alza3eem.ahlamontada.net/t290-topic
301 Moved Permanently 0 B URL HTTP/1.1 alza3eem.ahlamontada.net/t290-topic
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t290-topic HTTP/1.1
Host: alza3eem.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 05 Nov 2022 09:56:10 GMT
Content-Length: 0
Location: https://alza3eem.ahlamontada.net/t290-topic
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7be8442ec1e518ccc80739495f6d047
7a9d24b9d4046262c7753c49afaf9c19f4840626
b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B93410A9D62DA3F219796D753B61A0F730CC272C13596724AA9D20EFBA298B44"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4468
Expires: Sat, 05 Nov 2022 11:10:39 GMT
Date: Sat, 05 Nov 2022 09:56:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5169
Cache-Control: max-age=90063
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 10:57:14 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5169
Cache-Control: max-age=90063
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 10:57:14 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 078950c3ba9ad01927f3da494b1d1de4
443c8a8247e4e3e04c14d21e0227fc4e8f396142
dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3936
Expires: Sat, 05 Nov 2022 11:01:47 GMT
Date: Sat, 05 Nov 2022 09:56:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: s+Utqcslnijv6llnXktHouQr9cTIZif50r4gUf1V2FWHtEBZHsKpbM0AmQNx1n64eUUDivY9HbM=
x-amz-request-id: X1G3V1NBKZRPNR39
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 09:47:09 GMT
age: 542
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 04ed84ddacb046b5a73f34ac135a7b3f
303eae1a36b8df6c3adb8a873c5be3a01b062222
e7d2630b04f60011fc59471859ec462b3f49f3a3457c65b3e57b751721ea0151
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E7D2630B04F60011FC59471859EC462B3F49F3A3457C65B3E57B751721EA0151"
Last-Modified: Fri, 04 Nov 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10016
Expires: Sat, 05 Nov 2022 12:43:07 GMT
Date: Sat, 05 Nov 2022 09:56:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 98dbdfc9bb0139a66b1aaa14d3ab960e
f599c4b351d84c06419a8484f2ba8a2bf7edef0b
ddefc2d314b85b2888d34370f87874bffa33e16db6496c539a55b1f2799375d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6260
Cache-Control: max-age=159904
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "6365e867-117"
Expires: Mon, 07 Nov 2022 06:21:15 GMT
Last-Modified: Sat, 05 Nov 2022 04:36:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 98dbdfc9bb0139a66b1aaa14d3ab960e
f599c4b351d84c06419a8484f2ba8a2bf7edef0b
ddefc2d314b85b2888d34370f87874bffa33e16db6496c539a55b1f2799375d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6260
Cache-Control: max-age=159904
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "6365e867-117"
Expires: Mon, 07 Nov 2022 06:21:15 GMT
Last-Modified: Sat, 05 Nov 2022 04:36:55 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 98dbdfc9bb0139a66b1aaa14d3ab960e
f599c4b351d84c06419a8484f2ba8a2bf7edef0b
ddefc2d314b85b2888d34370f87874bffa33e16db6496c539a55b1f2799375d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1584
Cache-Control: max-age=155228
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "6365e867-117"
Expires: Mon, 07 Nov 2022 05:03:19 GMT
Last-Modified: Sat, 05 Nov 2022 04:36:55 GMT
Server: ECS (amb/6BA1)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2f6c296003d839bdee766ef4082e376
013ae64b10cb1355ae9b6ba38dcfa79f71a9b505
703d6582ab3344d6e4a0d5b7e0c9983b8f7e8179d73dd6584c37bbccc8c84308
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d65c94a3bfe8605059e5e626ea0fa57e
b0fbc3577331b82efc8e320095b8d8705a6360d3
0878edd256a972f526d7053cdebceb28241db5662cc7660a10f1b4c3430c43c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d65c94a3bfe8605059e5e626ea0fa57e
b0fbc3577331b82efc8e320095b8d8705a6360d3
0878edd256a972f526d7053cdebceb28241db5662cc7660a10f1b4c3430c43c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 313 B IP
Hash d70e8557d14dfcdd962c9546651f154e
ed5bf3551fc97c77725a16e2d15d07792f620b54
fda011df5ad5edce7cf0626005dd83efaa60c7f5d89a5a0c27ef82543c46ce43
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6492
Cache-Control: max-age=118730
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "636546a9-139"
Expires: Sun, 06 Nov 2022 18:55:01 GMT
Last-Modified: Fri, 04 Nov 2022 17:06:49 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 30 Oct 2022 10:40:15 GMT
expires: Mon, 30 Oct 2023 10:40:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 515756
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=
200 OK 37 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP
File type ASCII text, with very long lines (1921)
Hash 9715c721c434fa205a8d6c2e8afbc288
1998e3b142facc5903cb7530fc333b3e360ddbba
5b15a0ac6c19a01d51f378d61705c735f523ce7045bed212272a37c5a727dc6a
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 05 Nov 2022 09:56:11 GMT
expires: Sat, 05 Nov 2022 09:56:11 GMT
cache-control: private, max-age=900
last-modified: Sat, 05 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37375
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 98dbdfc9bb0139a66b1aaa14d3ab960e
f599c4b351d84c06419a8484f2ba8a2bf7edef0b
ddefc2d314b85b2888d34370f87874bffa33e16db6496c539a55b1f2799375d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1584
Cache-Control: max-age=155228
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "6365e867-117"
Expires: Mon, 07 Nov 2022 05:03:19 GMT
Last-Modified: Sat, 05 Nov 2022 04:36:55 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 727 B IP
Hash 586022852caed6f7163255ced08e245f
9aad134a6a439a46d9bbea1f1b6939f1065581f4
08332dc5c927d33b200fdbc55e5240adcdaf88830e35b4336a70a208ca33c45d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5879
Cache-Control: max-age=115248
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Etag: "63653b74-2d7"
Expires: Sun, 06 Nov 2022 17:56:59 GMT
Last-Modified: Fri, 04 Nov 2022 16:19:00 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 727
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1921)
Hash 7dc6600ba83bb8c7848d27534c4cf896
009d1b37cd03a4f2bb012586622eaeca6aae2d7d
0684555a4fb1de67b2eca030d022e1758df2cfc34b4df705cdfd95d199fa865a
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 05 Nov 2022 09:56:11 GMT
expires: Sat, 05 Nov 2022 09:56:11 GMT
cache-control: private, max-age=900
last-modified: Sat, 05 Nov 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43652
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2f6c296003d839bdee766ef4082e376
013ae64b10cb1355ae9b6ba38dcfa79f71a9b505
703d6582ab3344d6e4a0d5b7e0c9983b8f7e8179d73dd6584c37bbccc8c84308
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d65c94a3bfe8605059e5e626ea0fa57e
b0fbc3577331b82efc8e320095b8d8705a6360d3
0878edd256a972f526d7053cdebceb28241db5662cc7660a10f1b4c3430c43c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2img.net/i/empty.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2515039
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o75EYftTpVA7pVgq81Pkq6ZNN3Fds%2FZPYNoDLPnq7xRxUrzMbL49oN99SUsTHac3q7n8Q5E8LRyXPmsk2sw1jgYNOuEmv6cgoH9X6FJThPqSZaphx6S8kQ8v2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d6abd57707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/empty.gif
200 OK 42 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /i/fa/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: image/gif
content-length: 42
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2515021
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ao%2B97fVTlp74xVkf1fHy1c3XtbYG6NCcpKngBEDKIy7l0Yb17vADm%2Fnbm4OEHFiz5xkQGlz26LuUVvUDWVsGsxGcJsPMgXUpTz4CB0pyCGGGXVgc4Q6XGSB%2Fdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d6abe57707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/10/71/i_icon_mini_login.png
200 OK 2.0 kB URL HTTP/2 2img.net/s/t/10/10/71/i_icon_mini_login.png
IP
File type PNG image data, 75 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 69ac982df6200a62ffb1628896313d0d
a4187abb26c44b36ef8e5e7d42dfe7cf0055e24e
6673b8716bcc3e1eb40d609c5f5fda863c17ca43ebe727c4936a590e16914b39
GET /s/t/10/10/71/i_icon_mini_login.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: image/png
content-length: 1962
last-modified: Fri, 12 May 2017 12:26:26 GMT
etag: "5915a9f2-7aa"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cUw84yL1QA9O4z%2BixoEQfeIWW%2BooOODobgUJHZswGgpJ0GjCnhuz%2B%2BzkdzFr%2FhBGazHcYQ6w8o8DW0Zq%2BgykqGJNi%2BwFRLodux0KSX8x6xc3H8AN5KgFcXE58Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d68b937707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
alza3eem.ahlamontada.net/0-rtl.css
200 OK 55 kB URL HTTP/2 alza3eem.ahlamontada.net/0-rtl.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 91e4d9486b0db31df7d599a34683c630
2e90cb8e346339b8650e33929fe40b38d168111f
625b9eae751fb9fcc105bfa3b8587222ca6d324062b42c35b9e15f8ca271c3cc
GET /0-rtl.css HTTP/1.1
Host: alza3eem.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/t290-topic
Cookie: exadd=166765
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: text/css
content-length: 54765
last-modified: Sat, 05 Nov 2022 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: MISS
X-Firefox-Spdy: h2
2img.net/s/t/10/10/71/i_icon_gender_male.gif
200 OK 753 B URL HTTP/2 2img.net/s/t/10/10/71/i_icon_gender_male.gif
IP
File type GIF image data, version 89a, 62 x 40\012- data
Hash 15dea993288b4e99b42e01b76a59922f
e9f9c44095c75a7d14a192c0382030234a22c57f
b16d2f8243dbc0a13ff17e63b5d28c3f887a06056a86dbcc38a9061f05f707d1
GET /s/t/10/10/71/i_icon_gender_male.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: image/gif
content-length: 753
last-modified: Mon, 21 Jan 2008 23:15:00 GMT
etag: "47952774-2f1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wyV5OCO3HQUhB0gK1t04VoTYxMGRCsmoiCcX2CqJ2pOvYhDyOSUjtLO418HaWlDvu75XFOqpUu1HSpIgrR95czQPMkhb1Eqe1dUK4imL1inLhxTyTk3mIZxwZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d69b9b7707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/10/71/i_icon_www.gif
200 OK 845 B URL HTTP/2 2img.net/s/t/10/10/71/i_icon_www.gif
IP
File type GIF image data, version 89a, 57 x 15\012- data
