rk Sene ay_e kulin.jpg";filename*=UTF-8''H%C3%BCz%C3%BCn%20D%C3%BCrb%C3%BCn%C3%BCmde%20K%C4%B1rk%20Sene%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 14113
X-XSS-Protection: 0
3.bp.blogspot.com/-mfZdBxEomK8/TxIGBn1GIYI/AAAAAAAABmY/sgOHFr-9fPE/s200/umut+ayse+kulin.jpg
200 OK 16 kB URL HTTP/1.1 3.bp.blogspot.com/-mfZdBxEomK8/TxIGBn1GIYI/AAAAAAAABmY/sgOHFr-9fPE/s200/umut+ayse+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 139x200, components 3\012- data
Hash 02ba5472b12edfea5e34bcd8b0de04b2
de0ec45476e8c37e47d3ac1c4e2cb5d0f4d2e731
d0024a458042ccbb7c77682353d4841935557c6db2bee0dffeb95e1fff395ef9
GET /-mfZdBxEomK8/TxIGBn1GIYI/AAAAAAAABmY/sgOHFr-9fPE/s200/umut+ayse+kulin.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v666"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="umut ayse kulin.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 15457
X-XSS-Protection: 0
2.bp.blogspot.com/-E-Aaw3LFkq8/TxHhBb4NeVI/AAAAAAAABkw/DauRVKqVPQc/s200/G%25C3%25BCne%25C5%259Fe+D%25C3%25B6n+Y%25C3%25BCz%25C3%25BCn%25C3%25BC+ay%25C5%259Fe+kulin.jpg
200 OK 14 kB URL HTTP/1.1 2.bp.blogspot.com/-E-Aaw3LFkq8/TxHhBb4NeVI/AAAAAAAABkw/DauRVKqVPQc/s200/G%25C3%25BCne%25C5%259Fe+D%25C3%25B6n+Y%25C3%25BCz%25C3%25BCn%25C3%25BC+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 138x200, components 3\012- data
Hash 6498f16c649df6e87f29450d488302f1
678c779c56d8ca0aa5f34a3deb28f23fb6d78b5c
6f99049fd65328a4804e4754a8f4bc235c15756d25edfd90b2f39726bd59dcb1
GET /-E-Aaw3LFkq8/TxHhBb4NeVI/AAAAAAAABkw/DauRVKqVPQc/s200/G%25C3%25BCne%25C5%259Fe+D%25C3%25B6n+Y%25C3%25BCz%25C3%25BCn%25C3%25BC+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v64c"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="G_ne_e D_n Y_z_n_ ay_e kulin.jpg";filename*=UTF-8''G%C3%BCne%C5%9Fe%20D%C3%B6n%20Y%C3%BCz%C3%BCn%C3%BC%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 14187
X-XSS-Protection: 0
2.bp.blogspot.com/-H0nuo-RdktY/TxID0aAo8cI/AAAAAAAABmA/axkXL8UBiHE/s200/Kardelenler+%25C3%2587a%25C4%259Fda%25C5%259F+T%25C3%25BCrkiye%2527nin+%25C3%2587a%25C4%259Fda%25C5%259F+K%25C4%25B1zlar%25C4%25B1.jpg
200 OK 9.0 kB URL HTTP/1.1 2.bp.blogspot.com/-H0nuo-RdktY/TxID0aAo8cI/AAAAAAAABmA/axkXL8UBiHE/s200/Kardelenler+%25C3%2587a%25C4%259Fda%25C5%259F+T%25C3%25BCrkiye%2527nin+%25C3%2587a%25C4%259Fda%25C5%259F+K%25C4%25B1zlar%25C4%25B1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 139x200, components 3\012- data
Hash cda15e7d806eaef4988eeec7797de136
5cbefeaf6e5a3e9c540ee7b90d170c39a03fbcd2
68355b45b18d113b0db6af9769cba30f1eaadd90bd5c4d87310c8a441655cf41
GET /-H0nuo-RdktY/TxID0aAo8cI/AAAAAAAABmA/axkXL8UBiHE/s200/Kardelenler+%25C3%2587a%25C4%259Fda%25C5%259F+T%25C3%25BCrkiye%2527nin+%25C3%2587a%25C4%259Fda%25C5%259F+K%25C4%25B1zlar%25C4%25B1.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v660"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Kardelenler _a_da_ T_rkiye'nin _a_da_ K_zlar_.jpg";filename*=UTF-8''Kardelenler%20%C3%87a%C4%9Fda%C5%9F%20T%C3%BCrkiye'nin%20%C3%87a%C4%9Fda%C5%9F%20K%C4%B1zlar%C4%B1.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 9022
X-XSS-Protection: 0
2.bp.blogspot.com/-rCuG8RG_eSk/TxIEiu41RbI/AAAAAAAABmI/m7y7hmYl4q4/s200/babama+ay%25C5%259Fe+kulin.jpg
200 OK 16 kB URL HTTP/1.1 2.bp.blogspot.com/-rCuG8RG_eSk/TxIEiu41RbI/AAAAAAAABmI/m7y7hmYl4q4/s200/babama+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 135x200, components 3\012- data
Hash 3c4aa8808bccead2702549652a54ae75
8573b62df49fd7ce0d3892065942f843048d7927
ef6fae3e76d106fdfbef9933ab6768479cba3f53ce33675b74d75a8821e33f1b
GET /-rCuG8RG_eSk/TxIEiu41RbI/AAAAAAAABmI/m7y7hmYl4q4/s200/babama+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v662"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="babama ay_e kulin.jpg";filename*=UTF-8''babama%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 16219
X-XSS-Protection: 0
bookworm-bilgeadam.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmDxoOTXQ2GeV15rra178KZ2fZH76u8EpAh_rkNCvc9LiGjPdWGDnIXGrrD9iuTvoAjfG5ww3ztepceAx1Vb0Mi3Msfhqw
200 OK 241 B URL HTTP/1.1 bookworm-bilgeadam.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmDxoOTXQ2GeV15rra178KZ2fZH76u8EpAh_rkNCvc9LiGjPdWGDnIXGrrD9iuTvoAjfG5ww3ztepceAx1Vb0Mi3Msfhqw
IP
File type JSON data\012- , ASCII text, with very long lines (384), with no line terminators
Hash 34178259d6bb17b6ea208e6521d07511
abb45d75b165d7c338301957ba81e07ca0a0d24e
5178b8daff25964bd5f0e0746a672a193c5cdf486fb67c287dce3d1708c26ee7
GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmDxoOTXQ2GeV15rra178KZ2fZH76u8EpAh_rkNCvc9LiGjPdWGDnIXGrrD9iuTvoAjfG5ww3ztepceAx1Vb0Mi3Msfhqw HTTP/1.1
Host: bookworm-bilgeadam.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/search/label/Ay%C5%9Fe%20Kulin
Cookie: cwou_bookwormbilgeadam=1669444945; bwou_bookwormbilgeadam=1669444945; woubookwormbilgeadam=t
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 06:42:25 GMT
Expires: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 241
Server: GSE
1.bp.blogspot.com/-1O01Ai8_Qfo/TxIDK8EQcYI/AAAAAAAABl4/FeuUp6BUYdk/s200/Sit+Nene%2527nin+Masallar%25C4%25B1+ay%25C5%259Fe+kulin.jpg
200 OK 16 kB URL HTTP/1.1 1.bp.blogspot.com/-1O01Ai8_Qfo/TxIDK8EQcYI/AAAAAAAABl4/FeuUp6BUYdk/s200/Sit+Nene%2527nin+Masallar%25C4%25B1+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 147x200, components 3\012- data
Hash 9b0f6beb398bd60076009c00bc5704dc
a50c24ada68537a4356ef46eb6a0368dc937ef13
1725f959c7da6f2379d3d4b25c5eee89206928bdd2d9a7d74e44dc43555f16ca
GET /-1O01Ai8_Qfo/TxIDK8EQcYI/AAAAAAAABl4/FeuUp6BUYdk/s200/Sit+Nene%2527nin+Masallar%25C4%25B1+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v65e"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Sit Nene'nin Masallar_ ay_e kulin.jpg";filename*=UTF-8''Sit%20Nene'nin%20Masallar%C4%B1%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 15852
X-XSS-Protection: 0
1.bp.blogspot.com/-dj61ilnV1dg/TxIG0Fn8hpI/AAAAAAAABmg/uZp801U6UgM/s200/Gece+Sesleri+ay%25C5%259Fe+kulin.jpg
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-dj61ilnV1dg/TxIG0Fn8hpI/AAAAAAAABmg/uZp801U6UgM/s200/Gece+Sesleri+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 125x200, components 3\012- data
Hash 7b704ff7d9030309c28c2bd359cd6b4d
495548e0292c3a7cf0bc14a7d060c9437b322ada
e3cbbfd8567037b86858b757d48eda46db3094fdecc7fefdff26b6c20f0e5a69
GET /-dj61ilnV1dg/TxIG0Fn8hpI/AAAAAAAABmg/uZp801U6UgM/s200/Gece+Sesleri+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v668"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Gece Sesleri ay_e kulin.jpg";filename*=UTF-8''Gece%20Sesleri%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 11475
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 69b4c95baca69139e9e4f7e5ffa6bace
a33af721a9defcb815716234aafdb69de7169455
9f752625bea112bc5402067fd695ba893590e6de9844de640a663e4e8fdc1475
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
200 OK 2.8 kB URL HTTP/1.1 bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text, with very long lines (1108), with CRLF line terminators
Hash ec6c794246b01c8058d7cc35c23e1d04
9f2cb81f4523be6abca1c01abb8a799143981cd3
aeac98b7c060559a7cbfdddc9f2e617e9b6b96ac3663167822d221e429bcdabf
GET /templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074 HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bumerangeski.boomads.com/showadvert.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074&ctype=58
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=windows-1254
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
Set-Cookie: HurriyetNewSiteUser=RequestURL=http://bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074; expires=Fri, 25-Nov-2022 06:42:22 GMT; path=/
ASP.NET_SessionId=kzyw4z0x24zht45wvntsex0f; path=/; HttpOnly; SameSite=Lax
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 2809
adservice.google.com/adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 26 Nov 2022 06:42:25 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 69b4c95baca69139e9e4f7e5ffa6bace
a33af721a9defcb815716234aafdb69de7169455
9f752625bea112bc5402067fd695ba893590e6de9844de640a663e4e8fdc1475
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/navbar.g?targetBlogID=7477769263351366370&blogName=!+Bilmek+kaliteli+ya%C5%9Famakt%C4%B1r+/+Kitap+...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://bookworm-bilgeadam.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=http://bookworm-bilgeadam.blogspot.com/&vt=5098400471594981234&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
200 OK 2.6 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=7477769263351366370&blogName=!+Bilmek+kaliteli+ya%C5%9Famakt%C4%B1r+/+Kitap+...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://bookworm-bilgeadam.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=http://bookworm-bilgeadam.blogspot.com/&vt=5098400471594981234&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3152)
Hash fa0cae0c16c54dc7abea03a79eb62a12
e7439bfc77f4aad5e86b9e145726d3369364b14d
ab5189d18dd0d54f3d6ebd24bc0f4269e6c52f9ca77b0b2b1113701023f13a62
GET /navbar.g?targetBlogID=7477769263351366370&blogName=!+Bilmek+kaliteli+ya%C5%9Famakt%C4%B1r+/+Kitap+...&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://bookworm-bilgeadam.blogspot.com/search&blogLocale=tr&v=2&homepageUrl=http://bookworm-bilgeadam.blogspot.com/&vt=5098400471594981234&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 26 Nov 2022 06:42:25 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2627
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 26 Nov 2022 06:42:25 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3424fd0abb5ab18be62cd209cb3d3dc
dbb2a21b12e92c8837c4346b6d052454bb6dffd6
e69548655278cf6a48fce549928656eb5a91d787e7b1afc12959e2bffb58990b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bumerangeski.boomads.com/styles/ads.css
200 OK 3.8 kB URL HTTP/1.1 bumerangeski.boomads.com/styles/ads.css
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type ASCII text, with very long lines (545), with CRLF line terminators
Hash 831bfb2011ab0da1d51503b7dda1fae4
3ec4e8923af24f409f677b7b6854c7edc12579d4
ca96095b9f75e006fc94db9a98bd5f6283ebe595427b4b3f42249414cb0dbb00
GET /styles/ads.css HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sat, 22 Sep 2012 15:53:35 GMT
Accept-Ranges: bytes
ETag: "1d9ac76cda98cd1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 3774
1.bp.blogspot.com/-azaXOtO17_w/TxICgOuJwpI/AAAAAAAABlw/Ix723RZU4vs/s200/Hayat+D%25C3%25BCrb%25C3%25BCn%25C3%25BCmde+K%25C4%25B1rk+Sene-+1+ay%25C5%259Fe+kulin.jpg
200 OK 15 kB URL HTTP/1.1 1.bp.blogspot.com/-azaXOtO17_w/TxICgOuJwpI/AAAAAAAABlw/Ix723RZU4vs/s200/Hayat+D%25C3%25BCrb%25C3%25BCn%25C3%25BCmde+K%25C4%25B1rk+Sene-+1+ay%25C5%259Fe+kulin.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 136x200, components 3\012- data
Hash 9a4e9df2bbef46c24976d0a93e9aa5df
02f6a367f9843a07c302bbc16d6880f287659c05
0de52d39c248e1ebee0ea88cae1701164b4ea561325ab41237e7ec7e5bdba2db
GET /-azaXOtO17_w/TxICgOuJwpI/AAAAAAAABlw/Ix723RZU4vs/s200/Hayat+D%25C3%25BCrb%25C3%25BCn%25C3%25BCmde+K%25C4%25B1rk+Sene-+1+ay%25C5%259Fe+kulin.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v65c"
Expires: Sun, 27 Nov 2022 06:42:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Hayat D_rb_n_mde K_rk Sene- 1 ay_e kulin.jpg";filename*=UTF-8''Hayat%20D%C3%BCrb%C3%BCn%C3%BCmde%20K%C4%B1rk%20Sene-%201%20ay%C5%9Fe%20kulin.jpg
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 26 Nov 2022 06:42:25 GMT
Server: fife
Content-Length: 14589
X-XSS-Protection: 0
bumerangeski.boomads.com/images/spacer.gif
200 OK 43 B URL HTTP/1.1 bumerangeski.boomads.com/images/spacer.gif
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /images/spacer.gif HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 21 May 2010 06:38:30 GMT
Accept-Ranges: bytes
ETag: "9a3fe939b0f8ca1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 43
bumerangeski.boomads.com/images/ads/s_yesil_02.gif
200 OK 1.3 kB URL HTTP/1.1 bumerangeski.boomads.com/images/ads/s_yesil_02.gif
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type GIF image data, version 89a, 1 x 24\012- data
Hash ef48574fa8efe62c1bad08f07e40424c
28abdbc5e24e5784223a13e4536e655e30cdfac1
81a64667790d4348f62efbb14029585678c18aab327c1ce902ffee4aa31097f2
GET /images/ads/s_yesil_02.gif HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 18 Oct 2010 09:09:01 GMT
Accept-Ranges: bytes
ETag: "f6bbbc1aa46ecb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 1261
bumerangeski.boomads.com/images/ads/buton_yesil_saglik.gif
200 OK 3.3 kB URL HTTP/1.1 bumerangeski.boomads.com/images/ads/buton_yesil_saglik.gif
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type GIF image data, version 89a, 180 x 28\012- data
Hash 504b338076be77e4a2bc400c79177fd0
d91f251482238fc3359e5855e95fb9b09efd5c66
073807612778e4fc61a6ab404ff1cd8b668a5028f74ddd372d5abdc721c8d2fa
GET /images/ads/buton_yesil_saglik.gif HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 18 Oct 2010 09:09:00 GMT
Accept-Ranges: bytes
ETag: "8662771aa46ecb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:21 GMT
Content-Length: 3282
bumerangeski.boomads.com/images/ads/s_yesil_bg.gif
200 OK 4.0 kB URL HTTP/1.1 bumerangeski.boomads.com/images/ads/s_yesil_bg.gif
IP
ASN #12978 Andromeda Tv Digital Platform Isletmeciligi A.s.
File type GIF image data, version 89a, 180 x 29\012- data
Hash 1df7c6c630f84a791ecf18651b4429fb
26eee83128ab29845906e838298d2ef77c998ead
3badc27a242b146034883b5529d5e0ef713f45bd3246c43615ce32bf643b8037
GET /images/ads/s_yesil_bg.gif HTTP/1.1
Host: bumerangeski.boomads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bumerangeski.boomads.com/templates/saglik_yesil_180x380.aspx?clientid=9b26f84b-dfe6-409c-b38f-da4814564074
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Mon, 18 Oct 2010 09:09:01 GMT
Accept-Ranges: bytes
ETag: "b64cc61aa46ecb1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
XSrv: BOOM01
Date: Sat, 26 Nov 2022 06:42:22 GMT
Content-Length: 3993
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 816d70da869514eb692b661a8226d9c1
a89905476481099656b3461acd454ad11ad5584d
cd03b16cdd0d63deb1336dec06481a119a46359358605c8faca8955f90939a34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 816d70da869514eb692b661a8226d9c1
a89905476481099656b3461acd454ad11ad5584d
cd03b16cdd0d63deb1336dec06481a119a46359358605c8faca8955f90939a34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 48 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3502)
Hash 297e24828abaf97fb29460fd75369140
e9e02d737f1bcf9874a55562edff5f795a1c170c
cdbe4e689ca060e94f00f0aa4c45a89efacddac90df42929ff42a3bff44a9d3e
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 48265
date: Sat, 26 Nov 2022 06:42:26 GMT
expires: Sat, 26 Nov 2022 06:42:26 GMT
cache-control: private, max-age=3000
etag: "1668095300071091"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bookworm-bilgeadam.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 bookworm-bilgeadam.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: bookworm-bilgeadam.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/search/label/Ay%C5%9Fe%20Kulin
Cookie: cwou_bookwormbilgeadam=1669444945; bwou_bookwormbilgeadam=1669444945; woubookwormbilgeadam=t; _ga=GA1.3.1619701318.1669444945; _gid=GA1.3.1234932133.1669444945; _gat=1
HTTP/1.1 200 OK
Content-Type: image/x-icon
Expires: Sat, 26 Nov 2022 06:42:26 GMT
Date: Sat, 26 Nov 2022 06:42:26 GMT
Cache-Control: private, max-age=86400
Last-Modified: Mon, 21 Nov 2022 12:22:53 GMT
ETag: W/"d6a77c8b0755133aa14cdab30e9934b71ac9eea4967768cc1bdc11f95850c95a"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1Ofy3W9sMBkYGqxUG2nq8w9jZx6nZuHR9M5k4IMZlrN9YVFlCxhAqXKg3yexHBiN6CWJjBB4f1JUBrIS2Shi2KI44lHDvUjP0yTwu7WndoqY4u2eNgHQnuz5wOi8gSsKhRfuvuzjV0YEdqgQyVWCkCcg=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1Ofy3W9sMBkYGqxUG2nq8w9jZx6nZuHR9M5k4IMZlrN9YVFlCxhAqXKg3yexHBiN6CWJjBB4f1JUBrIS2Shi2KI44lHDvUjP0yTwu7WndoqY4u2eNgHQnuz5wOi8gSsKhRfuvuzjV0YEdqgQyVWCkCcg=w72-h72-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 375c7c720d718b404f660e1a1410551a
2d720ae2cadee658091c9179aceb894fa4857feb
d93cc2904261f397a49a5357a887e9587249137f2da2b160b8a8873101e95d10
GET /blogger_img_proxy/ANbyha1Ofy3W9sMBkYGqxUG2nq8w9jZx6nZuHR9M5k4IMZlrN9YVFlCxhAqXKg3yexHBiN6CWJjBB4f1JUBrIS2Shi2KI44lHDvUjP0yTwu7WndoqY4u2eNgHQnuz5wOi8gSsKhRfuvuzjV0YEdqgQyVWCkCcg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 26 Nov 2022 06:42:26 GMT
server: fife
content-length: 1755
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 22992fd74cd15d18bd692f6beda86d99
0d7bcf1d3bd47c158f8644725686f3789f637473
7cd4e32f3564daacbed1b6b25b53a4cf696e5355172133c9aa663facc62eefb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6411
Cache-Control: max-age=152263
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "63814c0e-139"
Expires: Mon, 28 Nov 2022 01:00:09 GMT
Last-Modified: Fri, 25 Nov 2022 23:13:18 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 22992fd74cd15d18bd692f6beda86d99
0d7bcf1d3bd47c158f8644725686f3789f637473
7cd4e32f3564daacbed1b6b25b53a4cf696e5355172133c9aa663facc62eefb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6411
Cache-Control: max-age=152263
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "63814c0e-139"
Expires: Mon, 28 Nov 2022 01:00:09 GMT
Last-Modified: Fri, 25 Nov 2022 23:13:18 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 22992fd74cd15d18bd692f6beda86d99
0d7bcf1d3bd47c158f8644725686f3789f637473
7cd4e32f3564daacbed1b6b25b53a4cf696e5355172133c9aa663facc62eefb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6324
Cache-Control: max-age=152176
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "63814c0e-139"
Expires: Mon, 28 Nov 2022 00:58:42 GMT
Last-Modified: Fri, 25 Nov 2022 23:13:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 314 B IP
Hash f6a800119071c7159cbf159aa1f82995
ee97010129796d6d854fa4cbd218c8e179012623
bab27de2b2881e381b7bc9c8b95ef023514af2597ad6df54caff7d3a592e3a01
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Last-Modified: Sat, 26 Nov 2022 04:53:38 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 314
ads.eu.criteo.com/delivery/r/afr.php?z=Y4G1UQAOIBUFkUp7AAUVjhFjf59sRd_3baKFkA&u=%7CT0YicBfSAjaavy4cuNafKEQX4Nba3YiOAroIVgnVbqg%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_AM8iEE4GHx4XAZ8-c9e5LlJfMjehYPJbM0j2hknANCpMoZ3wmmJmKywCQfyPPNAxrogQIIXJ_M67ByThroMLn2nkJ74dE9dRc4A1mAiI_W-blaMN-ggbb3fSAp0Jobg_lcjPnQDXsxRRGw8LpkzlIk_fOTdB9D39L5I_4X1XcdX4Ewmg9V8c2kVuftRsZ8AL2TlZxumkNhqquLSv5CjgCpljwz_RNbV2AgQO4YQso1-siCmFwL7KdGZJsb4JxSvxNCucD9peaOWQSey2NE1RGD12z-22w9Ybv4CV4DUc7XLgAMNhLfpdKjCL1H9J5rm72yayyQuKbENnL_uBz3czs8RDSdSvFm0_bLEYVRB-TSqdhhcOeCt5mWm1WW-4G4O00dY8gVJXTfFLYSGH4DLsUHj3C4dzCX0QQzDyqu8ozwvX0EqGWEJMnS-Zbmxl4WaecxENGxhiHAlaE4-ni5CzwFfIldR7LovHNLA3l5G2GnE0cGByGTLCIL1vt7a95j6kQAM8xAAOLRuaV4nsWliAZDh2cl1GwGTBdNH-6veGNbK4rBtVib8urfqOnc2ntrVlk&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCYetDUbWBY5XAOPuUxdwPjquUuAPJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTcxNjgyMTQwMjkzNzA0MjXIAQmpAv1d4nqfcLE-qAMBqgSsAk_QYoa1dGOH8-VeA6AWRZ5Z5XiNniFli93jjj8qgUX17_xEkLDbZLbPyyUyW_DYDq2Vfeu3FFoYYplB44bCs-HUCBCAyMemKYalTdvzWWhO25Q_RdXbMfqB8EFjb6zzO4VZHSloXADyqpxpmvep2n7JpZiUwYZ5J5EdCHj-zLKnxiphqiPLXs2UruoIJ8wUad5-75zXPr93UfVkpf8gXZTzplIZf87ALymHL59pAqjdg8RXLzDfKw-AH_iQS03KZ-17f1lSCG-1v1PsA6gQLj8TbZMYW4UlXBcOVsl20NJVGd_UMNeCdIR3RK7-YNzE716cRfpNgMgadqaYuI9FfLoYLaX1ul4dF_Rz9lUP9uUO7ubLcTHSuPwdqt7aIkr3rLOII3_hNjm9SJp5B4AGhs3hiuHPyo7QAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_0SGE-lo8fY8RF3S4MpUCbIqpswkA%26client%3Dca-pub-7168214029370425%26adurl%3D
200 OK 57 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Y4G1UQAOIBUFkUp7AAUVjhFjf59sRd_3baKFkA&u=%7CT0YicBfSAjaavy4cuNafKEQX4Nba3YiOAroIVgnVbqg%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_AM8iEE4GHx4XAZ8-c9e5LlJfMjehYPJbM0j2hknANCpMoZ3wmmJmKywCQfyPPNAxrogQIIXJ_M67ByThroMLn2nkJ74dE9dRc4A1mAiI_W-blaMN-ggbb3fSAp0Jobg_lcjPnQDXsxRRGw8LpkzlIk_fOTdB9D39L5I_4X1XcdX4Ewmg9V8c2kVuftRsZ8AL2TlZxumkNhqquLSv5CjgCpljwz_RNbV2AgQO4YQso1-siCmFwL7KdGZJsb4JxSvxNCucD9peaOWQSey2NE1RGD12z-22w9Ybv4CV4DUc7XLgAMNhLfpdKjCL1H9J5rm72yayyQuKbENnL_uBz3czs8RDSdSvFm0_bLEYVRB-TSqdhhcOeCt5mWm1WW-4G4O00dY8gVJXTfFLYSGH4DLsUHj3C4dzCX0QQzDyqu8ozwvX0EqGWEJMnS-Zbmxl4WaecxENGxhiHAlaE4-ni5CzwFfIldR7LovHNLA3l5G2GnE0cGByGTLCIL1vt7a95j6kQAM8xAAOLRuaV4nsWliAZDh2cl1GwGTBdNH-6veGNbK4rBtVib8urfqOnc2ntrVlk&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCYetDUbWBY5XAOPuUxdwPjquUuAPJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTcxNjgyMTQwMjkzNzA0MjXIAQmpAv1d4nqfcLE-qAMBqgSsAk_QYoa1dGOH8-VeA6AWRZ5Z5XiNniFli93jjj8qgUX17_xEkLDbZLbPyyUyW_DYDq2Vfeu3FFoYYplB44bCs-HUCBCAyMemKYalTdvzWWhO25Q_RdXbMfqB8EFjb6zzO4VZHSloXADyqpxpmvep2n7JpZiUwYZ5J5EdCHj-zLKnxiphqiPLXs2UruoIJ8wUad5-75zXPr93UfVkpf8gXZTzplIZf87ALymHL59pAqjdg8RXLzDfKw-AH_iQS03KZ-17f1lSCG-1v1PsA6gQLj8TbZMYW4UlXBcOVsl20NJVGd_UMNeCdIR3RK7-YNzE716cRfpNgMgadqaYuI9FfLoYLaX1ul4dF_Rz9lUP9uUO7ubLcTHSuPwdqt7aIkr3rLOII3_hNjm9SJp5B4AGhs3hiuHPyo7QAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_0SGE-lo8fY8RF3S4MpUCbIqpswkA%26client%3Dca-pub-7168214029370425%26adurl%3D
IP
Hash 2347711478eac775d2df1e8b1f721946
9ab7674896428333b5335df20a7bfdaa3d7afc36
712c30029915a6db9aca3bce72900de590b035364b19c59442a6a0c2a2193201