Hash 4e9a67b62de27aace552def6f108cf6d
1698d6cdea781859f3dc47d361da1e160c70fe84
287b95ec968511c4eb76ec7e4e3735a473f1c51049aa00bb28cf55eb5f1cc9da
GET /s/t/10/10/71/i_icon_www.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: image/gif
content-length: 845
last-modified: Mon, 21 Jan 2008 23:15:00 GMT
etag: "47952774-34d"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0JaFG2XKShSo1V7fBR2jbmr37JxxtGWTKawQuv%2FzdbLdjYNQcOoyUrA%2Fa%2Fq4U0vKFvxS83QeyZtn1cg9yRff%2F880tu2GCagOA3Ar5FcrTqq1SBD227A88neIWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d68b8e7707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/10/71/i_icon_mini_index.png
200 OK 2.3 kB URL HTTP/2 2img.net/s/t/10/10/71/i_icon_mini_index.png
IP
File type PNG image data, 75 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 9090d54e29608280dfc88a2506e5c50a
902c2f3b51a0ce6b43d816d125272cd8c863e34a
648cfaf5a896cb7f0834a2b6e3d1311fac38e40b0269f52bef69642b93f4ba42
GET /s/t/10/10/71/i_icon_mini_index.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: image/png
content-length: 2280
last-modified: Fri, 12 May 2017 12:26:26 GMT
etag: "5915a9f2-8e8"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QEQCuiQjp%2BOVFRWsWLKa9KlMHTiEMnAaoGjoHZ%2BFz2cKD7HdeT%2FNHwM0dbg%2BmanV5grJlz2o7JYdhrgjJDZfqOUmCzT%2BVMTn0N0dbAIbrHxfD3k5Sp%2Bew115Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d68b7d7707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/10/71/i_icon_mini_register.gif
200 OK 29 kB URL HTTP/2 2img.net/s/t/10/10/71/i_icon_mini_register.gif
IP
File type GIF image data, version 89a, 75 x 35\012- data
Hash f25053566998ac7e91b040dc27b3b8a4
3554429b2141efcaeb3f5c930dade9c11d98131c
e24872e5e5b12396458caa757b94ef28fd8686dfa6ac9cbab50df71b12fc7627
GET /s/t/10/10/71/i_icon_mini_register.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: image/gif
content-length: 29119
last-modified: Wed, 27 Oct 2010 13:48:46 GMT
etag: "4cc82dbe-71bf"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P9gjCr9ZFDK1D%2BhYUHgCBW7FoHrBBS%2FvuPbvhr4tYob5EAdWJm1kxIUIoMApcUKkCsqrmRm6p8E2i%2Bu5DoRHqVRmauZ231MwM2lwURctYt6jDkwR9sGWRK4gMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d68b817707-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/63/frm/jquery/cookie/jquery.cookie.js
200 OK 1.9 kB URL HTTP/2 illiweb.com/rs3/63/frm/jquery/cookie/jquery.cookie.js
IP
File type ASCII text, with very long lines (1011), with no line terminators
Hash 372345c6b3f1031257e7668e78527a4e
1a2e772c7bf48dd6ed6c1112d40478d237b31ced
193933479b9a01b4262f7dff3bf1efabe5f28550a5bbc0f2b409973098b86db4
GET /rs3/63/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Fri, 08 Sep 2023 08:06:37 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5017774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=70QEhXxqUtysa%2FQnEmtOZvDRAVZefvQ2J8WQluacyqNhAW8L18Eu04njC%2Brocl7kekNFNqY0tZPNtPD2qM13P76zt0Wygnvi69aV1Fhhg8NOrmdSJJoD177txAHjhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d56c551c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NfTpRvKEWCkP/cPLY69dGw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: L+aF1fFaJISLgTBuUOF0xgCUqi8=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 91b80b577c37bbb82e653f878cf5eef6
4a0438d268908026e7e6b61f8ed495befdf2b4c9
aa01eb803ddb538c30b1b8bcb6a562d6f97e05fe0c6f2576b572abc1be27aabb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA01EB803DDB538C30B1B8BCB6A562D6F97E05FE0C6F2576B572ABC1BE27AABB"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=373
Expires: Sat, 05 Nov 2022 10:02:25 GMT
Date: Sat, 05 Nov 2022 09:56:12 GMT
Connection: keep-alive
illiweb.com/rs3/63/frm/lang/notutf8-ar.js
200 OK 20 kB URL HTTP/2 illiweb.com/rs3/63/frm/lang/notutf8-ar.js
IP
File type ISO-8859 text, with very long lines (65536), with no line terminators
Hash c7b1ab15db0c2e4d18dda9b897ce5812
c7a34ccb8bf341174013563f452094d90dc7f57e
bf516f073c2836d185d9919a1c4ba193512f2d32b8b2fa9cd6bb2a9096da63ef
GET /rs3/63/frm/lang/notutf8-ar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=73321
access-control-allow-origin: *
expires: Fri, 08 Sep 2023 09:02:12 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5014439
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AjZXtJe3fpY%2Bq8gGODZG4x2sRR98unKFm%2Bd1O0MB01Lx%2FgLTq4wncdIXmszRGnHFSpFS%2BxD5NvTU3PRhxXFUbnYW%2BscHFPH1iVIZZNrkM62gHfJb679kT5mAgoyxNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d58c6c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash a8c2bfbf470e23f902c267d5f5cab9fb
44a69253ccd090f4d566bf2a7cc9b61bde200269
d0ad09c78b928fa50dd44caa0dee4d1e9cd3fa6511320723c47db9938e71a467
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2902
Cache-Control: max-age=89934
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "6364e434-139"
Expires: Sun, 06 Nov 2022 10:55:06 GMT
Last-Modified: Fri, 04 Nov 2022 10:06:44 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
twemoji.maxcdn.com/twemoji.min.js
200 OK 4.8 kB URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
Hash 9e244ea4938eb432cd360c7ed795979f
5752ced152a16c3854fafdcdc688164f71c79969
3e1f50e35d353f28af6c6bd835b9ffb7360d5d35159e3349738e4f5d9bd96a02
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Mon, 05 Dec 2022 09:56:11 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: E042:8430:27CD466:2922CEC:63616F0B
vary: Accept-Encoding
x-fastly-request-id: b5d54b17e716d87112ad9a589df488796482241e
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=alza3eem.ahlamontada.net&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=alza3eem.ahlamontada.net&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash 5702c789b945c132a742ff68ca332f2e
c158dcbffa04576e9414a34a5bcde3dafd8738bd
078aa1da55fd33e49d2be19d09f3728e567df5f66e8bfc2e6706538c0c87d367
Analyzer Verdict Alert quad9 Sinkholed
GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=alza3eem.ahlamontada.net&var=&ymid=&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: e8885a1d0c4d710c7d5e9371bafa4ccc
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 989d9a981e20fbf6339d66b6e0c8bb32
8ee34d81f7a6dd04266ad80f1f2ff74b1c350e9c
ffc6ad41f4bf5aba827e780ba699e176b592cf6d1dad3417b3a23e4a3960253b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3078
Cache-Control: max-age=113905
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "63654127-139"
Expires: Sun, 06 Nov 2022 17:34:37 GMT
Last-Modified: Fri, 04 Nov 2022 16:43:19 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 05 Nov 2022 08:41:09 GMT
expires: Sat, 05 Nov 2022 10:41:09 GMT
cache-control: public, max-age=7200
age: 4503
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=o1SJuF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzZWJxNXRYTWxKcjFpbkQ5ZEtwUVROSQ; expires=Thu, 30 Nov 2023 09:56:12 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 339588
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/forumotion-ar/loader.js
200 OK 25 kB URL HTTP/2 cdn.taboola.com/libtrc/forumotion-ar/loader.js
IP
File type Unicode text, UTF-8 text, with very long lines (65497)
Hash 4c1e16ceb1911a1f3920fa689c4620fa
384c5078c94fbd43bfc8851e6c9976be1136dec0
557ca19567b0aa5fd8662e0307821664fb15faa6aea0eca724846bebf2b871f1
GET /libtrc/forumotion-ar/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zL7OSOZjEWIhligPfT3uV7PsKcvYv5wu0Ljg825SSK/uJSAwhBQVfb01N+Qi1/Z/7ZvEh8Gs8k8=
x-amz-request-id: 7VBRPBBXVG9HT4Q3
last-modified: Thu, 03 Nov 2022 13:04:51 GMT
etag: "15fddc7e4c2126c20a02f06b12f8d605"
x-amz-version-id: zjeLYXnXHsGMsVTlnET923uOul.YTUdH
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:12 GMT
via: 1.1 varnish
age: 76
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1667642172.359717,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 99
content-length: 25230
X-Firefox-Spdy: h2
ocsp.comodoca4.com/
200 OK 281 B IP
Hash fbbb96ec241169c55ca2f1bc58b39b4d
e86cc45893215a885a847169be24f27c6fd5b1bf
6cc48f250afba54bd0660e46f69a1ec4a042f92db4f87d2e17005e44b4b2bf10
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 09:56:12 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sat, 05 Nov 2022 00:47:10 GMT
Expires: Sat, 12 Nov 2022 00:47:09 GMT
Etag: "e86cc45893215a885a847169be24f27c6fd5b1bf"
Cache-Control: max-age=571256,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7654b7d95f3bb518-OSL
ocsp.digicert.com/
200 OK 313 B IP
Hash 341325c232031c014ffc81cda197af64
43b0dcd10d8383f584f7590fab7631cdf9198841
16bda8a9c14d4a31bfc88aeb12f07bf32e26ae576ffb1e09e779b7626de2918b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4608
Cache-Control: max-age=87688
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "6364d4c4-139"
Expires: Sun, 06 Nov 2022 10:17:40 GMT
Last-Modified: Fri, 04 Nov 2022 09:00:52 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
cdn.taboola.com/libtrc/impl.20221102-48-RELEASE.js
200 OK 146 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221102-48-RELEASE.js
IP
File type ASCII text, with very long lines (65508)
Size 146 kB (145832 bytes)
Hash 2cb70b33b089c62b26eb96d94e7848bd
cf1686eadf7992bfc00f123bf26bca19857697d8
e2c6a7f536218170613c3a652d52131e5b70541333377645cb39bec56f3255b0
GET /libtrc/impl.20221102-48-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 9ev1Nxau8RZi/3Ry4EmiKGio8KAljHS1bjrQt+OvwlnYiPXUSniGV3fIft4tlxpOjW3kBb9VG68=
x-amz-request-id: MMDGV2TEXDJWYD38
last-modified: Thu, 03 Nov 2022 09:40:21 GMT
etag: "2cb70b33b089c62b26eb96d94e7848bd"
content-encoding: br
x-amz-version-id: cUHcgl7EI0Kdobxi4IZyHivlOu5FPy45
content-type: application/javascript
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:12 GMT
via: 1.1 varnish
age: 939
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 571
x-timer: S1667642172.407568,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 17
server: AmazonS3-br
content-length: 145832
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 341325c232031c014ffc81cda197af64
43b0dcd10d8383f584f7590fab7631cdf9198841
16bda8a9c14d4a31bfc88aeb12f07bf32e26ae576ffb1e09e779b7626de2918b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4611
Cache-Control: max-age=87691