GET /delivery/r/afr.php?z=Y4G1UQAOIBUFkUp7AAUVjhFjf59sRd_3baKFkA&u=%7CT0YicBfSAjaavy4cuNafKEQX4Nba3YiOAroIVgnVbqg%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_AM8iEE4GHx4XAZ8-c9e5LlJfMjehYPJbM0j2hknANCpMoZ3wmmJmKywCQfyPPNAxrogQIIXJ_M67ByThroMLn2nkJ74dE9dRc4A1mAiI_W-blaMN-ggbb3fSAp0Jobg_lcjPnQDXsxRRGw8LpkzlIk_fOTdB9D39L5I_4X1XcdX4Ewmg9V8c2kVuftRsZ8AL2TlZxumkNhqquLSv5CjgCpljwz_RNbV2AgQO4YQso1-siCmFwL7KdGZJsb4JxSvxNCucD9peaOWQSey2NE1RGD12z-22w9Ybv4CV4DUc7XLgAMNhLfpdKjCL1H9J5rm72yayyQuKbENnL_uBz3czs8RDSdSvFm0_bLEYVRB-TSqdhhcOeCt5mWm1WW-4G4O00dY8gVJXTfFLYSGH4DLsUHj3C4dzCX0QQzDyqu8ozwvX0EqGWEJMnS-Zbmxl4WaecxENGxhiHAlaE4-ni5CzwFfIldR7LovHNLA3l5G2GnE0cGByGTLCIL1vt7a95j6kQAM8xAAOLRuaV4nsWliAZDh2cl1GwGTBdNH-6veGNbK4rBtVib8urfqOnc2ntrVlk&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCYetDUbWBY5XAOPuUxdwPjquUuAPJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTcxNjgyMTQwMjkzNzA0MjXIAQmpAv1d4nqfcLE-qAMBqgSsAk_QYoa1dGOH8-VeA6AWRZ5Z5XiNniFli93jjj8qgUX17_xEkLDbZLbPyyUyW_DYDq2Vfeu3FFoYYplB44bCs-HUCBCAyMemKYalTdvzWWhO25Q_RdXbMfqB8EFjb6zzO4VZHSloXADyqpxpmvep2n7JpZiUwYZ5J5EdCHj-zLKnxiphqiPLXs2UruoIJ8wUad5-75zXPr93UfVkpf8gXZTzplIZf87ALymHL59pAqjdg8RXLzDfKw-AH_iQS03KZ-17f1lSCG-1v1PsA6gQLj8TbZMYW4UlXBcOVsl20NJVGd_UMNeCdIR3RK7-YNzE716cRfpNgMgadqaYuI9FfLoYLaX1ul4dF_Rz9lUP9uUO7ubLcTHSuPwdqt7aIkr3rLOII3_hNjm9SJp5B4AGhs3hiuHPyo7QAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_0SGE-lo8fY8RF3S4MpUCbIqpswkA%26client%3Dca-pub-7168214029370425%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:25 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 50262170
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash f6a800119071c7159cbf159aa1f82995
ee97010129796d6d854fa4cbd218c8e179012623
bab27de2b2881e381b7bc9c8b95ef023514af2597ad6df54caff7d3a592e3a01
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Last-Modified: Sat, 26 Nov 2022 04:53:38 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash 053ee42cacd3f46814cb3b5a8f9cbd43
097a5d87f9fce89f68ac0f49eab89074d1a932ae
8304d72212a06e3a80ad86e68dc1b8872933517cc4170b6afa0e3fa2d3633b97
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 444
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Last-Modified: Sat, 26 Nov 2022 06:35:02 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 314
rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kPenErOzWawC-gGdg2ICAgAAAJxfQb2KCE9vEFG1gWPTLIW0ubNk0KDGoAASAAA&wp=Y4G1UQAOIBUFkUp7AAUVjhFjf59sRd_3baKFkA
200 OK 0 B URL HTTP/2 rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kPenErOzWawC-gGdg2ICAgAAAJxfQb2KCE9vEFG1gWPTLIW0ubNk0KDGoAASAAA&wp=Y4G1UQAOIBUFkUp7AAUVjhFjf59sRd_3baKFkA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kPenErOzWawC-gGdg2ICAgAAAJxfQb2KCE9vEFG1gWPTLIW0ubNk0KDGoAASAAA&wp=Y4G1UQAOIBUFkUp7AAUVjhFjf59sRd_3baKFkA HTTP/1.1
Host: rtb.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 296670
date: Sat, 26 Nov 2022 06:42:25 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kPenErOzWcAEmAKdg2ICAgAAAPL-iLEbJCucEFG1gWPmYzRRk2xv9u34swASAAA&wp=Y4G1UQAOMj0KssYYAA08hhEfikgpOVPRPAO3ng
200 OK 0 B URL HTTP/2 rtb.nl.eu.criteo.com/google/auction/notify?profile=14&payload=kPenErOzWcAEmAKdg2ICAgAAAPL-iLEbJCucEFG1gWPmYzRRk2xv9u34swASAAA&wp=Y4G1UQAOMj0KssYYAA08hhEfikgpOVPRPAO3ng
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kPenErOzWcAEmAKdg2ICAgAAAPL-iLEbJCucEFG1gWPmYzRRk2xv9u34swASAAA&wp=Y4G1UQAOMj0KssYYAA08hhEfikgpOVPRPAO3ng HTTP/1.1
Host: rtb.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 200467
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
rtb.fr.eu.criteo.com/google/auction/notify?profile=14&payload=kPenErOzWawC2ASdg2ICAgAAAGtD7PegAgx1EFG1gWOUHEuVydptVNncJgASAAA&wp=Y4G1UQAOb88Kso9KAAxl0r9cgYiXraAHXlaQTw
200 OK 0 B URL HTTP/2 rtb.fr.eu.criteo.com/google/auction/notify?profile=14&payload=kPenErOzWawC2ASdg2ICAgAAAGtD7PegAgx1EFG1gWOUHEuVydptVNncJgASAAA&wp=Y4G1UQAOb88Kso9KAAxl0r9cgYiXraAHXlaQTw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kPenErOzWawC2ASdg2ICAgAAAGtD7PegAgx1EFG1gWOUHEuVydptVNncJgASAAA&wp=Y4G1UQAOb88Kso9KAAxl0r9cgYiXraAHXlaQTw HTTP/1.1
Host: rtb.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 286163
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 65efe7f3aa922f3aa44fa09cb6a2a4bb
3f52b1246b4267831ff0e90ec5e4159aba69c54c
51f678bf96aab273d791b2fbea9dacd21a2585bdf8c2951f1f0bc1815af825c3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5316
Cache-Control: max-age=138884
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "63811c12-1d7"
Expires: Sun, 27 Nov 2022 21:17:10 GMT
Last-Modified: Fri, 25 Nov 2022 19:48:34 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 312 B IP
Hash 075b978d5014c00a9cb96e9971337061
68c7c339233a16b5ab4c2e4814fe479b1b467ebd
8f6a792b948278a69165b1c2108c488cfd8df36b3d21e7b3964f5ca3cc879422
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4970
Cache-Control: max-age=145387
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "638136d3-138"
Expires: Sun, 27 Nov 2022 23:05:33 GMT
Last-Modified: Fri, 25 Nov 2022 21:42:43 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 075b978d5014c00a9cb96e9971337061
68c7c339233a16b5ab4c2e4814fe479b1b467ebd
8f6a792b948278a69165b1c2108c488cfd8df36b3d21e7b3964f5ca3cc879422
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4946
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Last-Modified: Sat, 26 Nov 2022 05:20:00 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 075b978d5014c00a9cb96e9971337061
68c7c339233a16b5ab4c2e4814fe479b1b467ebd
8f6a792b948278a69165b1c2108c488cfd8df36b3d21e7b3964f5ca3cc879422
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: max-age=145386
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "638136d3-138"
Expires: Sun, 27 Nov 2022 23:05:32 GMT
Last-Modified: Fri, 25 Nov 2022 21:42:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 075b978d5014c00a9cb96e9971337061
68c7c339233a16b5ab4c2e4814fe479b1b467ebd
8f6a792b948278a69165b1c2108c488cfd8df36b3d21e7b3964f5ca3cc879422
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4970
Cache-Control: max-age=145387
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "638136d3-138"
Expires: Sun, 27 Nov 2022 23:05:33 GMT
Last-Modified: Fri, 25 Nov 2022 21:42:43 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 075b978d5014c00a9cb96e9971337061
68c7c339233a16b5ab4c2e4814fe479b1b467ebd
8f6a792b948278a69165b1c2108c488cfd8df36b3d21e7b3964f5ca3cc879422
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: max-age=145386
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "638136d3-138"
Expires: Sun, 27 Nov 2022 23:05:32 GMT
Last-Modified: Fri, 25 Nov 2022 21:42:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
static.criteo.net/design/dt/93075/221121/995c0fb85195468d83f743c14f946768_cpn_300x250_2.jpg
200 OK 26 kB URL HTTP/2 static.criteo.net/design/dt/93075/221121/995c0fb85195468d83f743c14f946768_cpn_300x250_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x250, components 3\012- data
Hash c34045d131917d7db153a3b6dbe04503
595b0d5f686cd63b7a69f248ef5f87ef4b54da3b
4257ec89f53eb86f7137d3182b21f637d88401e340a58a921908d92612b8a91d
GET /design/dt/93075/221121/995c0fb85195468d83f743c14f946768_cpn_300x250_2.jpg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/jpeg
content-length: 26230
last-modified: Mon, 21 Nov 2022 15:51:34 GMT
etag: "637b9e86-6676"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/93075/221121/db4e18426ce049d784e2846e2ca5423a_cpn_300x250_1.jpg
200 OK 6.0 kB URL HTTP/2 static.criteo.net/design/dt/93075/221121/db4e18426ce049d784e2846e2ca5423a_cpn_300x250_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x40, components 3\012- data
Hash c6f47b54dbe4e894c93237ebe3fafe00
21ab37f8bfa5e7755d3e06b0a5e0d8d8f33a2eb2
148764b8359686fcc627a57d8c08a6d1b1d2d409e8c24118145f7ee369a34292
GET /design/dt/93075/221121/db4e18426ce049d784e2846e2ca5423a_cpn_300x250_1.jpg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/jpeg
content-length: 6024
last-modified: Mon, 21 Nov 2022 15:51:33 GMT
etag: "637b9e85-1788"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/close_button.svg
200 OK 308 B URL HTTP/2 static.criteo.net/flash/icon/close_button.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 1bfe2e290ec4440da74a2e2c249eae2b
0b888a3f9e27d1554f2e21d51e7a1c223d00dbd4
8ec89605fe3d580e9539c7b858e8f69ba4e26fe06377ebe04585397de23a7395
GET /flash/icon/close_button.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/svg+xml
content-length: 308
last-modified: Fri, 14 Feb 2020 13:51:32 GMT
etag: "5e46a5e4-134"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/back_button2.svg
200 OK 293 B URL HTTP/2 static.criteo.net/flash/icon/back_button2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d9f776bdc698e1bc9c6a1977218019cd
5763cfb5ac79adf0fa7f03a82bad04eea2dca243
725e869434fef8013208ed4c233d29744f9b363f867dcfb8f23e862880fa699a
GET /flash/icon/back_button2.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/svg+xml
content-length: 293
last-modified: Thu, 28 Apr 2022 09:09:48 GMT
etag: "626a59dc-125"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash d7716ef06a1df64cce636c09d6f6bce3
6d70b77d7dcb7a259e3d3123569554bcd02d5a41
20ac5e43cb4c169b6db528c8e6ec7afdadadb58b2d2f8f209e3832a88621f328
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 701
Cache-Control: max-age=104784
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Etag: "6380a8e5-139"
Expires: Sun, 27 Nov 2022 11:48:50 GMT
Last-Modified: Fri, 25 Nov 2022 11:37:09 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A9b317b99-c9e2-4a1e-9760-985fb2eb0f66%2FMelia_Palma_Bay_1SQUARE_800X800.jpg&v=3&w=400&s=2gNHGXQDAFA6gowdpu4-pAp7&b=400