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "6364d4c4-139"
Expires: Sun, 06 Nov 2022 10:17:43 GMT
Last-Modified: Fri, 04 Nov 2022 09:00:52 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 313
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: text/javascript
content-length: 28567
x-amz-id-2: kFPAC60DOwNQb4CdhqHG+tKjRF2TQjxpEdeKJyhLPdvjoiSwXPmNvXMEMMBRIwIu/QGXu5HJg1c=
x-amz-request-id: NTCW971RKN3GM3ZQ
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
etag: "072eaf64a771815874455704fca9301b"
cache-control: public, max-age=604800
content-encoding: gzip
cf-cache-status: HIT
age: 1338625
expires: Sat, 12 Nov 2022 09:56:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d9bdf00b61-OSL
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
Content-Type: application/json
Origin: https://alza3eem.ahlamontada.net
Content-Length: 395
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: ac33f443c240f01a6b20d50e1d25528d
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f16ee972e453a3fcbbd4d7349c71b98
997c6f963c5c1674dbf5c371287ecfc26fd6e3b2
4208d90b289c8b6c8a0c9421eff659baacb4461d069583a7457d6c452f08640b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4208D90B289C8B6C8A0C9421EFF659BAACB4461D069583A7457D6C452F08640B"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18158
Expires: Sat, 05 Nov 2022 14:58:50 GMT
Date: Sat, 05 Nov 2022 09:56:12 GMT
Connection: keep-alive
alza3eem.ahlamontada.net/images/icons-180.png
200 OK 13 kB URL HTTP/2 alza3eem.ahlamontada.net/images/icons-180.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 9a2dbafd5099e411c7f97aef373e491f
3533f5caa03d6bb5c4972203490b20d313eaf430
20b263cda715aacf54ffb0b00406c9693dc02d695cd411b7d5445eb0a5edbc5d
GET /images/icons-180.png HTTP/1.1
Host: alza3eem.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/t290-topic
Cookie: exadd=166765; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: image/png
content-length: 12588
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Sat, 05 Nov 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6913d09d2b8cbd80ef370c1997143ec
61873208c5852b9f13b1a60d408ec8b239c48c81
291bfcf11419acdfafebb4a1d789302bcbae25eff3a3a847a251e912ef5854b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=69931805.1667642171&jid=626497307&gjid=134539215&_gid=579729525.1667642171&_u=YEBAAUAAAAAAACAAI~&z=1707880764
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=69931805.1667642171&jid=626497307&gjid=134539215&_gid=579729525.1667642171&_u=YEBAAUAAAAAAACAAI~&z=1707880764
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=69931805.1667642171&jid=626497307&gjid=134539215&_gid=579729525.1667642171&_u=YEBAAUAAAAAAACAAI~&z=1707880764 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://alza3eem.ahlamontada.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 05 Nov 2022 09:56:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 34352e233023821559959951162834a8
f825f0ffeb726f63b915d6ef73c59a175228a909
58fb8387566053cc885bf39dc7e0d8ecb996612e6558ad25ec8f9439a4c8545d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5370
Cache-Control: max-age=168731
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "63660e5d-116"
Expires: Mon, 07 Nov 2022 08:48:23 GMT
Last-Modified: Sat, 05 Nov 2022 07:18:53 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=alza3eem.ahlamontada.net&info=Uc0PxF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY0pCb205WDR4bGMlMkY5eE9xJTJGNUkyV3E&idsd=1227895009,-1429342018&cw=1&lsw=1
200 OK 321 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=alza3eem.ahlamontada.net&info=Uc0PxF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY0pCb205WDR4bGMlMkY5eE9xJTJGNUkyV3E&idsd=1227895009,-1429342018&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (393), with no line terminators
Hash 8a345acdf25d68d11341ef5810cea8e1
db200c20d2bc2657d2a9e51fda132831e1d60af7
9c7f92f0061531cade033b7f91a696d3ca022ada948e849b27664656b1792bc9
GET /sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=alza3eem.ahlamontada.net&info=Uc0PxF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY0pCb205WDR4bGMlMkY5eE9xJTJGNUkyV3E&idsd=1227895009,-1429342018&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=alza3eem.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 989033
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.138&type=usage&msg=rtus&llvl=2&id=6433&cv=20221102-48-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.138&type=usage&msg=rtus&llvl=2&id=6433&cv=20221102-48-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.138&type=usage&msg=rtus&llvl=2&id=6433&cv=20221102-48-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
x-fastly-to-nlb-rtt: 22428
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a6913d09d2b8cbd80ef370c1997143ec
61873208c5852b9f13b1a60d408ec8b239c48c81
291bfcf11419acdfafebb4a1d789302bcbae25eff3a3a847a251e912ef5854b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 34352e233023821559959951162834a8
f825f0ffeb726f63b915d6ef73c59a175228a909
58fb8387566053cc885bf39dc7e0d8ecb996612e6558ad25ec8f9439a4c8545d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5370
Cache-Control: max-age=168731
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "63660e5d-116"
Expires: Mon, 07 Nov 2022 08:48:23 GMT
Last-Modified: Sat, 05 Nov 2022 07:18:53 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.140&type=info&msg=%7B%22mode%22%3A%22thumbnails-728x90%22%2C%22container%22%3A%22taboola-728x90-thumbnails%22%2C%22placement%22%3A%22728x90%20Thumbnails%22%2C%22target_type%22%3A%22mix%22%7D&llvl=2&id=9139&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.140&type=info&msg=%7B%22mode%22%3A%22thumbnails-728x90%22%2C%22container%22%3A%22taboola-728x90-thumbnails%22%2C%22placement%22%3A%22728x90%20Thumbnails%22%2C%22target_type%22%3A%22mix%22%7D&llvl=2&id=9139&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.140&type=info&msg=%7B%22mode%22%3A%22thumbnails-728x90%22%2C%22container%22%3A%22taboola-728x90-thumbnails%22%2C%22placement%22%3A%22728x90%20Thumbnails%22%2C%22target_type%22%3A%22mix%22%7D&llvl=2&id=9139&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
x-fastly-to-nlb-rtt: 22428
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 45 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 06e367e8c698d4072ac4fcf57b400942
7899d88fc3d7fb392786dcc58667aa871a4a286e
970135f07f459c9e630ed18ba1bae1373b03c2425d5cdfe7196e99f519525594
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 84117
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.145&type=info&msg=728x90%20Thumbnails%20thumbnails-728x90&llvl=2&id=8014&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.145&type=info&msg=728x90%20Thumbnails%20thumbnails-728x90&llvl=2&id=8014&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.145&type=info&msg=728x90%20Thumbnails%20thumbnails-728x90&llvl=2&id=8014&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
x-fastly-to-nlb-rtt: 22428
access-control-allow-credentials: true
X-Firefox-Spdy: h2
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.146&type=info&msg=Below%20Desktop%20Forum%20Thumbnails%20thumbnails-desktop-a&llvl=2&id=6349&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.146&type=info&msg=Below%20Desktop%20Forum%20Thumbnails%20thumbnails-desktop-a&llvl=2&id=6349&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.146&type=info&msg=Below%20Desktop%20Forum%20Thumbnails%20thumbnails-desktop-a&llvl=2&id=6349&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
x-fastly-to-nlb-rtt: 22428
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4410e0283900e769c122cfbcbdbed143
c5588f7f402a41c39405d7459367eadb893fafaf
c9943eb8c4b659d1f5adf76a2d36b70f4ab306c5831b469e07b0fa822056f2b5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 09:56:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2022 18:25:20 GMT
Expires: Thu, 10 Nov 2022 18:25:19 GMT
Etag: "c5588f7f402a41c39405d7459367eadb893fafaf"
Cache-Control: max-age=461946,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7654b7dc1ec70b39-OSL
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
Content-Type: application/json
Origin: https://alza3eem.ahlamontada.net
Content-Length: 759
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 1cf2a813e2427abe315face9bcfb5b0d
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b3f709543bfda272e8a2d0a4dba36dda
df2f6d7cce52d8fd32cd4d48522c5927c113f265
262a86a8c76e8226cfd4c997aaeba4da3ad43adaf5ecd260c6098ff9d39fcd15
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166411
Date: Sat, 05 Nov 2022 09:56:12 GMT
Etag: "636608b6-1d7"
Expires: Mon, 07 Nov 2022 08:09:43 GMT
Last-Modified: Sat, 05 Nov 2022 06:54:46 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YMir9fDIXvAq6NwjsuBWkiRnv7sdIQ8AOgPHxSAgmbDfQd-c53_Wow==
Age: 4497
my.rtmark.net/gid.js?userId=e35316b92cfe45ffbc5a9012d0a38302
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=e35316b92cfe45ffbc5a9012d0a38302
IP
File type JSON data\012- , ASCII text
Hash 15a4b3ae9c9821f10eeaa500ff65ee80
17361900a92b5052b50d289d3ff7555b0bd8d51a
ba35e36f14813b08236485bb12bb423f6d47b7fa1ce32b0582094268abd13483
GET /gid.js?userId=e35316b92cfe45ffbc5a9012d0a38302 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=e35316b92cfe45ffbc5a9012d0a38302; expires=Sun, 05 Nov 2023 09:56:12 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
api.viglink.com/api/ping
200 OK 259 B IP
File type ASCII text, with no line terminators
Hash 6edf22707a8ceaf5cdeab78f2b984f92
40d99e9fc59d0ebe8267fa5d3053dc302eef9554
5c5b04527beab50c3b2d57db83af2bc35d69b0ac89b185009818a43446e01ac0
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 143
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://alza3eem.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 05 Nov 2022 09:56:12 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 259
Connection: keep-alive
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://alza3eem.ahlamontada.net/
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://alza3eem.ahlamontada.net
server-processing-duration-in-ticks: 282981