200 OK 28 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A9b317b99-c9e2-4a1e-9760-985fb2eb0f66%2FMelia_Palma_Bay_1SQUARE_800X800.jpg&v=3&w=400&s=2gNHGXQDAFA6gowdpu4-pAp7&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3179045e58a36f9d610571a9e478fcc8
9bd838dee0422ec69c653382dba5ab3bc73b17e2
99897eb936cbaa686925550548f3728125053512b8eb434a930a39bfc9e10818
GET /img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A9b317b99-c9e2-4a1e-9760-985fb2eb0f66%2FMelia_Palma_Bay_1SQUARE_800X800.jpg&v=3&w=400&s=2gNHGXQDAFA6gowdpu4-pAp7&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=3490
expires: Sat, 26 Nov 2022 07:40:37 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 28056
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A04d08c03-cee2-4f89-8bb4-c319b9be52cf%2FParadisus-Gran-Canaria_1-SQUARE_800X800.jpg&v=3&w=400&s=z5ncGvZLGEdE9tvrEGi7R8Kc&b=400
200 OK 20 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A04d08c03-cee2-4f89-8bb4-c319b9be52cf%2FParadisus-Gran-Canaria_1-SQUARE_800X800.jpg&v=3&w=400&s=z5ncGvZLGEdE9tvrEGi7R8Kc&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6f7863e88f43aa96bc60769aed70eb75
aeca7c00e1347dd2f26280adefe03c0aa03d0654
33813d7d8b1f1b6c7d5b5074a772f0b708187972055199628091b437026cb494
GET /img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A04d08c03-cee2-4f89-8bb4-c319b9be52cf%2FParadisus-Gran-Canaria_1-SQUARE_800X800.jpg&v=3&w=400&s=z5ncGvZLGEdE9tvrEGi7R8Kc&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=8471
expires: Sat, 26 Nov 2022 09:03:38 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 20366
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=76&m=0&partner=93075&q=80&r=0&u=http%3A%2F%2Fstatic.nl.eu.criteo.net%2Fdesign%2Fdt%2F5031%2F190729%2Fa21d783007334b99b7401f1425c637a2_horizontal_gray.png&v=3&w=596&s=ANs_K7TN_LETkIWnc-r60Uld
200 OK 8.9 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=76&m=0&partner=93075&q=80&r=0&u=http%3A%2F%2Fstatic.nl.eu.criteo.net%2Fdesign%2Fdt%2F5031%2F190729%2Fa21d783007334b99b7401f1425c637a2_horizontal_gray.png&v=3&w=596&s=ANs_K7TN_LETkIWnc-r60Uld
IP
File type PNG image data, 303 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ef7dec6ed3643af4cfd629df62c412d
fcc40d1d3c3ac72e8a09ba34214d38b38c652d07
b992d1d1082d07656bca4d92b4ff0e85fdee67ef495ded576f5204b7c66f39db
GET /img/img?h=76&m=0&partner=93075&q=80&r=0&u=http%3A%2F%2Fstatic.nl.eu.criteo.net%2Fdesign%2Fdt%2F5031%2F190729%2Fa21d783007334b99b7401f1425c637a2_horizontal_gray.png&v=3&w=596&s=ANs_K7TN_LETkIWnc-r60Uld HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30993649
expires: Mon, 20 Nov 2023 00:03:16 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 8932
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2376b742-f268-43b1-9844-b9ba7c8ef2ae%2FInnside_Calvia_Beach_1SQUARE_800X800.jpg&v=3&w=400&s=ziHsE2LDtOq5LnqQeK7XOzO3&b=400
200 OK 27 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2376b742-f268-43b1-9844-b9ba7c8ef2ae%2FInnside_Calvia_Beach_1SQUARE_800X800.jpg&v=3&w=400&s=ziHsE2LDtOq5LnqQeK7XOzO3&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 53f5099e2a92dbc1ae2997c1d31b3977
7f55a5a511f5e9a72870c4b72a554340281f6e15
c87cf607dd7cbaafbc89e0e4c6d3c02675bd8784ae8a89a99bfa1b5e2027fc4e
GET /img/img?c=3&cq=256&h=400&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2376b742-f268-43b1-9844-b9ba7c8ef2ae%2FInnside_Calvia_Beach_1SQUARE_800X800.jpg&v=3&w=400&s=ziHsE2LDtOq5LnqQeK7XOzO3&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=42168
expires: Sat, 26 Nov 2022 18:25:15 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 26722
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7229
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:42:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7229
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:42:26 GMT
Connection: keep-alive
static.criteo.net/design/dt/93075/221121/2c9ea350b1474e0f85fd911d8620596c_cpn_300x600_1.jpg
200 OK 6.5 kB URL HTTP/2 static.criteo.net/design/dt/93075/221121/2c9ea350b1474e0f85fd911d8620596c_cpn_300x600_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x54, components 3\012- data
Hash 181cabb99fbe02577b2ae7a483383afa
b49e2444deda8b0f98fe9c9ea2ca082c2fcf1da4
6ffff14776b784b20b2af9dcf3b9503c6db1b0226887dfb7ed00f994e57b9b14
GET /design/dt/93075/221121/2c9ea350b1474e0f85fd911d8620596c_cpn_300x600_1.jpg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/jpeg
content-length: 6512
last-modified: Mon, 21 Nov 2022 15:51:36 GMT
etag: "637b9e88-1970"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7229
Expires: Sat, 26 Nov 2022 08:42:55 GMT
Date: Sat, 26 Nov 2022 06:42:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b72976b3f013ace345c85b0bdfea5f76
3e9004d90ed72f3034eae5cddd476eb50ac63ea6
068a487b9ae3d7461ef16e04cee8802a7b76a2bce19bf66df48b2b1cdb0c772c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6382
x-amzn-requestid: e1e4c180-7f90-4d4b-a5f4-094e5f542a18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLacUFC4oAMFayA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813de8-09efee9d0604d16c61e3d452;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 22:12:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SR2His1pCOwZHi7bBtnG8QeCtZQsCMeJxs-UCpd79SK_77eM5fWeog==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:47 GMT
age: 30279
etag: "3e9004d90ed72f3034eae5cddd476eb50ac63ea6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A04d08c03-cee2-4f89-8bb4-c319b9be52cf%2FParadisus-Gran-Canaria_1-SQUARE_800X800.jpg&v=3&w=800&s=ZzegjABv24KzmhXXOgjHwHL6&b=400
200 OK 20 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A04d08c03-cee2-4f89-8bb4-c319b9be52cf%2FParadisus-Gran-Canaria_1-SQUARE_800X800.jpg&v=3&w=800&s=ZzegjABv24KzmhXXOgjHwHL6&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6f7863e88f43aa96bc60769aed70eb75
aeca7c00e1347dd2f26280adefe03c0aa03d0654
33813d7d8b1f1b6c7d5b5074a772f0b708187972055199628091b437026cb494
GET /img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A04d08c03-cee2-4f89-8bb4-c319b9be52cf%2FParadisus-Gran-Canaria_1-SQUARE_800X800.jpg&v=3&w=800&s=ZzegjABv24KzmhXXOgjHwHL6&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=8471
expires: Sat, 26 Nov 2022 09:03:38 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 20366
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/93075/221121/ae2dfafcb7cb4137bee9958c3203388b_cpn_300x600_2.jpg
200 OK 42 kB URL HTTP/2 static.criteo.net/design/dt/93075/221121/ae2dfafcb7cb4137bee9958c3203388b_cpn_300x600_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x600, components 3\012- data
Hash d4ea9d964d4b6010249f4f3794e50ac4
b3db15cc13c9189e9ec51640c675bc5e38d7f435
ed36b9a4b932a01bf484612cdb8a6756dbd28ebd28153ade9e1c097902285aa8
GET /design/dt/93075/221121/ae2dfafcb7cb4137bee9958c3203388b_cpn_300x600_2.jpg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/jpeg
content-length: 41801
last-modified: Mon, 21 Nov 2022 15:51:36 GMT
etag: "637b9e88-a349"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f470fab0957e148a9c58dfeedc72463
2f88534696701cfdaf7e2aa78f6d4b8766a2b77f
c2c5617f8fbf3860578a9bcf821dea13e3225ccd02774f29f4bf022e4abd9ff9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b25450-4da4-45fe-97c4-620a26a2ac8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11186
x-amzn-requestid: 67dbfbd2-ba7f-4540-8d2c-5c2c4de21cae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUf7HGdIAMFhow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813465-36b0d8fc4bdb5faf328bd99d;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:21 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: vFbudY9zvK4DwTVXff4-nDPTFtYqktJb4n9wrLx4zL4nsz_bc6U4qA==
via: 1.1 7b00c3fd9220034414107b03e53b1b8e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:03:28 GMT
age: 31139
etag: "2f88534696701cfdaf7e2aa78f6d4b8766a2b77f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=104&m=0&partner=93075&q=80&r=0&u=http%3A%2F%2Fstatic.nl.eu.criteo.net%2Fdesign%2Fdt%2F5031%2F190729%2Fa21d783007334b99b7401f1425c637a2_horizontal_gray.png&v=3&w=596&s=QAVa0A0pD8hxbQtkBNT2maZF
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=104&m=0&partner=93075&q=80&r=0&u=http%3A%2F%2Fstatic.nl.eu.criteo.net%2Fdesign%2Fdt%2F5031%2F190729%2Fa21d783007334b99b7401f1425c637a2_horizontal_gray.png&v=3&w=596&s=QAVa0A0pD8hxbQtkBNT2maZF
IP
File type PNG image data, 415 x 104, 8-bit/color RGBA, non-interlaced\012- data
Hash e9b0fd59da29f2602796f49b90db422f
ea6484f5cf21f1bb301e9c98b1fd22f22f786bee
4ebe73165f0a173af9aaf37d37dd09ceee42cc06dadad2d10c564e3c39558128
GET /img/img?h=104&m=0&partner=93075&q=80&r=0&u=http%3A%2F%2Fstatic.nl.eu.criteo.net%2Fdesign%2Fdt%2F5031%2F190729%2Fa21d783007334b99b7401f1425c637a2_horizontal_gray.png&v=3&w=596&s=QAVa0A0pD8hxbQtkBNT2maZF HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30993649
expires: Mon, 20 Nov 2023 00:03:16 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 14495
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/criteo_logo_2021.svg
200 OK 5.3 kB URL HTTP/2 static.criteo.net/flash/icon/criteo_logo_2021.svg
IP
Hash e4d56e50146fb8c6464b4f2479a4e34a
9b787f670b0a6332caa5c80b874d600bd94ff927
5a40d9c9016831e5444b0a528301f756c09ad47104162d34b02d9b38f795bda7
GET /flash/icon/criteo_logo_2021.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/svg+xml
last-modified: Thu, 27 May 2021 13:21:59 GMT
etag: W/"60af9cf7-891"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2376b742-f268-43b1-9844-b9ba7c8ef2ae%2FInnside_Calvia_Beach_1SQUARE_800X800.jpg&v=3&w=800&s=eC3EzQnG36XxwkCXbyOkeCmg&b=400
200 OK 27 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2376b742-f268-43b1-9844-b9ba7c8ef2ae%2FInnside_Calvia_Beach_1SQUARE_800X800.jpg&v=3&w=800&s=eC3EzQnG36XxwkCXbyOkeCmg&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 53f5099e2a92dbc1ae2997c1d31b3977
7f55a5a511f5e9a72870c4b72a554340281f6e15
c87cf607dd7cbaafbc89e0e4c6d3c02675bd8784ae8a89a99bfa1b5e2027fc4e
GET /img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2376b742-f268-43b1-9844-b9ba7c8ef2ae%2FInnside_Calvia_Beach_1SQUARE_800X800.jpg&v=3&w=800&s=eC3EzQnG36XxwkCXbyOkeCmg&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=42168
expires: Sat, 26 Nov 2022 18:25:15 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 26722
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5088223f5973e3cd56f03f50a1e84b79
0b6c9b51d10762a4747286ab5b1c2354fa39c622
8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: whO__FB0B2ywDP_p63eQ044RXbT207sX1i87I6nPAFUB85nSYc0Cuw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 32181
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400%7CMontserrat:400,700&subset=latin,cyrillic,latin-ext,cyrillic-ext,vietnamese,greek-ext,greek,latin,cyrillic,latin-ext,cyrillic-ext,vietnamese,greek-ext,greek
200 OK 568 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400%7CMontserrat:400,700&subset=latin,cyrillic,latin-ext,cyrillic-ext,vietnamese,greek-ext,greek,latin,cyrillic,latin-ext,cyrillic-ext,vietnamese,greek-ext,greek
IP
Hash 45429d5d9fd7b00e3704563dafda66bb
3c3586455eac40a95188b937377b2d88e391df5e
9066f39859ccc839ca1224e26aa4e7dde5877012497a27d1d495f19960eca2a2
GET /css?family=Lato:400%7CMontserrat:400,700&subset=latin,cyrillic,latin-ext,cyrillic-ext,vietnamese,greek-ext,greek,latin,cyrillic,latin-ext,cyrillic-ext,vietnamese,greek-ext,greek HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 06:42:26 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=Y4G1UQAOb88Kso9KAAxl0r9cgYiXraAHXlaQTw&u=%7CT0YicBfSAjaAFmiIlAa19v3w%2FKDUWFg%2F4sAA6jwsrpU%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_ArHr9DlvVwUA0Lh10Pk2WlfeyBMX_as4AVFYMbMe0Cm1aUAeLqHS1XYo_N4ow7Uxjo7-iE2opnbflTdSBn16wsizN7f08h2ZhBDntIpr2HHi_n48R6TKfKJEgKExV66O0dg9-0TUn80IjIZB9ROcu_H-rESBEpI6WlwrvHiEQcvnvlDuPkYYZkA5yDBsXvNBl7ZMNrnSaF0Jt6kgWgPRcybwOlgwTJw1wS4ZEePLdQ38f0BH-xdXBMW96DyV0cVtid44tl9-fJLGs9tx6a1Kgx7s5uYLWeaBz9RxtEt_cA4b3JHst2EDhvZelzeS68rXwhM7Caw_ANraI8lf1U7Y6Amk-DJE-hkEMv1QzvSPYfmLpe9V4fz5ntFqObJNhTSsBFbIspT2Fjog8gvxstQ6m0-h1Uhzhu_UssON6WuVd9Vnter42TJMUIhvN2paSWJsNAGNn9MfFA2m6DFucs4OIAGKkSi39Gfb_RvpP5P1QFUomLQAtkEXCPSs6BxVtvTV4WRMjPlGpjdcKiTj3a-xL7nZ_fDlskAJrqqDSaeHn9zK9D4tmM_PS7Q&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCx5pLUbWBY8_fOcqeygXSy7H4Ccme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItNzE2ODIxNDAyOTM3MDQyNcgBCakC_V3iep9wsT6oAwGqBK8CT9CfngPuEl-p-q2-MRuWV7qZhraDLQYsZ5BxoK2FheCzWeu_obC3gfuIO-IlTdgJ_84ej16WdZYE9vC6m2RSQlZDfCq_fffuD8ugokJfZnq4KmiCRG6tMKcV4WH1q5YmI1zwbGBlBDyewTOXsO55lPGge0pdzMQR_zKCjhRk3goBAxmsaG4JAQZw9MURciFB8vi5Bkn5KgU4O-BCGxH4ql5heSxFRRHBCST8GBdybs9afy_nmZbQ2l-mh7s3ePOWYWktBy2nE9v5kDYEnJl6Yz9zHldyRPvyu0GvxHRvysWQi0WkMdzyZEayefuGL8Q1nfQm8WSo8ZhUPDv9F_wYnzFoWs2AnNoi4XY4H5HP3dfvn2OXhwVjjYGIS5sRFJWZ3QBz_USxF4og6p7AeNxfgAaGzeGK4c_KjtABoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIDwiA4YBwEAEyAusCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3rpFM1XXXEoZ42AqzqA9kCqZyg7g%26client%3Dca-pub-7168214029370425%26adurl%3D
200 OK 56 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Y4G1UQAOb88Kso9KAAxl0r9cgYiXraAHXlaQTw&u=%7CT0YicBfSAjaAFmiIlAa19v3w%2FKDUWFg%2F4sAA6jwsrpU%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_ArHr9DlvVwUA0Lh10Pk2WlfeyBMX_as4AVFYMbMe0Cm1aUAeLqHS1XYo_N4ow7Uxjo7-iE2opnbflTdSBn16wsizN7f08h2ZhBDntIpr2HHi_n48R6TKfKJEgKExV66O0dg9-0TUn80IjIZB9ROcu_H-rESBEpI6WlwrvHiEQcvnvlDuPkYYZkA5yDBsXvNBl7ZMNrnSaF0Jt6kgWgPRcybwOlgwTJw1wS4ZEePLdQ38f0BH-xdXBMW96DyV0cVtid44tl9-fJLGs9tx6a1Kgx7s5uYLWeaBz9RxtEt_cA4b3JHst2EDhvZelzeS68rXwhM7Caw_ANraI8lf1U7Y6Amk-DJE-hkEMv1QzvSPYfmLpe9V4fz5ntFqObJNhTSsBFbIspT2Fjog8gvxstQ6m0-h1Uhzhu_UssON6WuVd9Vnter42TJMUIhvN2paSWJsNAGNn9MfFA2m6DFucs4OIAGKkSi39Gfb_RvpP5P1QFUomLQAtkEXCPSs6BxVtvTV4WRMjPlGpjdcKiTj3a-xL7nZ_fDlskAJrqqDSaeHn9zK9D4tmM_PS7Q&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCx5pLUbWBY8_fOcqeygXSy7H4Ccme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItNzE2ODIxNDAyOTM3MDQyNcgBCakC_V3iep9wsT6oAwGqBK8CT9CfngPuEl-p-q2-MRuWV7qZhraDLQYsZ5BxoK2FheCzWeu_obC3gfuIO-IlTdgJ_84ej16WdZYE9vC6m2RSQlZDfCq_fffuD8ugokJfZnq4KmiCRG6tMKcV4WH1q5YmI1zwbGBlBDyewTOXsO55lPGge0pdzMQR_zKCjhRk3goBAxmsaG4JAQZw9MURciFB8vi5Bkn5KgU4O-BCGxH4ql5heSxFRRHBCST8GBdybs9afy_nmZbQ2l-mh7s3ePOWYWktBy2nE9v5kDYEnJl6Yz9zHldyRPvyu0GvxHRvysWQi0WkMdzyZEayefuGL8Q1nfQm8WSo8ZhUPDv9F_wYnzFoWs2AnNoi4XY4H5HP3dfvn2OXhwVjjYGIS5sRFJWZ3QBz_USxF4og6p7AeNxfgAaGzeGK4c_KjtABoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIDwiA4YBwEAEyAusCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3rpFM1XXXEoZ42AqzqA9kCqZyg7g%26client%3Dca-pub-7168214029370425%26adurl%3D
IP
Hash fabc260710b4b15dba8d99eb34875858
8e7e720d9e3a59ee7219a3c15b8b302ef276c705
9970b2f2ba6a7d914951f4d98044d153743ee2a0eb556d97dc4765e3c67584f9
GET /delivery/r/afr.php?z=Y4G1UQAOb88Kso9KAAxl0r9cgYiXraAHXlaQTw&u=%7CT0YicBfSAjaAFmiIlAa19v3w%2FKDUWFg%2F4sAA6jwsrpU%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_ArHr9DlvVwUA0Lh10Pk2WlfeyBMX_as4AVFYMbMe0Cm1aUAeLqHS1XYo_N4ow7Uxjo7-iE2opnbflTdSBn16wsizN7f08h2ZhBDntIpr2HHi_n48R6TKfKJEgKExV66O0dg9-0TUn80IjIZB9ROcu_H-rESBEpI6WlwrvHiEQcvnvlDuPkYYZkA5yDBsXvNBl7ZMNrnSaF0Jt6kgWgPRcybwOlgwTJw1wS4ZEePLdQ38f0BH-xdXBMW96DyV0cVtid44tl9-fJLGs9tx6a1Kgx7s5uYLWeaBz9RxtEt_cA4b3JHst2EDhvZelzeS68rXwhM7Caw_ANraI8lf1U7Y6Amk-DJE-hkEMv1QzvSPYfmLpe9V4fz5ntFqObJNhTSsBFbIspT2Fjog8gvxstQ6m0-h1Uhzhu_UssON6WuVd9Vnter42TJMUIhvN2paSWJsNAGNn9MfFA2m6DFucs4OIAGKkSi39Gfb_RvpP5P1QFUomLQAtkEXCPSs6BxVtvTV4WRMjPlGpjdcKiTj3a-xL7nZ_fDlskAJrqqDSaeHn9zK9D4tmM_PS7Q&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCx5pLUbWBY8_fOcqeygXSy7H4Ccme0rFc1Z2R93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItNzE2ODIxNDAyOTM3MDQyNcgBCakC_V3iep9wsT6oAwGqBK8CT9CfngPuEl-p-q2-MRuWV7qZhraDLQYsZ5BxoK2FheCzWeu_obC3gfuIO-IlTdgJ_84ej16WdZYE9vC6m2RSQlZDfCq_fffuD8ugokJfZnq4KmiCRG6tMKcV4WH1q5YmI1zwbGBlBDyewTOXsO55lPGge0pdzMQR_zKCjhRk3goBAxmsaG4JAQZw9MURciFB8vi5Bkn5KgU4O-BCGxH4ql5heSxFRRHBCST8GBdybs9afy_nmZbQ2l-mh7s3ePOWYWktBy2nE9v5kDYEnJl6Yz9zHldyRPvyu0GvxHRvysWQi0WkMdzyZEayefuGL8Q1nfQm8WSo8ZhUPDv9F_wYnzFoWs2AnNoi4XY4H5HP3dfvn2OXhwVjjYGIS5sRFJWZ3QBz_USxF4og6p7AeNxfgAaGzeGK4c_KjtABoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHANIIDwiA4YBwEAEyAusCOgKAQPoLAggBgAwB0BUBgBcB%26num%3D1%26sig%3DAOD64_3rpFM1XXXEoZ42AqzqA9kCqZyg7g%26client%3Dca-pub-7168214029370425%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:25 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 55731481
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3Abd13271e-ae26-449f-8e1c-10cec2ab78e1%2FSOL_Arona_Tenerife_1SQUARE_800X800.jpg&v=3&w=800&s=ItS5aLbXhn1V8aXgQ3RtRBzS&b=400
200 OK 43 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3Abd13271e-ae26-449f-8e1c-10cec2ab78e1%2FSOL_Arona_Tenerife_1SQUARE_800X800.jpg&v=3&w=800&s=ItS5aLbXhn1V8aXgQ3RtRBzS&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ccfee84049e617e3b6ca9660568800a5
4ebce0bac7a28ea7dda484b91024b762fcec570c
2bf34f48c5f959f54e292b9fbca320061733f1b50b5fcb6b83c849605f47a4fb
GET /img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3Abd13271e-ae26-449f-8e1c-10cec2ab78e1%2FSOL_Arona_Tenerife_1SQUARE_800X800.jpg&v=3&w=800&s=ItS5aLbXhn1V8aXgQ3RtRBzS&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=8098
expires: Sat, 26 Nov 2022 08:57:25 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 43190
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: utbUF-6Z7rMqPNdRKHJyI-IZoyTy6HpkNBY-60xcZ-6NDXBz1XN6-Q==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:40 GMT
age: 32027