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.betgorebysson.club/?rb=LmlASDBvpxp25HAFkNxPr7V1h2Juoh6wGOpmqqD4I9gO0UNa83Kvs2kicBdTF3UOHT5X_mdjRZ01OZ1wFl14WCEZ8ZcPsNqD8amkuunhkha5p30i11GR8pAX5GoA5WR5a3cfSmb3aZpvVfr0g1lDFz3RZe9SyWo0CBY4Qi3L-6xtiIVXF-0rgOgWe81ViU2Ez4ifwJHiIfPSWrRiBBYCYTPMZH_tR15ruir6_UlIxR_btCdgAn8P-Q%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.447.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.447.0&bs=b94f36da-256c-46b3-b0f5-8e18ae8e5a04&userId=e35316b92cfe45ffbc5a9012d0a38302&m=link
200 OK 1.7 kB URL HTTP/2 cdn.betgorebysson.club/?rb=LmlASDBvpxp25HAFkNxPr7V1h2Juoh6wGOpmqqD4I9gO0UNa83Kvs2kicBdTF3UOHT5X_mdjRZ01OZ1wFl14WCEZ8ZcPsNqD8amkuunhkha5p30i11GR8pAX5GoA5WR5a3cfSmb3aZpvVfr0g1lDFz3RZe9SyWo0CBY4Qi3L-6xtiIVXF-0rgOgWe81ViU2Ez4ifwJHiIfPSWrRiBBYCYTPMZH_tR15ruir6_UlIxR_btCdgAn8P-Q%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.447.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.447.0&bs=b94f36da-256c-46b3-b0f5-8e18ae8e5a04&userId=e35316b92cfe45ffbc5a9012d0a38302&m=link
IP
Hash c2da5d2c08177aefa84d6ba2e686e8e5
fe06222db9f3419f5f5201cdb844f3ebf77d0221
d6ec6c85995811a452323678713c4d95f5de013dd2ec1574e8f4ca0620daaaf2
GET /?rb=LmlASDBvpxp25HAFkNxPr7V1h2Juoh6wGOpmqqD4I9gO0UNa83Kvs2kicBdTF3UOHT5X_mdjRZ01OZ1wFl14WCEZ8ZcPsNqD8amkuunhkha5p30i11GR8pAX5GoA5WR5a3cfSmb3aZpvVfr0g1lDFz3RZe9SyWo0CBY4Qi3L-6xtiIVXF-0rgOgWe81ViU2Ez4ifwJHiIfPSWrRiBBYCYTPMZH_tR15ruir6_UlIxR_btCdgAn8P-Q%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.447.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.447.0&bs=b94f36da-256c-46b3-b0f5-8e18ae8e5a04&userId=e35316b92cfe45ffbc5a9012d0a38302&m=link HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Cookie: OAID=e35316b92cfe45ffbc5a9012d0a38302; oaidts=1667642172
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json
x-trace-id: 8b9e00f2e1459fda2c91603c3fad6a4c
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=e35316b92cfe45ffbc5a9012d0a38302; expires=Sun, 05 Nov 2023 09:56:12 GMT; path=/; secure; SameSite=None
oaidts=1667642172; expires=Sun, 05 Nov 2023 09:56:12 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sat, 12 Nov 2022 09:56:12 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9b08c38f0415438f5f92380ecb902bb
521f94256b2e677cebf32404641ea8b23c18b2a4
696a8fc71eb173d6434e990a93fca753df22378de0e3014f529db7654d27cf77
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5de5a7ee16d3f3164758282fbecef0a3
82fb2ac7d306e1f9724adc0ba2ef9e549baa9100
ad55f91c5fb1f872310a5f5777a65b79a338138d241a674449da2e0edde1f2ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.js?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Sat, 05 Nov 2022 09:56:12 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
gum.criteo.com/sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=alza3eem.ahlamontada.net&bundle=ytgMHF9GYlBZSHJWUjRRdFVROHVoYURVSDZxZVpBdDFBaiUyQkJVWFd3YjFXZE15RXhzTSUyRlMlMkJxeSUyQjA1WHBKYyUyRlBENVZhTGtiQVpaTzRNZG8yQ1hieTk4UllRU2I3Qkt4aWtVWWY0czJta2I3M2J1VmMxM1dZMktWZGkzY0Q4a2ZqMFIxMkdPUWEwcjBJa2tTZXp6ZzVQaGZpWmF3JTNEJTNE&info=3QfKA180M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY3VQeDA1dXl6VFElMkZXQjY1Mk10Mzcy&idsd=1227895009,-1429342018&cw=1&rtusCallerId=72&lsw=1
200 OK 363 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=alza3eem.ahlamontada.net&bundle=ytgMHF9GYlBZSHJWUjRRdFVROHVoYURVSDZxZVpBdDFBaiUyQkJVWFd3YjFXZE15RXhzTSUyRlMlMkJxeSUyQjA1WHBKYyUyRlBENVZhTGtiQVpaTzRNZG8yQ1hieTk4UllRU2I3Qkt4aWtVWWY0czJta2I3M2J1VmMxM1dZMktWZGkzY0Q4a2ZqMFIxMkdPUWEwcjBJa2tTZXp6ZzVQaGZpWmF3JTNEJTNE&info=3QfKA180M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY3VQeDA1dXl6VFElMkZXQjY1Mk10Mzcy&idsd=1227895009,-1429342018&cw=1&rtusCallerId=72&lsw=1
IP
Hash 715804dcb907ac17045757052da01f70
50e8f7731aeba8f74e700c210d3b105bbe818578
9f29ccd6375492076ca173a3ce74d3ae07f4564aa050a5b2e8a9ee4f43c4f9f9
GET /sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=alza3eem.ahlamontada.net&bundle=ytgMHF9GYlBZSHJWUjRRdFVROHVoYURVSDZxZVpBdDFBaiUyQkJVWFd3YjFXZE15RXhzTSUyRlMlMkJxeSUyQjA1WHBKYyUyRlBENVZhTGtiQVpaTzRNZG8yQ1hieTk4UllRU2I3Qkt4aWtVWWY0czJta2I3M2J1VmMxM1dZMktWZGkzY0Q4a2ZqMFIxMkdPUWEwcjBJa2tTZXp6ZzVQaGZpWmF3JTNEJTNE&info=3QfKA180M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY3VQeDA1dXl6VFElMkZXQjY1Mk10Mzcy&idsd=1227895009,-1429342018&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=alza3eem.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1566853
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 82 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash 734d43084e676ef01abb21fe98fe6173
f43fe52e91131a63c87d50197f2602b7bf9fae99
1d118d0f5eea2de7b8e13f1445d1f850d36cf225d2f78c3ae7133455b1a83055
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 108154
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 646 B IP
Hash 8f792324ab794df7c0c1e2d18b36c01c
4bc6c9e2c89d332d38283c744a6966aaa2112efa
7bc986c5f14c90b9143f46003fbe8d33604c34e433b3ccedfa2d778d68b0304f
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=Uc0PxF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY0pCb205WDR4bGMlMkY5eE9xJTJGNUkyV3E
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=3QfKA180M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY3VQeDA1dXl6VFElMkZXQjY1Mk10Mzcy; expires=Thu, 30 Nov 2023 09:56:12 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 434008
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 371
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 05 Nov 2022 09:56:12 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://alza3eem.ahlamontada.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=alza3eem.ahlamontada.net
200 OK 5.1 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=alza3eem.ahlamontada.net
IP
Hash d4becda162b02966a4bd4f4c4093b135
a08e1dd17d4b0e83fae3d0a8e086a217cfb0e905
012629ccf18c4ec64b91a13309886b4e4bed06d8b70b565e398fc2b7b8f11346
GET /syncframe?origin=rtus&topUrl=alza3eem.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=3e2217cf-7da7-4b25-bebe-57afc82e00ef; expires=Thu, 30 Nov 2023 09:56:12 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 535683
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 9.3 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash 79282b3a7357e2d5a8325e5d81d1f80f
15ee401cb98c86b14ca8ce9047e03a0382a932d8
9444af7ee26b91affcc943a44f7b673da035e8609da4228ee4e96024b4c085bc
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
x-crto-bundle: mmdqeV90eWlZN1hTQ2R2V3VzVzdJZDUlMkIzViUyQm53eHQ3RENTNVJCcHFHWjdGYVhBdWRsblBNSjhTZDBWYll0dlQzOGMxTnZneWhzN0dlRml6WXJXJTJCZGNzRFlsRyUyRkl4OEl1OTlSNElPeWhDeE9NOGxENnkydUZrVElobHJOJTJGb0VNJTJGMSUyQjBTejFRVlVWV0FnZ01pRzNtejdEWkVQdyUzRCUzRA
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:13 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://alza3eem.ahlamontada.net
server-processing-duration-in-ticks: 1771847
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4a9066e8faeec7f06d9a7e91bef8ff52
699ce1c29412a4c3f9018f4deceb3db399ddcd29
46461d19bf1ea06f23d89c4179135eaca9d7c8753a91e913b3adaf2615bee36f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/cta-component.20221102-48-RELEASE.es6.js
200 OK 5.1 kB URL HTTP/2 cdn.taboola.com/libtrc/cta-component.20221102-48-RELEASE.es6.js
IP
File type ASCII text, with very long lines (18924)
Hash 1ead3f3e51bc86298df7102ce87fe0b0
ea2e8bd2eeb36e36a8fbeb8f41b749fb7ac40f73
a65cc1bece238522356893e2aa249f22032005e7ecfbbb19cc14a4b64f43b17e
GET /libtrc/cta-component.20221102-48-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: f05Ufyg0hahkaJOxHKKiiJG8PGlGrFB8SrpVw67a6P9rA2GYGe7wZxVcWBvwS62qTJupSMx/Nzg=
x-amz-request-id: WF8HTCHQJV32W9WX
x-amz-replication-status: PENDING
last-modified: Thu, 03 Nov 2022 13:40:55 GMT
etag: "ec33a34412965b76ca2f857dfa9cb465"
x-amz-version-id: Ax3nB3HacshVWAL2OABwdnqQTdhsonYx
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
age: 92
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 46
x-timer: S1667642173.212160,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 17
content-length: 5108
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/userx.20221102-48-RELEASE.es6.js
200 OK 5.4 kB URL HTTP/2 cdn.taboola.com/libtrc/userx.20221102-48-RELEASE.es6.js
IP
File type ASCII text, with very long lines (17842)
Hash bf1c04dffbcf70fb528d7cf003f8d3c3
babf3d11404d984eb97fe250d643391db4bed923
6c076c9f308134e7f07a2730a4060b9b9141b850ceb889bd83b22a74c0bc8619
GET /libtrc/userx.20221102-48-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 3mjqZdtKox7xjfZ3q9N/HRg6+1VxZMJI+vA/S7lgHb/iynw1UMxs4XoFZ2iyWZUZSZ4n/b1Y854=
x-amz-request-id: 8G1QQH4XDH57JAFK
x-amz-replication-status: PENDING
last-modified: Thu, 03 Nov 2022 13:43:27 GMT
etag: "cd64469c740fe5393564a58c47678359"
x-amz-version-id: EgBiEpIHRE_ndglte7AzF8wwRdRZ3Uc7
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
age: 87
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 20
x-timer: S1667642173.212476,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 17
content-length: 5398
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 9830df0f75e700a6b1530090b1dfb5b2
189a51c8ebc1d63519cb599f64b040a2ac16766a
c8e7a3a4a746d5edd3e837b6e8d9f18517404973a82cf5298e58dc0e8058f351
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 296
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://alza3eem.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 05 Nov 2022 09:56:13 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
vidstat.taboola.com/lite-unit/3.9.5/UnitWidgetItemDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.5/UnitWidgetItemDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a7b72a082fc5e3bc4aabbb79f73fb604
31cc6cd9b3dfbd31d24cd47dd2fcb29f5522822f
bf20590ab0b6486faa1a22e447f2ae149aa76742fd65fa43993646031d90a1e1
GET /lite-unit/3.9.5/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 13 Sep 2022 09:04:05 GMT
etag: "8b1ffbd4f9c44c447f9a11e92fbb9112"
server: AmazonS3
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: AfyrLxGlKNoXsjSvShOJ1QFm2rrv76iJaqEsgbMoQU-1oTsr3wJz-Q==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
age: 3456855
x-served-by: cache-bma1621-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 274181