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cat.nl.eu.criteo.com/delivery/lg.php?cppv=3&cpp=fovQV_nTBSVdD-mFds6_mLz8BV88M9boYT6EoYBSgg43sluaFVK9R29pJRPgOcjIRXPHeuiSfJggGFT6JQRairDQ43ljPtSPJLBBOEekfOWLWNlP9fMTzx5Km9PyHDXIUNi6tGPEvssfDWfgUqMGAo0JiI51fgqbmDaNT1t7OdtkiR_RZOsKAHFSUKbar5i45Ebpyfd8ejwa__rWzSVN66PdzD5YBFve3cMQ9IILTpizokPu-MBjMbXzE8U_1Eo4JF298dsETkQxQ681bnCRjL6yz3U2xOhyb6CoEu5toMm_yt8zStEnfnMrIxFbPJAqYmjxtBGyMGBYegTxaMVrlsuqNGNVqr6j5FPs1-S7B4dfc74VVR-pLKeypkb3ahzFX0l2uKEC-R1Eno5JmgjX3tX3qFHiws57bsMUfZVkVSPYLXmm
200 OK 11 kB URL HTTP/2 cat.nl.eu.criteo.com/delivery/lg.php?cppv=3&cpp=fovQV_nTBSVdD-mFds6_mLz8BV88M9boYT6EoYBSgg43sluaFVK9R29pJRPgOcjIRXPHeuiSfJggGFT6JQRairDQ43ljPtSPJLBBOEekfOWLWNlP9fMTzx5Km9PyHDXIUNi6tGPEvssfDWfgUqMGAo0JiI51fgqbmDaNT1t7OdtkiR_RZOsKAHFSUKbar5i45Ebpyfd8ejwa__rWzSVN66PdzD5YBFve3cMQ9IILTpizokPu-MBjMbXzE8U_1Eo4JF298dsETkQxQ681bnCRjL6yz3U2xOhyb6CoEu5toMm_yt8zStEnfnMrIxFbPJAqYmjxtBGyMGBYegTxaMVrlsuqNGNVqr6j5FPs1-S7B4dfc74VVR-pLKeypkb3ahzFX0l2uKEC-R1Eno5JmgjX3tX3qFHiws57bsMUfZVkVSPYLXmm
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 0d5d6d58960df9be018c171e6e206359
30f04263b5df8c0beb83257b4e83b46da749953e
0b7ac1d6a63ebea093eed5141fb7812de7fec246fc79cb2228ec0bdee2ba349a
GET /delivery/lg.php?cppv=3&cpp=fovQV_nTBSVdD-mFds6_mLz8BV88M9boYT6EoYBSgg43sluaFVK9R29pJRPgOcjIRXPHeuiSfJggGFT6JQRairDQ43ljPtSPJLBBOEekfOWLWNlP9fMTzx5Km9PyHDXIUNi6tGPEvssfDWfgUqMGAo0JiI51fgqbmDaNT1t7OdtkiR_RZOsKAHFSUKbar5i45Ebpyfd8ejwa__rWzSVN66PdzD5YBFve3cMQ9IILTpizokPu-MBjMbXzE8U_1Eo4JF298dsETkQxQ681bnCRjL6yz3U2xOhyb6CoEu5toMm_yt8zStEnfnMrIxFbPJAqYmjxtBGyMGBYegTxaMVrlsuqNGNVqr6j5FPs1-S7B4dfc74VVR-pLKeypkb3ahzFX0l2uKEC-R1Eno5JmgjX3tX3qFHiws57bsMUfZVkVSPYLXmm HTTP/1.1
Host: cat.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 2994808
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3Acc02e550-3ad1-4a83-9723-a63ab5f22aa9%2FGran_Melia_de_Mar_1SQUARE_800X800.jpg&v=3&w=800&s=dJ8lqJ537lVJvbJD2hqRR-hq&b=400
200 OK 43 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3Acc02e550-3ad1-4a83-9723-a63ab5f22aa9%2FGran_Melia_de_Mar_1SQUARE_800X800.jpg&v=3&w=800&s=dJ8lqJ537lVJvbJD2hqRR-hq&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 088c5f52dac37f43999e5c2a4b007462
2a3f7502896de9a26291e91a38676602e27ef59e
e88e85976f8ab93f44e2cb44795c73ab60635e6d055d4481b52000d0f6f48d70
GET /img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3Acc02e550-3ad1-4a83-9723-a63ab5f22aa9%2FGran_Melia_de_Mar_1SQUARE_800X800.jpg&v=3&w=800&s=dJ8lqJ537lVJvbJD2hqRR-hq&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=15225
expires: Sat, 26 Nov 2022 10:56:12 GMT
date: Sat, 26 Nov 2022 06:42:27 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 42914
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2e538340-8f62-4696-b192-d93d0b141bbe%2FGran_Melia_Don_Pepe_1SQUARE_800X800.jpg&v=3&w=800&s=l2C79wQkHfudqkn0iK96ENUV&b=400
200 OK 52 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2e538340-8f62-4696-b192-d93d0b141bbe%2FGran_Melia_Don_Pepe_1SQUARE_800X800.jpg&v=3&w=800&s=l2C79wQkHfudqkn0iK96ENUV&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd2069fc198d06ddfd66b2152aed655f
5efc111d041ea9fe90cc6aff8bfe7ac27edfd24d
eb55b313bfc2fdb7aaf625e93ee1068a9f766442bbc18a5bdb7350239d69f556
GET /img/img?c=3&cq=256&h=800&m=0&partner=93075&q=80&r=2&u=https%3A%2F%2Fads1.melia.com%2Fdam%2Fjcr%3A2e538340-8f62-4696-b192-d93d0b141bbe%2FGran_Melia_Don_Pepe_1SQUARE_800X800.jpg&v=3&w=800&s=l2C79wQkHfudqkn0iK96ENUV&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=6132
expires: Sat, 26 Nov 2022 08:24:39 GMT
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 51954
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 307926
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:18 GMT
expires: Fri, 24 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 136929
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a1.adform.net/adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b55163088672555a8887d0283d4c
302 Found 497 B URL HTTP/2 a1.adform.net/adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b55163088672555a8887d0283d4c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (425), with CRLF line terminators
Hash a196368d1067cb42424b88433331ca97
42f78a8dc2e39de27e928976162e048046d073bf
b6df2c20abfb0d50c234e71ef513b451d975f10a561c7253682e96f643e9d64e
GET /adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b55163088672555a8887d0283d4c HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: text/html; charset=utf-8
location: https://mm.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=48939&adfrmid=0
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mm.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0
302 Found 0 B URL HTTP/1.1 mm.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0
IP
ASN #50234 Eulerian Technologies S.a.s.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0 HTTP/1.1
Host: mm.melia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.eu.criteo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sat, 26 Nov 2022 06:42:27 GMT
Server: EWS
Accept-Ranges: none
Content-Length: 0
Connection: Close
Pragma: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Cache-Control: max-age=0, private
Strict-Transport-Security: max-age=604800
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
X-XSS-Protection: 0
Location: https://mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0
mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=28980&adfrmid=0
200 OK 43 B URL HTTP/1.1 mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=28980&adfrmid=0
IP
ASN #50234 Eulerian Technologies S.a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 718e8bd317b47c1018a861f423615c1c
874d28c9586324d5d16558065197cea533f10b67
11e3a37194c2691ff2eb5c2237cb14a9269c30e844dc48047f9324391477f11f
GET /dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=28980&adfrmid=0 HTTP/1.1
Host: mml1.melia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.eu.criteo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:27 GMT
Server: EWS
Accept-Ranges: none
Content-Length: 43
Connection: Close
Pragma: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Cache-Control: max-age=0, private
Strict-Transport-Security: max-age=604800
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
X-XSS-Protection: 0
Content-Type: image/gif
Set-Cookie: etuix=MhvrVAaZoKrepYwA2zD2RAtVRbJcqy9d7wh8Wsq7KGdte7EJv8ntOQ--; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
et0=5TIgl3PbU.H4WlNkibN10bwD.YFGWjgGoWcc0p8AEyTLXTv3OMJBtrSd7LUvG3yDMCpjusVB3rGKMXUf7y3X7Q01slqNr4MU8p_fkqYMX1LDEfKDtWhz6tzybCbfaoSEKds-; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
et=1; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=48939&adfrmid=0
200 OK 43 B URL HTTP/1.1 mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=48939&adfrmid=0
IP
ASN #50234 Eulerian Technologies S.a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 718e8bd317b47c1018a861f423615c1c
874d28c9586324d5d16558065197cea533f10b67
11e3a37194c2691ff2eb5c2237cb14a9269c30e844dc48047f9324391477f11f
GET /dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=48939&adfrmid=0 HTTP/1.1
Host: mml1.melia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.eu.criteo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:27 GMT
Server: EWS
Accept-Ranges: none
Content-Length: 43
Connection: Close
Pragma: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Cache-Control: max-age=0, private
Strict-Transport-Security: max-age=604800
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
X-XSS-Protection: 0
Content-Type: image/gif
Set-Cookie: etuix=hqTU3cuz2Mm3rfF6dSKwYOGmHCKkofq.UNdgmNRSbXzG_hd_RcWVqw--; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
et0=KARYnnF_Rw6jkbfeWpSPFVH_jNBXNczwhxa3ry1itNGAM9JIcpLEyy35BTvlVXKZFWMliQlcwfCI5I_D7NomzLQew9ZX3ez8Ze4goOlljPpN2oKzy8oUP.P2JT4VtQDgqPs-; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
et=1; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
csm.eu.criteo.net/all?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA&sds=2&rev=83599&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA&sds=2&rev=83599&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA&sds=2&rev=83599&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0
200 OK 43 B URL HTTP/1.1 mml1.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0
IP
ASN #50234 Eulerian Technologies S.a.s.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 718e8bd317b47c1018a861f423615c1c
874d28c9586324d5d16558065197cea533f10b67
11e3a37194c2691ff2eb5c2237cb14a9269c30e844dc48047f9324391477f11f
GET /dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0 HTTP/1.1
Host: mml1.melia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ads.eu.criteo.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:27 GMT
Server: EWS
Accept-Ranges: none
Content-Length: 43
Connection: Close
Pragma: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Cache-Control: max-age=0, private
Strict-Transport-Security: max-age=604800
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex
X-XSS-Protection: 0
Content-Type: image/gif
Set-Cookie: etuix=rFiLUOsQnzY8x6b4pH8bReIn36Hq92eAAzUqfkTcUzoPzpFgN4Z.cw--; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
et0=v2IQ..1UDNiT5QpUcPs3GxKTN.7nGDF_mHYW4UbiEUeJr3y9NkAgiiHNtUET4NbBL9tZsg1bTx6O4vOdTpagw2J626J15tRXFZZ.biaxPWbJPBp3.EHdYYj8gcEifMJPkbo-; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
et=1; expires=Sun, 24 Dec 2023 06:42:27 GMT; domain=.melia.com; path=/; SameSite=None; secure; HttpOnly
csm.eu.criteo.net/all?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw&sds=2&rev=83599&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw&sds=2&rev=83599&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw&sds=2&rev=83599&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:26 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
sayac.onlinewebstats.com/logo/s.gif
200 OK 1.1 kB URL HTTP/1.1 sayac.onlinewebstats.com/logo/s.gif
IP
ASN #20649 FS Veri Merkezi Internet Teknolojileri Limited Sirketi
File type GIF image data, version 89a, 90 x 30\012- data
Hash 86b20fb84a3c460bb5b6f28e1fc58a8f
be37c58c27b312e1b8445d446d5e9008843fc8d0
16c7fd0e2962fbb0f79e261c14b3e89f71af00413c77ce6c284c2aabdad557f3
GET /logo/s.gif HTTP/1.1
Host: sayac.onlinewebstats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 06:42:27 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Thu, 17 Aug 2006 22:15:44 GMT
ETag: "4a6-41b3dfc23c400-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1127
Connection: close
Content-Type: image/gif
csm.eu.criteo.net/all?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg&sds=2&rev=83599&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg&sds=2&rev=83599&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg&sds=2&rev=83599&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:27 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&puid=1~laxkf11i&e=21068133&ctx=2&gqid=UbWBY42XOZOYiQaZip_ACw&qqid=CI_M5oefy_sCFUqPsgod0mUMnw&met.4=fb.71~lb.85~ol.16e~bdt.-wn~bpp.-fd~idt.-4q~dtd.-1~dt.-fl&met.3=733.d9~742.d9~748.fc~739.il_1~749.15o_p~738.16e~736.16j~735.16q_4~113.17p_8~112.17o_9&met.1=1.laxkeztt~6.1~7.1~8.1~9.1~10.1~11.1~12.3~13.5a~14.5a~15.68~16.ig~17.ik~18.il~19.16c~20.16c~21.16d~23.a7&met.7=CB4QChgBIPsBKPsBMIkCOA5o-wFwhgKAAdQJiAGBFbABAbgBAQ~CBwQChgBIPwBKPwBMI0COBFo_AFwiAKAAaI6iAH4jAGwAQG4AQE~CCoQChgBIPwBKPwBMNICOFY~CCEQBhgBIIMCKIMCMK8COCxomgJwrwJ4iAWwAQG4AQM~CBsQBiCEAjiaBA~CBsQBSCFAjjHAw~CCgQChgBIPgLKPgLMIoMOBJo_gtwiQx44bwBgAG9tgGIAefuA7ABAbgBAw~CAUQCBgBKAEwvgE49gtoA3C-AXjcVoABpFCIAeu9AbABAbgBAw
204 No Content 0 B URL HTTP/2 csi.gstatic.com/csi?v=2&s=pagead&action=csi_pagead&puid=1~laxkf11i&e=21068133&ctx=2&gqid=UbWBY42XOZOYiQaZip_ACw&qqid=CI_M5oefy_sCFUqPsgod0mUMnw&met.4=fb.71~lb.85~ol.16e~bdt.-wn~bpp.-fd~idt.-4q~dtd.-1~dt.-fl&met.3=733.d9~742.d9~748.fc~739.il_1~749.15o_p~738.16e~736.16j~735.16q_4~113.17p_8~112.17o_9&met.1=1.laxkeztt~6.1~7.1~8.1~9.1~10.1~11.1~12.3~13.5a~14.5a~15.68~16.ig~17.ik~18.il~19.16c~20.16c~21.16d~23.a7&met.7=CB4QChgBIPsBKPsBMIkCOA5o-wFwhgKAAdQJiAGBFbABAbgBAQ~CBwQChgBIPwBKPwBMI0COBFo_AFwiAKAAaI6iAH4jAGwAQG4AQE~CCoQChgBIPwBKPwBMNICOFY~CCEQBhgBIIMCKIMCMK8COCxomgJwrwJ4iAWwAQG4AQM~CBsQBiCEAjiaBA~CBsQBSCFAjjHAw~CCgQChgBIPgLKPgLMIoMOBJo_gtwiQx44bwBgAG9tgGIAefuA7ABAbgBAw~CAUQCBgBKAEwvgE49gtoA3C-AXjcVoABpFCIAeu9AbABAbgBAw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csi?v=2&s=pagead&action=csi_pagead&puid=1~laxkf11i&e=21068133&ctx=2&gqid=UbWBY42XOZOYiQaZip_ACw&qqid=CI_M5oefy_sCFUqPsgod0mUMnw&met.4=fb.71~lb.85~ol.16e~bdt.-wn~bpp.-fd~idt.-4q~dtd.-1~dt.-fl&met.3=733.d9~742.d9~748.fc~739.il_1~749.15o_p~738.16e~736.16j~735.16q_4~113.17p_8~112.17o_9&met.1=1.laxkeztt~6.1~7.1~8.1~9.1~10.1~11.1~12.3~13.5a~14.5a~15.68~16.ig~17.ik~18.il~19.16c~20.16c~21.16d~23.a7&met.7=CB4QChgBIPsBKPsBMIkCOA5o-wFwhgKAAdQJiAGBFbABAbgBAQ~CBwQChgBIPwBKPwBMI0COBFo_AFwiAKAAaI6iAH4jAGwAQG4AQE~CCoQChgBIPwBKPwBMNICOFY~CCEQBhgBIIMCKIMCMK8COCxomgJwrwJ4iAWwAQG4AQM~CBsQBiCEAjiaBA~CBsQBSCFAjjHAw~CCgQChgBIPgLKPgLMIoMOBJo_gtwiQx44bwBgAG9tgGIAefuA7ABAbgBAw~CAUQCBgBKAEwvgE49gtoA3C-AXjcVoABpFCIAeu9AbABAbgBAw HTTP/1.1
Host: csi.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: *
date: Sat, 26 Nov 2022 06:42:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Wed, 21 Jan 2004 19:51:30 GMT
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA&sds=2&rev=83599&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA&sds=2&rev=83599&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=xYoL9GlW1U2sCQ0GntfmPlkZbHbGcLnvHEgCdPJfcEAi6BU-f367rPDTusCcHupz1lNjKzcEG7YijP3AiE_ta9EAAGgBU_fKsRF__hDvA7infAjmVkpiBqowEhTfyl9gHpT7SteqbiubvpKKp3uWPzBWKC0qnTlyrNuqluxc6RuIKhAcDhcvIEnMJQYB6UOrFA0S8SAJ5CQYxuU2mUIEs9CJA-urdvlAbDqTE5Sb41sY2108dlrwxMtLsQiolIfd2fzhSA&sds=2&rev=83599&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:27 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg&sds=2&rev=83599&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg&sds=2&rev=83599&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg&sds=2&rev=83599&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:27 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw&sds=2&rev=83599&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw&sds=2&rev=83599&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=R4dxHWlW1U2sCQ0GnADSI2dU-OazenccnnFAvbflKnMNZoQygOq738NCVsx7DqtjtLxHrhVLJSbMW1UAcsvvtSYkyrIliCHC2__qiml8afsSZiZZcrxGCuEoGCAVY3g9hCY_ZconHgCR2UMbMEsiDW_8njGEZYV5lZ-rJXS7Pa0P2fbGReKdJazEyb25MFBbviv676vm3iRP3CRLJgHr9Jg4mMUWX45CH1G41Bh5xqNZhv-fpjj2SAWyBr72c_8blFP7Tw&sds=2&rev=83599&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:28 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=bookworm-bilgeadam.blogspot.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 26 Nov 2022 06:42:31 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30f833b25d6e5af2229d9584c6f6cf97
ee79c3fa994d53c1d0687ca61353d63cce459e25
1bc091991c4663dbc86ae735e47ddc3e887a24661050ad9f24b8d458bfd11a6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 06:42:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 513 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash a2490ff72a871f733cc026692d310a23
484108516bfba063ca1ad68482b9b20540e858e4
943ef01474b61bc525e9e99b51efa477b3e8ce524553a1ccba21e3bf79c94d71
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bookworm-bilgeadam.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 26 Nov 2022 06:42:31 GMT
date: Sat, 26 Nov 2022 06:42:31 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-QsX6NhmM6T5VunzFOapu-Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 513
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
a1.adform.net/adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b55162aabde0de847863cde685db
302 Found 0 B URL HTTP/2 a1.adform.net/adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b55162aabde0de847863cde685db
IP
GET /adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b55162aabde0de847863cde685db HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: text/html; charset=utf-8
location: https://mm.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=1469&adfrmid=0
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy_small.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy_small.svg
IP
GET /flash/icon/privacy_small.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:30:28 GMT
etag: W/"5e42ba84-6aa"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/adchoices_en.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/adchoices_en.svg
IP
GET /flash/icon/adchoices_en.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:27:58 GMT
etag: W/"5e42b9ee-759"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
a1.adform.net/adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b5523e58d1619fec517ea4bb3a59
302 Found 0 B URL HTTP/2 a1.adform.net/adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b5523e58d1619fec517ea4bb3a59
IP
GET /adfserve/?bn=54989417;1x1inv=1;srctype=3;gdpr=1;;ord=6381b5523e58d1619fec517ea4bb3a59 HTTP/1.1
Host: a1.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: text/html; charset=utf-8
location: https://mm.melia.com/dynview/melia-com/1x1.b?ead-publisher=criteo&ead-name=3_EMEA_PT_C_OthersEMEA_p-criteo&ead-location=display_Prospecting_OthersEMEA-0x0_en&ead-creative=OthersEMEA-criteo-OE_AO_PRS_VACACIONAL_AFT-0x0_en&ead-creativetype=0x0_en&eseg-name=campaign&eseg-item=vacacional&ead-mediaplan=OthersEMEA-Prospecting&ea-rnd=28980&adfrmid=0