x-timer: S1667642173.226983,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29884
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ydpth.com/content/53d83096-2e5b-4571-a727-a2d2bfa5588e
200 OK 10 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ydpth.com/content/53d83096-2e5b-4571-a727-a2d2bfa5588e
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c40b04e23f7c9e1ca767a20c26c3c98d
18052ad26e45df3c14a7a153e187c9b1f107635b
7eb2d00240c67bc386c1b6cc681933fd5ad59fba13d2bf4f76c1cf29c28b51ce
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ydpth.com/content/53d83096-2e5b-4571-a727-a2d2bfa5588e HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 516087236951930975525742047583685714279,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 516087236951930975525742047583685714279,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
etag: "3c70c4527a1e1c1f1df04b5f253f38fd"
last-modified: Sun, 09 Oct 2022 12:01:30 GMT
req-referer: https://www.iefimerida.gr/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 5837bd7fcd2eb6f651e5a071c8f0c78a
x-envoy-upstream-service-time: 1777
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
age: 1290330
x-served-by: cache-iad-kcgs7200083-IAD, cache-iad-kcgs7200026-IAD, cache-lax10659-LGB, cache-iad-kiad7000143-IAD, cache-bma1621-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 6, 1
x-timer: S1667642173.232771,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ydpth.com/content/53d83096-2e5b-4571-a727-a2d2bfa5588e
x-vcl-time-ms: 1
content-length: 9972
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 0297e4ba69a2f0ef4e90845d5d13bf10
a8164f8f28dbbdd345f8914a525e405aa29470df
4331f2930f87391047796e7a31bdd5c1066b379a2e74077be9c047a007fd7189
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3054
Cache-Control: max-age=162814
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Etag: "6366004d-139"
Expires: Mon, 07 Nov 2022 07:09:47 GMT
Last-Modified: Sat, 05 Nov 2022 06:18:53 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 313
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
vidstat.taboola.com/lite-unit/3.9.5/UnitWidgetItemDesktop.min.js
304 Not Modified 0 B URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.5/UnitWidgetItemDesktop.min.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lite-unit/3.9.5/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Tue, 13 Sep 2022 09:04:05 GMT
If-None-Match: "8b1ffbd4f9c44c447f9a11e92fbb9112"
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
cache-control: public, max-age=2592000
etag: "8b1ffbd4f9c44c447f9a11e92fbb9112"
age: 3456855
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 274182
x-timer: S1667642173.307346,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
X-Firefox-Spdy: h2
15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic&encoded=1&uid=c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1667642171762&tagid=&cntry=NO&platform=1&sesid=a31d520f914dba3dcfbd0df9eae94725&itemid=/t290-topic&viewid=1667642171143&geolat=&geoing=&deviceifa=&appid=&sd=v2_a31d520f914dba3dcfbd0df9eae94725_c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc_1667642172_1667642172_CNawjgYQ3pxDGIe-4LnEMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=d1d26b502af58aceadc485da5d7d9ea0&appname=&cdb=&gdprApplies=true&rid=&sii=7325140959921166540&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=9057
200 OK 18 kB URL HTTP/2 15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic&encoded=1&uid=c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1667642171762&tagid=&cntry=NO&platform=1&sesid=a31d520f914dba3dcfbd0df9eae94725&itemid=/t290-topic&viewid=1667642171143&geolat=&geoing=&deviceifa=&appid=&sd=v2_a31d520f914dba3dcfbd0df9eae94725_c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc_1667642172_1667642172_CNawjgYQ3pxDGIe-4LnEMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=d1d26b502af58aceadc485da5d7d9ea0&appname=&cdb=&gdprApplies=true&rid=&sii=7325140959921166540&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=9057
IP
Hash 850e21b191601e4c3217994ebc2b9579
128fd97fd74355a433965fa7f01e326bd2e1b4d1
fb8928427c294aeb73c0980298d799f812a59d2a0312dd49f6fdecda890dcc35
GET /tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic&encoded=1&uid=c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1667642171762&tagid=&cntry=NO&platform=1&sesid=a31d520f914dba3dcfbd0df9eae94725&itemid=/t290-topic&viewid=1667642171143&geolat=&geoing=&deviceifa=&appid=&sd=v2_a31d520f914dba3dcfbd0df9eae94725_c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc_1667642172_1667642172_CNawjgYQ3pxDGIe-4LnEMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=d1d26b502af58aceadc485da5d7d9ea0&appname=&cdb=&gdprApplies=true&rid=&sii=7325140959921166540&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=9057 HTTP/1.1
Host: 15.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
machineid: 1415
link: <https://am-wf.taboola.com>; rel=preconnect
xvid-debug: mrmr - :
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642173.236008,VS0,VE32
vary: Accept-Encoding
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/dee8febbb55d97e326ae4964c2eb10e1.jpg
200 OK 11 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/dee8febbb55d97e326ae4964c2eb10e1.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 53ddac6aca39a36610ca3d051c5ce951
c6541a8066184b5935135694a1b1be8cb63c9566
06a0b72e0169e0ddcf338bb10e0093b20f280460f545b7a36efdc89fbdbce56e
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/dee8febbb55d97e326ae4964c2eb10e1.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 294556995286209157657378174422657474531,375193695950208390837068086851925791917,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 294556995286209157657378174422657474531,375193695950208390837068086851925791917,29ecf9b93bbf306179626feeda1fab70
etag: "6ea8e0ba9262802e93ba79ff4acdc176"
expiration: expiry-date="Fri, 30 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 30 Aug 2022 01:08:38 GMT
req-referer: https://www.r2sports.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 98
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
age: 3949724
x-served-by: cache-iad-kjyo7100055-IAD, cache-iad-kcgs7200135-IAD, cache-lga21962-LGA, cache-iad-kiad7000027-IAD, cache-bma1621-BMA
x-cache: MISS, HIT, HIT, HIT, HIT
x-cache-hits: 0, 1, 1, 57, 1
x-timer: S1667642173.333009,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/dee8febbb55d97e326ae4964c2eb10e1.jpg
x-vcl-time-ms: 1
content-length: 10674
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f70/18/12/20/13/uou10.jpg
200 OK 3.9 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f70/18/12/20/13/uou10.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c9dbd7144500d4a5a8f9294079c0acea
46061279b5984b4922d50fcf16333d4355cfed1e
89214f7fb343b54d1ebc88f84e199909f0cb6b4825d12e089976e11ed03bd98b
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f70/18/12/20/13/uou10.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 613669426550226744769788410621596759672,511320169514815208339615988714053385614,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 613669426550226744769788410621596759672,511320169514815208339615988714053385614,29ecf9b93bbf306179626feeda1fab70
etag: "644ba62d20de87506b162a0124ab0675"
last-modified: Thu, 15 Sep 2022 07:08:25 GMT
req-referer: https://ra7maa.alafdal.net/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: cb59f05743d3efb486a59b9d7b8fc7ad
x-envoy-upstream-service-time: 118
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb202
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
age: 3253573
x-served-by: cache-iad-kjyo7100115-IAD, cache-iad-kcgs7200032-IAD, cache-sna10747-LGB, cache-iad-kiad7000053-IAD, cache-bma1621-BMA
x-cache: HIT, MISS, MISS, HIT, HIT
x-cache-hits: 1, 0, 0, 18, 1
x-timer: S1667642173.333334,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f70/18/12/20/13/uou10.jpg
x-vcl-time-ms: 2
content-length: 3868
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
200 OK 6.9 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 533f27c281775d8e675efc6f7acbb926
e0c22182564a2e6a8baecbb42ec2f4c4bddf5d7d
df80c7998129893b24f4824fa731c2d9150b38bdfa5fd6ef6d18c5aef22c8f47
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 549930644253185078118877309127813515040,375193695950208390837068086851925791917,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 549930644253185078118877309127813515040,375193695950208390837068086851925791917,29ecf9b93bbf306179626feeda1fab70
etag: "7f920b3bedfff0d6ad2c2b73907059a4"
last-modified: Thu, 25 Aug 2022 23:15:18 GMT
req-referer: https://wwwdae.yoo7.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 4eddb726ef9e8e6e250c557c47cc4e8a
x-envoy-upstream-service-time: 786
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
age: 4128340
x-served-by: cache-iad-kcgs7200067-IAD, cache-iad-kjyo7100136-IAD, cache-lga21977-LGA, cache-iad-kcgs7200059-IAD, cache-bma1621-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 67, 10
x-timer: S1667642173.360369,VS0,VE0
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
x-vcl-time-ms: 0
content-length: 6862
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif
200 OK 272 B URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x167, components 1\012- data
Hash 6970d663f6822e6d60f734650a8dc55b
b175ce758501840bd5558f098192b0125f347f69
38a1756b7e6f9d531ed45244eed89b1a4cbbc7c313cc0df5f7678edf8531efbd
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 576314129693928467953438700423355769068,375193695950208390837068086851925791917,29ecf9b93bbf306179626feeda1fab70
content-type: image/jpeg
edge-cache-tag: 576314129693928467953438700423355769068,375193695950208390837068086851925791917,29ecf9b93bbf306179626feeda1fab70
etag: "6970d663f6822e6d60f734650a8dc55b"
expiration: expiry-date="Fri, 14 Oct 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 13 Sep 2022 18:17:04 GMT
server: cloudinary
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-backend-name: CLOUDINARY:3FP7YNX3LMizprTZsG7BSW--F_addr_taboola_res_cloudinary_com
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
age: 4213060
x-served-by: cache-iad-kcgs7200110-IAD, cache-iad-kcgs7200110-IAD, cache-bma1621-BMA
x-cache: HIT, HIT, HIT
x-cache-hits: 1, 47, 1
x-timer: S1667642173.362122,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_167%2Cw_200%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif
x-vcl-time-ms: 1
content-length: 272
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7445
Expires: Sat, 05 Nov 2022 12:00:18 GMT
Date: Sat, 05 Nov 2022 09:56:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7445
Expires: Sat, 05 Nov 2022 12:00:18 GMT
Date: Sat, 05 Nov 2022 09:56:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7445
Expires: Sat, 05 Nov 2022 12:00:18 GMT
Date: Sat, 05 Nov 2022 09:56:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7445
Expires: Sat, 05 Nov 2022 12:00:18 GMT
Date: Sat, 05 Nov 2022 09:56:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3819323-4f77-4bb2-bbbb-6926d5bc62aa.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3819323-4f77-4bb2-bbbb-6926d5bc62aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ee20d59c5ac266f8eb9c47057271a10
61dc4e78907f114519ff3fdd3c806b36557ab744
2cba117cfe96fa5e1b53981f98d42eb3e5f956083c3435a1d44d1d40784614bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3819323-4f77-4bb2-bbbb-6926d5bc62aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11427
x-amzn-requestid: 0dcc7ef4-d7fa-492e-8ddf-4342b4bc44e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHxJGJZoAMFWlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365866d-7c3de2ed509a640f37c52843;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:38:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gAHLlJ0JzB6TfEUNw_sCNmrjMK-EX1hZbCY34i99xQok7R-wvcpqug==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:59:04 GMT
age: 43029
etag: "61dc4e78907f114519ff3fdd3c806b36557ab744"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca6c7517d7015fbc35fa290c1c2d6afd
594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c
a746b36be50209915a0e5657abd219aab382eee4b7556142aa1316daf3a9f5a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: f2e39db1-fb8a-4a9b-8a1d-ee08000ddeb6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC1VyFHuIAMF5Eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636435be-7a03ef677f8dbd680f72de90;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: SjV-J5oBG_0qHy-SE7_K9kj_MMjAee4JZva3thJf8On3ejAA1n1tfg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:53:04 GMT
age: 43389
etag: "594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 16 kB IP
File type ASCII text, with very long lines (13017), with no line terminators
Hash c57e7cd30da2ca1b12438d3cb0ad044c
f8547821aa212e559c1afb527f63cf02c9b72ddf
0e74c562e18b5cec344a43e4ec1a249ddb89cef2053ccbd920f21c98fd7d7aed
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 2011
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L9%2BEMxoIi91Y19suV9n4ltRDxdk6CK8Q5odx8zvCyd5xzm%2F5oeN6BU89onT6GK5G%2BmxTlG9hKgMk845mr8R5RHiAFQ9mGV62sOs%2FX5TXxaWtNLPMW47ZvsSgg4pZ%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7dbcffffab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f29b126-c6e5-4528-8307-e3c7fe12e225.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f29b126-c6e5-4528-8307-e3c7fe12e225.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 308da46611df43543d31ca502986bea2
0bf4de356c3a64785fe116161cb931b3b2476f5d
63996962e2763dcf2e0ae5e43aa12dfd8f8677082bb1cdf63528dfd00404f3e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f29b126-c6e5-4528-8307-e3c7fe12e225.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7619
x-amzn-requestid: 67308248-e660-4294-aafe-5f178970f822
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHlcHHfIAMFyGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63658622-5b1ee875554a05eb1e8a6f16;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:37:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Qn6QTO-5bR2vT6wtmHT2zVZX556_FUz6ImAWK3O8hc8xSJ9XmNM96w==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:48:46 GMT
age: 43647
etag: "0bf4de356c3a64785fe116161cb931b3b2476f5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877911e5-70a1-471d-b418-3ee8665daf00.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877911e5-70a1-471d-b418-3ee8665daf00.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f787d03ccf6f14f05b9fb00149a92f49
0d3c7535f83ced168b1efb0f849e353de31d40db
bda8d5d8dee8c1b3b9a0dd81407bc920a3a2a737dceaaebf75e8554ef1cdcec8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877911e5-70a1-471d-b418-3ee8665daf00.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8016
x-amzn-requestid: 971369d4-3728-4fef-9d82-794fd184d26d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC0S3FbeIAMFceg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63643412-0efd014e4b25ed9c4aed13cb;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZPGScUHAZtgr_egNkJ2bOzK_ftHSd0Yr1U_S7jYUelg56FCtTOC2TA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:53:09 GMT
age: 43384
etag: "0d3c7535f83ced168b1efb0f849e353de31d40db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff202f1f7-a6da-431c-9f04-b00a53780a8c.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff202f1f7-a6da-431c-9f04-b00a53780a8c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 683264508686ad18ae519baac54d3b05
1897c9fcad301764736ab867491beb18526af153
e8beb5d336ca424e36725ab87b98b4dedcf32a5b01c43b9c06363a7be25522fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff202f1f7-a6da-431c-9f04-b00a53780a8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5754
x-amzn-requestid: df2c5b88-0444-44b1-81ef-04e565d25b36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bAS--GiUoAMFTjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636331f9-0ec90f4d5f0c6fcf2d6e4a8b;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 03:14:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7CdkFTu--etXnoftDB8IYx3G6NIDBbKNiomZXVQQpr8et2Qh9yUGoQ==
via: 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 03:37:11 GMT
age: 22742
etag: "1897c9fcad301764736ab867491beb18526af153"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.771&type=info&msg=Finish%20Rendering%20728x90%20Thumbnails&llvl=2&id=1903&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.771&type=info&msg=Finish%20Rendering%20728x90%20Thumbnails&llvl=2&id=1903&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.771&type=info&msg=Finish%20Rendering%20728x90%20Thumbnails&llvl=2&id=1903&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76572
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.876&type=info&msg=Finish%20Rendering%20Below%20Desktop%20Forum%20Thumbnails&llvl=2&id=7232&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.876&type=info&msg=Finish%20Rendering%20Below%20Desktop%20Forum%20Thumbnails&llvl=2&id=7232&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.876&type=info&msg=Finish%20Rendering%20Below%20Desktop%20Forum%20Thumbnails&llvl=2&id=7232&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76572
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.919&type=warn&msg=video%20tag%20loader%20-%20didn%27t%20find%20enough%20sponsored%20items%20for%20integrated%20widget%20replacement&llvl=2&id=7039&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.919&type=warn&msg=video%20tag%20loader%20-%20didn%27t%20find%20enough%20sponsored%20items%20for%20integrated%20widget%20replacement&llvl=2&id=7039&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.919&type=warn&msg=video%20tag%20loader%20-%20didn%27t%20find%20enough%20sponsored%20items%20for%20integrated%20widget%20replacement&llvl=2&id=7039&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76572
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.726&type=info&msg=Start%20Rendering%20Below%20Desktop%20Forum%20Thumbnails&llvl=2&id=6595&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.726&type=info&msg=Start%20Rendering%20Below%20Desktop%20Forum%20Thumbnails&llvl=2&id=6595&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.726&type=info&msg=Start%20Rendering%20Below%20Desktop%20Forum%20Thumbnails&llvl=2&id=6595&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76572
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.698&type=info&msg=Start%20Rendering%20728x90%20Thumbnails&llvl=2&id=671&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.698&type=info&msg=Start%20Rendering%20728x90%20Thumbnails&llvl=2&id=671&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.698&type=info&msg=Start%20Rendering%20728x90%20Thumbnails&llvl=2&id=671&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76572
access-control-allow-credentials: true
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.704&type=info&msg=Finish%20Rendering%20728x90%20Thumbnails&llvl=2&id=8424&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.704&type=info&msg=Finish%20Rendering%20728x90%20Thumbnails&llvl=2&id=8424&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.704&type=info&msg=Finish%20Rendering%20728x90%20Thumbnails&llvl=2&id=8424&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76572
access-control-allow-credentials: true
X-Firefox-Spdy: h2
alza3eem.ahlamontada.net/sw.js
200 OK 2.1 kB URL HTTP/2 alza3eem.ahlamontada.net/sw.js
IP
File type ASCII text, with very long lines (5459)
Hash 19fb572e4442ad975dced9d82a9500c3
7d77c7b861599f16d6a9fede8158aad89a72d596
643f5af8b9bc291bf7af78c540d4255ccf06d6dc23ff1b17ff9365e6364bed9d
GET /sw.js HTTP/1.1
Host: alza3eem.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/t290-topic
Connection: keep-alive
Cookie: exadd=166765; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; _ga=GA1.2.69931805.1667642171; _gid=GA1.2.579729525.1667642171; _gat_gtag_UA_144347007_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/javascript
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 94898a5c83e253b402235230d778fdac
ec20d74ddd9be61a9a8d33f03fe8f3265bc80d23
0f9c3487c8ffee3da7ea64803e9f0b002c2fd9876130ca612538e9751ae23e39