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=Y4G1UQAOMj0KssYYAA08hhEfikgpOVPRPAO3ng&u=%7CT0YicBfSAjY2y6o0bc0I0zc4SWgEMBFyQQiDjeadQ%2BM%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_AM8iEE4GHx4XAZ8-c9e5LlJfMjehYPJbM0j2hknANCpMoZ3wmmJmKy3QrFlb0xFKqvXKPjeNIXC8ee68GfkbWasmUsIgvzGpm3A_vQhuIxoGHqrn0D0Ly74wozJaBVQabQ-RsWXloE5eSfj-FTj1Y0ubcnjYkG5WpvCwzdC90YWIHaC9M5-NmIosu6Rf3E6mDC6enHRkDrMq9CCWIqkOqrVGfYpWeJV3ODxsYyKY7a8JXdDOOF0J-8ZJ-EFtQ6DyAApB82hmpLox87_U2mzZoMUIAQiRcFIzva8y6nbHoNln9cTHZRJu68u3UaCKQ2UwTCv5mmPmAvBwwYXPuaDKIVyDXUk9PofFjOTFzPL_rK54ZQHfIrlz8cH1r89M4CA92n3sYM8Md8ZKK3LVQxqxsuFUQa_gScjao9jIxJFwjnhHMDWHTtkOkr0fI4yu-WWKd-iHMKqBES-VjaVciH4vZE2lszto6rigReNl5LdJspEkEa2Pv__OpMlMObBOkKVK21CrgYIIN-LSrdy8AojKm6B88XEUbHHEDBHW7_D2O5-7fdUCYTZflxQ&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DChYrcUbWBY73kOJiMywWG-bSoBsme0rFc9ZHevrEBwI23ARABIABgw4SAgJgYggEXY2EtcHViLTcxNjgyMTQwMjkzNzA0MjXIAQmpAv1d4nqfcLE-qAMBqgSpAk_Qjgdxu7mYdVjyA3hurr86lag7RGO0tltMl7ihKAqTOXcZufTyqjPSaUNA2IIbXUL_Djydq8NG4vzu66OHvchYW57xypnYgH10AXDCvpRaNT_bMVZIRPhVG8moFGQeUlCkXnIAZT5xOQvMbffYk7JCAhWvnSwf6XT5BOLCX8MKDn6GtQ1XdkIpgfusn9QfW8ENYg2unr2hRVHIso4HKH7Jyl6DzkRD29QIDMxVOyBklywP8awsi13cet39Jd1A3BJ_FzRtOrQESO-IXVkcXFvYzOevGGH1_hpipF5rBENcS9ZfX4879Jgk2uU4xJ-BUSa_k5nEvcT_V4xiJzarCHu7wMP_MoopdSEEW-oqCbS9clyACxZ76CT36TJesxOUNQcnAeWMUzfWaYAGhs3hiuHPyo7QAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_37Y8BjArFB5-LzEPGGOeDm09wDTA%26client%3Dca-pub-7168214029370425%26adurl%3D
200 OK 0 B URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=Y4G1UQAOMj0KssYYAA08hhEfikgpOVPRPAO3ng&u=%7CT0YicBfSAjY2y6o0bc0I0zc4SWgEMBFyQQiDjeadQ%2BM%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_AM8iEE4GHx4XAZ8-c9e5LlJfMjehYPJbM0j2hknANCpMoZ3wmmJmKy3QrFlb0xFKqvXKPjeNIXC8ee68GfkbWasmUsIgvzGpm3A_vQhuIxoGHqrn0D0Ly74wozJaBVQabQ-RsWXloE5eSfj-FTj1Y0ubcnjYkG5WpvCwzdC90YWIHaC9M5-NmIosu6Rf3E6mDC6enHRkDrMq9CCWIqkOqrVGfYpWeJV3ODxsYyKY7a8JXdDOOF0J-8ZJ-EFtQ6DyAApB82hmpLox87_U2mzZoMUIAQiRcFIzva8y6nbHoNln9cTHZRJu68u3UaCKQ2UwTCv5mmPmAvBwwYXPuaDKIVyDXUk9PofFjOTFzPL_rK54ZQHfIrlz8cH1r89M4CA92n3sYM8Md8ZKK3LVQxqxsuFUQa_gScjao9jIxJFwjnhHMDWHTtkOkr0fI4yu-WWKd-iHMKqBES-VjaVciH4vZE2lszto6rigReNl5LdJspEkEa2Pv__OpMlMObBOkKVK21CrgYIIN-LSrdy8AojKm6B88XEUbHHEDBHW7_D2O5-7fdUCYTZflxQ&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DChYrcUbWBY73kOJiMywWG-bSoBsme0rFc9ZHevrEBwI23ARABIABgw4SAgJgYggEXY2EtcHViLTcxNjgyMTQwMjkzNzA0MjXIAQmpAv1d4nqfcLE-qAMBqgSpAk_Qjgdxu7mYdVjyA3hurr86lag7RGO0tltMl7ihKAqTOXcZufTyqjPSaUNA2IIbXUL_Djydq8NG4vzu66OHvchYW57xypnYgH10AXDCvpRaNT_bMVZIRPhVG8moFGQeUlCkXnIAZT5xOQvMbffYk7JCAhWvnSwf6XT5BOLCX8MKDn6GtQ1XdkIpgfusn9QfW8ENYg2unr2hRVHIso4HKH7Jyl6DzkRD29QIDMxVOyBklywP8awsi13cet39Jd1A3BJ_FzRtOrQESO-IXVkcXFvYzOevGGH1_hpipF5rBENcS9ZfX4879Jgk2uU4xJ-BUSa_k5nEvcT_V4xiJzarCHu7wMP_MoopdSEEW-oqCbS9clyACxZ76CT36TJesxOUNQcnAeWMUzfWaYAGhs3hiuHPyo7QAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_37Y8BjArFB5-LzEPGGOeDm09wDTA%26client%3Dca-pub-7168214029370425%26adurl%3D
IP
GET /delivery/r/afr.php?z=Y4G1UQAOMj0KssYYAA08hhEfikgpOVPRPAO3ng&u=%7CT0YicBfSAjY2y6o0bc0I0zc4SWgEMBFyQQiDjeadQ%2BM%3D%7C&c1=JrbohDAzizBCiLKN5O6jHUI-6dJ9lV_AM8iEE4GHx4XAZ8-c9e5LlJfMjehYPJbM0j2hknANCpMoZ3wmmJmKy3QrFlb0xFKqvXKPjeNIXC8ee68GfkbWasmUsIgvzGpm3A_vQhuIxoGHqrn0D0Ly74wozJaBVQabQ-RsWXloE5eSfj-FTj1Y0ubcnjYkG5WpvCwzdC90YWIHaC9M5-NmIosu6Rf3E6mDC6enHRkDrMq9CCWIqkOqrVGfYpWeJV3ODxsYyKY7a8JXdDOOF0J-8ZJ-EFtQ6DyAApB82hmpLox87_U2mzZoMUIAQiRcFIzva8y6nbHoNln9cTHZRJu68u3UaCKQ2UwTCv5mmPmAvBwwYXPuaDKIVyDXUk9PofFjOTFzPL_rK54ZQHfIrlz8cH1r89M4CA92n3sYM8Md8ZKK3LVQxqxsuFUQa_gScjao9jIxJFwjnhHMDWHTtkOkr0fI4yu-WWKd-iHMKqBES-VjaVciH4vZE2lszto6rigReNl5LdJspEkEa2Pv__OpMlMObBOkKVK21CrgYIIN-LSrdy8AojKm6B88XEUbHHEDBHW7_D2O5-7fdUCYTZflxQ&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DChYrcUbWBY73kOJiMywWG-bSoBsme0rFc9ZHevrEBwI23ARABIABgw4SAgJgYggEXY2EtcHViLTcxNjgyMTQwMjkzNzA0MjXIAQmpAv1d4nqfcLE-qAMBqgSpAk_Qjgdxu7mYdVjyA3hurr86lag7RGO0tltMl7ihKAqTOXcZufTyqjPSaUNA2IIbXUL_Djydq8NG4vzu66OHvchYW57xypnYgH10AXDCvpRaNT_bMVZIRPhVG8moFGQeUlCkXnIAZT5xOQvMbffYk7JCAhWvnSwf6XT5BOLCX8MKDn6GtQ1XdkIpgfusn9QfW8ENYg2unr2hRVHIso4HKH7Jyl6DzkRD29QIDMxVOyBklywP8awsi13cet39Jd1A3BJ_FzRtOrQESO-IXVkcXFvYzOevGGH1_hpipF5rBENcS9ZfX4879Jgk2uU4xJ-BUSa_k5nEvcT_V4xiJzarCHu7wMP_MoopdSEEW-oqCbS9clyACxZ76CT36TJesxOUNQcnAeWMUzfWaYAGhs3hiuHPyo7QAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_37Y8BjArFB5-LzEPGGOeDm09wDTA%26client%3Dca-pub-7168214029370425%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:25 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=-LaE9GlW1U2sCQ0GXhdvk0eqT8SFNLl1B7TudzMhOj6p_HHRzWXtmJs15kWYlzkhZ2Q527dI5FWn10T3BgPGi0uzEA4YkpsPZSBnLxPK1Batzx5QsnAnwme1EEj0S7sWRYLICs3M8TY6duv6x_o8GBsb01RN5RgMoX0flnEK4bpbxzJkhrV8hwmaO4iHWVEmI2Pq57AlXKVqnY0XfHWDLveX4jNy6YwoL4ygpc2GHT3BAqMbtpMLjoKt_liT9vIULBcPEg"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 67123536
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cat.nl.eu.criteo.com/delivery/lg.php?cppv=3&cpp=40bBPvnTBSVdD-mFds6_mLz8BV_QEplDnnTEJddYc0xQjhNXcWZIiH3GU6Q2MqACmAu9kmdbq5cF6u5TedTv5pqmZ3VIuKmPLgt_HX-ZXkaWCb3VHpxDX6YouFFqqSZxez2BF6MpgQyCNLaabIbB21GfNPkPPtKzEiEqxN_4aTko37dmAExsFPLZzsL85-z48DfPzCiZuHxtgNM5S_W5JmeQbvb0RYJpTb7pco7cX7ncw4EtYUZlb0EjNGhouRTDe8lAujNVf_vngeRGjXaCZb9482UEutXSgG0pyjcxAO5E93S-nJ-QGuv3gigqhY_F4rxeRWQqGJUj7vdmfoWh2thLb0z5Tx5-ToadqffqsTzy3xYkj-wWI_WYUpQmwkg-BPfMpElLgkhSL6-l9yV_aHKiKpLAAUilR1g0Ok4Sc4myv-9x
200 OK 0 B URL HTTP/2 cat.nl.eu.criteo.com/delivery/lg.php?cppv=3&cpp=40bBPvnTBSVdD-mFds6_mLz8BV_QEplDnnTEJddYc0xQjhNXcWZIiH3GU6Q2MqACmAu9kmdbq5cF6u5TedTv5pqmZ3VIuKmPLgt_HX-ZXkaWCb3VHpxDX6YouFFqqSZxez2BF6MpgQyCNLaabIbB21GfNPkPPtKzEiEqxN_4aTko37dmAExsFPLZzsL85-z48DfPzCiZuHxtgNM5S_W5JmeQbvb0RYJpTb7pco7cX7ncw4EtYUZlb0EjNGhouRTDe8lAujNVf_vngeRGjXaCZb9482UEutXSgG0pyjcxAO5E93S-nJ-QGuv3gigqhY_F4rxeRWQqGJUj7vdmfoWh2thLb0z5Tx5-ToadqffqsTzy3xYkj-wWI_WYUpQmwkg-BPfMpElLgkhSL6-l9yV_aHKiKpLAAUilR1g0Ok4Sc4myv-9x
IP
GET /delivery/lg.php?cppv=3&cpp=40bBPvnTBSVdD-mFds6_mLz8BV_QEplDnnTEJddYc0xQjhNXcWZIiH3GU6Q2MqACmAu9kmdbq5cF6u5TedTv5pqmZ3VIuKmPLgt_HX-ZXkaWCb3VHpxDX6YouFFqqSZxez2BF6MpgQyCNLaabIbB21GfNPkPPtKzEiEqxN_4aTko37dmAExsFPLZzsL85-z48DfPzCiZuHxtgNM5S_W5JmeQbvb0RYJpTb7pco7cX7ncw4EtYUZlb0EjNGhouRTDe8lAujNVf_vngeRGjXaCZb9482UEutXSgG0pyjcxAO5E93S-nJ-QGuv3gigqhY_F4rxeRWQqGJUj7vdmfoWh2thLb0z5Tx5-ToadqffqsTzy3xYkj-wWI_WYUpQmwkg-BPfMpElLgkhSL6-l9yV_aHKiKpLAAUilR1g0Ok4Sc4myv-9x HTTP/1.1
Host: cat.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 3066075
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy.svg
200 OK 0 B URL HTTP/2 static.criteo.net/flash/icon/privacy.svg
IP
GET /flash/icon/privacy.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Feb 2020 10:57:21 GMT
etag: W/"5e4d1491-646"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/animejs/animejs.js
200 OK 0 B URL HTTP/2 static.criteo.net/animejs/animejs.js
IP
GET /animejs/animejs.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: text/javascript
last-modified: Tue, 26 Mar 2019 17:44:11 GMT
etag: W/"5c9a64eb-3181"
expires: Tue, 21 Nov 2023 06:42:26 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.nl.eu.criteo.com/delivery/lg.php?cppv=3&cpp=jKO0PvnTBSVdD-mFds6_mLz8BV-LhNl4pNPUG_ModWHBEmohhPbS4XKwG2QofO0B0X-lcwVIoaxy4Foaho5W_1WYWjPaFhE8-SwGiLjR-WPRBZwyp6WfRE87gT8N3PAT-VbI5PZWxEGjmn_EjLxQTMDCEbmFfFHbmQfn0UBwP9K36uQoo8vQUKoMCFPneZdZhRPRxyTaAQzi8-lR3qRfFvDRLbAvHX9qgHJJr8T-_gSXvftNH7_UpdO9v3IuZ67Sjbx3XwFWeQ-WhQibSfnS2jhJpdtVtPOvcLr4RjzbjCH6rVErcbzaIXrUswbesopoSMrQpMyjFIAnUpbiQfG4gintMF-d9BYZqrDtPsNnqgAMDCeh6e8E7vN8H5GtkTN-yasmgzfD0jpGjF6_EGnwDYwN766z8WGXyoNo9o9GoJRLctQE
200 OK 0 B URL HTTP/2 cat.nl.eu.criteo.com/delivery/lg.php?cppv=3&cpp=jKO0PvnTBSVdD-mFds6_mLz8BV-LhNl4pNPUG_ModWHBEmohhPbS4XKwG2QofO0B0X-lcwVIoaxy4Foaho5W_1WYWjPaFhE8-SwGiLjR-WPRBZwyp6WfRE87gT8N3PAT-VbI5PZWxEGjmn_EjLxQTMDCEbmFfFHbmQfn0UBwP9K36uQoo8vQUKoMCFPneZdZhRPRxyTaAQzi8-lR3qRfFvDRLbAvHX9qgHJJr8T-_gSXvftNH7_UpdO9v3IuZ67Sjbx3XwFWeQ-WhQibSfnS2jhJpdtVtPOvcLr4RjzbjCH6rVErcbzaIXrUswbesopoSMrQpMyjFIAnUpbiQfG4gintMF-d9BYZqrDtPsNnqgAMDCeh6e8E7vN8H5GtkTN-yasmgzfD0jpGjF6_EGnwDYwN766z8WGXyoNo9o9GoJRLctQE
IP
GET /delivery/lg.php?cppv=3&cpp=jKO0PvnTBSVdD-mFds6_mLz8BV-LhNl4pNPUG_ModWHBEmohhPbS4XKwG2QofO0B0X-lcwVIoaxy4Foaho5W_1WYWjPaFhE8-SwGiLjR-WPRBZwyp6WfRE87gT8N3PAT-VbI5PZWxEGjmn_EjLxQTMDCEbmFfFHbmQfn0UBwP9K36uQoo8vQUKoMCFPneZdZhRPRxyTaAQzi8-lR3qRfFvDRLbAvHX9qgHJJr8T-_gSXvftNH7_UpdO9v3IuZ67Sjbx3XwFWeQ-WhQibSfnS2jhJpdtVtPOvcLr4RjzbjCH6rVErcbzaIXrUswbesopoSMrQpMyjFIAnUpbiQfG4gintMF-d9BYZqrDtPsNnqgAMDCeh6e8E7vN8H5GtkTN-yasmgzfD0jpGjF6_EGnwDYwN766z8WGXyoNo9o9GoJRLctQE HTTP/1.1
Host: cat.nl.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 06:42:26 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 3430018
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
142.250.74.161
178.250.0.129
217.195.203.216
37.157.2.234
93.184.220.29
23.36.77.32
0.0.0.0