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 339
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://alza3eem.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 05 Nov 2022 09:56:13 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&cmcv=&pix=31589837&cb=1667642172157&uv=3239&tms=1667642172157&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1667642169282!ts:1667642172157&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&cmcv=&pix=31589837&cb=1667642172157&uv=3239&tms=1667642172157&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1667642169282!ts:1667642172157&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&cmcv=&pix=31589837&cb=1667642172157&uv=3239&tms=1667642172157&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1667642169282!ts:1667642172157&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
content-length: 0
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.859&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=757&cv=20221102-48-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=09%3A56%3A11.859&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=757&cv=20221102-48-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=09%3A56%3A11.859&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=757&cv=20221102-48-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
x-fastly-to-nlb-rtt: 76580
access-control-allow-credentials: true
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=31589837&cb=1667642172196&uv=3239&tms=1667642172196&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1667642169282!ts:1667642172195&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=31589837&cb=1667642172196&uv=3239&tms=1667642172196&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1667642169282!ts:1667642172195&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=31589837&cb=1667642172196&uv=3239&tms=1667642172196&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1667642169282!ts:1667642172195&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
content-length: 0
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=332&height=186&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1667642172201&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1334273715&tz=0&viewable=true&ddast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
200 OK 8.9 kB URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=332&height=186&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1667642172201&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1334273715&tz=0&viewable=true&ddast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
IP
Hash d8e02b256f4d96fabf3cc265288ff48a
fffb200e429dfd0f30446d738142f672f2752f3e
e7511aa04ce2e87865e4633b84fa135c2e1fe112afff0fb525c5cb095949d1d5
POST /VideoBidRequestHandlerServlet?oid=15&width=332&height=186&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1667642172201&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1334273715&tz=0&viewable=true&ddast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1456
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.678788,VS0,VE48
vary: Accept-Encoding
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/units/32_3_9/infra/cmTagWIDGET_ITEM.js
200 OK 128 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_3_9/infra/cmTagWIDGET_ITEM.js
IP
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Size 128 kB (127663 bytes)
Hash ed6a7be4b07d1653940edf3b59561b62
e86457f6d9ef3ef5fec8a050d56af827c9196a13
acf67360b42eaaba607d73f434c457b3200388b5e62e4e91d984d7e9d6d35172
GET /vpaid/units/32_3_9/infra/cmTagWIDGET_ITEM.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 4XCKL71V4KhsoHyueX5jpjHsfDsjxykDhjiYcY77zYUxGJieqBjvCotMWQmIVh7NEI0bxQTkd+w=
x-amz-request-id: S3DTXRQWZQ29XXKX
last-modified: Thu, 27 Oct 2022 07:33:46 GMT
etag: "ed6a7be4b07d1653940edf3b59561b62"
x-amz-meta-ctime: 1666856025
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1666856024
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
age: 785883
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 87109
x-timer: S1667642174.767010,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 127663
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 18b538ed688bffbc9cd4e886a07970dc
94985ba0232b3d6f20c535fd875408aa88f5e969
38b8ff50944474b3a311e2bef0359b3bab939900b8d70b48987a5062883d65b9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 209
Cache-Control: max-age=134414
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Etag: "63659c7b-1d7"
Expires: Sun, 06 Nov 2022 23:16:27 GMT
Last-Modified: Fri, 04 Nov 2022 23:12:59 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 18b538ed688bffbc9cd4e886a07970dc
94985ba0232b3d6f20c535fd875408aa88f5e969
38b8ff50944474b3a311e2bef0359b3bab939900b8d70b48987a5062883d65b9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6352
Cache-Control: max-age=140558
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Etag: "63659c7b-1d7"
Expires: Mon, 07 Nov 2022 00:58:51 GMT
Last-Modified: Fri, 04 Nov 2022 23:12:59 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 18b538ed688bffbc9cd4e886a07970dc
94985ba0232b3d6f20c535fd875408aa88f5e969
38b8ff50944474b3a311e2bef0359b3bab939900b8d70b48987a5062883d65b9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6352
Cache-Control: max-age=140558
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Etag: "63659c7b-1d7"
Expires: Mon, 07 Nov 2022 00:58:51 GMT
Last-Modified: Fri, 04 Nov 2022 23:12:59 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 18b538ed688bffbc9cd4e886a07970dc
94985ba0232b3d6f20c535fd875408aa88f5e969
38b8ff50944474b3a311e2bef0359b3bab939900b8d70b48987a5062883d65b9
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 209
Cache-Control: max-age=134414
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:13 GMT
Etag: "63659c7b-1d7"
Expires: Sun, 06 Nov 2022 23:16:27 GMT
Last-Modified: Fri, 04 Nov 2022 23:12:59 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 09:56:13 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=155ea683-5cf0-11ed-bc48-1d66682b0206; expires=Sat, 03-Dec-2022 09:56:13 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=155ea6fe-5cf0-11ed-bc48-1d66682b0206
X-fe: 19
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 09:56:13 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=1568b68c-5cf0-11ed-8d25-175cf56a0306; expires=Sat, 03-Dec-2022 09:56:13 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568b6dd-5cf0-11ed-8d25-175cf56a0306
X-fe: 24
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 09:56:13 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=156901f7-5cf0-11ed-bb24-18c6427b0406; expires=Sat, 03-Dec-2022 09:56:13 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1569022e-5cf0-11ed-bb24-18c6427b0406
X-fe: 108
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 09:56:13 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=1568faf1-5cf0-11ed-9077-1ee5b9e10506; expires=Sat, 03-Dec-2022 09:56:13 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568fb36-5cf0-11ed-9077-1ee5b9e10506
X-fe: 113
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=155ea6fe-5cf0-11ed-bc48-1d66682b0206
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=155ea6fe-5cf0-11ed-bc48-1d66682b0206
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=155ea6fe-5cf0-11ed-bc48-1d66682b0206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 05 Nov 2022 09:56:13 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=1568f36e-5cf0-11ed-825b-197e22df0406; expires=Sat, 03-Dec-2022 09:56:13 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 30
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1667642172175&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1334273715&tz=0&viewable=true&ddast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
200 OK 88 kB URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1667642172175&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1334273715&tz=0&viewable=true&ddast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
IP
Hash 56980b3990df687d50f0cea11f2e3cfe
c3a4bcc1c6b26267459628249f5f0aea35246c48
c72e12c4b5676f2491c2a44661464ee634eec2f6da3e451f9a61312249322e14
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1667642172175&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1334273715&tz=0&viewable=true&ddast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1472
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:14 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.677894,VS0,VE345
vary: Accept-Encoding
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568b6dd-5cf0-11ed-8d25-175cf56a0306
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568b6dd-5cf0-11ed-8d25-175cf56a0306
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568b6dd-5cf0-11ed-8d25-175cf56a0306 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=158a83bf-5cf0-11ed-807a-1d21b9eb0106; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 73
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
vidstatb.taboola.com/vid/blackScreen5.mp4
206 Partial Content 91 kB URL HTTP/2 vidstatb.taboola.com/vid/blackScreen5.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash b2b087fe4ae638c533731c347fcd4df8
62851c888c21bb51cc04f13b6fc0451279fe0425
0407dafc112212a135d1aa4dd9b40ba0208c6bb6b1959f5535af093254189d66
GET /vid/blackScreen5.mp4 HTTP/1.1
Host: vidstatb.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Sun, 02 Jul 2017 20:40:57 GMT
etag: "b2b087fe4ae638c533731c347fcd4df8"
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1497790207
server: AmazonS3
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: gopM2XYfUoVUFmJXQ0440-QEF6IoAyvdLK0EUOquu3M35zK6ZGLwLg==
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:14 GMT
age: 1054938
x-served-by: cache-bma1621-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 106599
x-timer: S1667642174.167804,VS0,VE0
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-range: bytes 0-90783/90784
content-length: 90784
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1569022e-5cf0-11ed-bb24-18c6427b0406
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1569022e-5cf0-11ed-bb24-18c6427b0406
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1569022e-5cf0-11ed-bb24-18c6427b0406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=158aa9e5-5cf0-11ed-b697-14f0ef8b0306; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 101
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568fb36-5cf0-11ed-9077-1ee5b9e10506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568fb36-5cf0-11ed-9077-1ee5b9e10506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=1568fb36-5cf0-11ed-9077-1ee5b9e10506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=158af22a-5cf0-11ed-a35f-1984e64b0106; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 114
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=158c1579-5cf0-11ed-bb14-1fe3cd8f0106; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=158c15d6-5cf0-11ed-bb14-1fe3cd8f0106
X-fe: 23
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
trc.taboola.com/forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=288f8d48415c8e465c44bc7f826f51a5&sd=v2_a31d520f914dba3dcfbd0df9eae94725_c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc_1667642172_1667642172_CNawjgYQ3pxDGIe-4LnEMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc&pi=/t290-topic&wi=7325140959921166540&pt=text&vi=1667642171143&li=rbox-t2m<=deflated&tim=09%3A56%3A12.710&id=6819&llvl=2&cv=20221102-48-RELEASE&
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=288f8d48415c8e465c44bc7f826f51a5&sd=v2_a31d520f914dba3dcfbd0df9eae94725_c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc_1667642172_1667642172_CNawjgYQ3pxDGIe-4LnEMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc&pi=/t290-topic&wi=7325140959921166540&pt=text&vi=1667642171143&li=rbox-t2m<=deflated&tim=09%3A56%3A12.710&id=6819&llvl=2&cv=20221102-48-RELEASE&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=288f8d48415c8e465c44bc7f826f51a5&sd=v2_a31d520f914dba3dcfbd0df9eae94725_c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc_1667642172_1667642172_CNawjgYQ3pxDGIe-4LnEMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=c61b64d4-afca-41ce-a38c-938ca6f4fb76-tucta5fb8bc&pi=/t290-topic&wi=7325140959921166540&pt=text&vi=1667642171143&li=rbox-t2m<=deflated&tim=09%3A56%3A12.710&id=6819&llvl=2&cv=20221102-48-RELEASE& HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:14 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.155887,VS0,VE80
x-vcl-time-ms: 80
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=158c15d6-5cf0-11ed-bb14-1fe3cd8f0106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=158c15d6-5cf0-11ed-bb14-1fe3cd8f0106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=158c15d6-5cf0-11ed-bb14-1fe3cd8f0106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=1594e760-5cf0-11ed-855b-1be234f70406; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 142
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 98651fb043c460c5acabc9c377e99373
abc9843ed89faebe63dc041cc3d33ccd88f9ce5c
9e6d29683170fc1aa5a7080f9497dd14369152c7bfd61af2a9a32544a57e292a
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 09 Nov 2022 07:59:03 GMT
ETag: "abc9843ed89faebe63dc041cc3d33ccd88f9ce5c"
Last-Modified: Sat, 05 Nov 2022 07:59:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 197
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7654b7e4fd8bb51e-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash d82c05303099a87c4e3183baa9b4c44c
6bd70a1f572a12e130874a3d93032bcd74f4af07
b634e237c197dadd26534f4d7416a82be5db8087f2f5c57ae37f07578ce61ad4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1699
Cache-Control: max-age=103470
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 09:56:14 GMT
Etag: "63651dc9-1d7"
Expires: Sun, 06 Nov 2022 14:40:44 GMT
Last-Modified: Fri, 04 Nov 2022 14:12:25 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:14 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3717
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:14 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.221837,VS0,VE82
x-vcl-time-ms: 82
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2335
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:14 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.228584,VS0,VE86
x-vcl-time-ms: 86
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2f75d606d78f1bb1899625dd8cf247a7
2a29750c52f72412d1cfcb75ee403c1c75ad30f6
227d7501f2b10c85afbee42f15b770372301d3cd7832558533fbbfc6f3e78536
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 05 Nov 2022 01:56:50 GMT
Expires: Sat, 12 Nov 2022 01:56:49 GMT
Etag: "2a29750c52f72412d1cfcb75ee403c1c75ad30f6"
Cache-Control: max-age=575434,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7654b7e538580b39-OSL
am-match.taboola.com/sync?dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&excid=22&docw=0&cijs=1&nlb=true
200 OK 928 B URL HTTP/2 am-match.taboola.com/sync?dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (928), with no line terminators
Hash 17403b41f415b7b0edb59f52e33e8fb2
ba381a8361ae5b781f0c6c318c714083f03335a5
cee951f16e0c0a2483c94e07da6adfd3b4549ce3279979a6c9c054b4f4d7c1cf
GET /sync?dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:14 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Length: 43
Connection: keep-alive
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:14 GMT
via: 1.1 varnish
age: 8662
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 658
x-timer: S1667642174.431916,VS0,VE0
cache-control: private,max-age=31536000
abp: 17
content-length: 254
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 60b37b1ce0ea7f9a04bf9eec64fa73fe
507a0f17e5b756b20838b49aff384835ca968e60
28ca7eb3e77fa07567f814724043863d3037112b46e10f504604f756d6500bd5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111572
Date: Sat, 05 Nov 2022 09:56:14 GMT
Etag: "63653a14-1d7"
Expires: Sun, 06 Nov 2022 16:55:46 GMT
Last-Modified: Fri, 04 Nov 2022 16:13:08 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: c9AP01FEsjNXCENojPQQukzek1oBKOFZIN_hgPQCi0Qq4707Yh_Yog==
Age: 2558
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Length: 43
Connection: keep-alive
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 05 Nov 2022 09:56:14 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBD4zZmMCEAe7uFNn_8zwDfMh102s97YFEgEBAQGEZ2NwYwAAAAAA_eMAAA&S=AQAAAuapiCTIsPU5oT9uGonwRXE; Expires=Sun, 5 Nov 2023 15:56:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=15ba07bf-5cf0-11ed-aabf-14604df00106; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=15ba07ff-5cf0-11ed-aabf-14604df00106
X-fe: 20
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=15ba07ff-5cf0-11ed-aabf-14604df00106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=15ba07ff-5cf0-11ed-aabf-14604df00106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=15ba07ff-5cf0-11ed-aabf-14604df00106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 05 Nov 2022 09:56:14 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=15bff718-5cf0-11ed-9eba-18c6427b0206; expires=Sat, 03-Dec-2022 09:56:14 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 108
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:14 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=120&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=&cb=1667642172594&uv=3239&tms=1667642172594&su=&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t120!t45!ufm_vA&ft=0&unm=WIDGET_ITEM&mntl=1&
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=120&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=&cb=1667642172594&uv=3239&tms=1667642172594&su=&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t120!t45!ufm_vA&ft=0&unm=WIDGET_ITEM&mntl=1&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=120&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=&cb=1667642172594&uv=3239&tms=1667642172594&su=&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t120!t45!ufm_vA&ft=0&unm=WIDGET_ITEM&mntl=1& HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:14 GMT
content-length: 0
X-Firefox-Spdy: h2
cdn.taboola.com/scripts/cds-pips.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/scripts/cds-pips.js
IP
File type ASCII text, with very long lines (3545), with no line terminators
Hash 780c5c514014519ce276709f515905a0
04fe86d00b9c9077effe05171d066d243ecab221
015db06150b62ad2ad533883652174ebb6f07e24a7147fdac01a0ccd266e3f30
GET /scripts/cds-pips.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2KBeU0d7OyPXtZDYUoIqlTBmhGhsve90tjYoemCxISjKQrNgcxT28sPXVt5KfJt+6r7dFoJgA8g=
x-amz-request-id: NFWGDQGY1WQ95XHE
x-amz-replication-status: COMPLETED
last-modified: Wed, 12 Oct 2022 13:57:57 GMT
etag: "383fa66d2a0a09f4a6e64a9593ad43bb"
x-amz-version-id: z5FoayaLm_Bvew3pbkytkoHczFCvkPwT
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:15 GMT
via: 1.1 varnish
age: 3254
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 28594
x-timer: S1667642175.133565,VS0,VE0
vary: Accept-Encoding
abp: 17
cache-control: private, max-age=3600
content-length: 1340
X-Firefox-Spdy: h2
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://alza3eem.ahlamontada.net
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=e1c42768b0cb4231be092cbd7938b482&zoneId=2308013&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=e1c42768b0cb4231be092cbd7938b482&zoneId=2308013&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 15a4b3ae9c9821f10eeaa500ff65ee80
17361900a92b5052b50d289d3ff7555b0bd8d51a
ba35e36f14813b08236485bb12bb423f6d47b7fa1ce32b0582094268abd13483
GET /gid.js?pub=0&userId=e1c42768b0cb4231be092cbd7938b482&zoneId=2308013&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Cookie: ID=e35316b92cfe45ffbc5a9012d0a38302
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:19 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=e35316b92cfe45ffbc5a9012d0a38302; expires=Sun, 05 Nov 2023 09:56:19 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:14 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3401
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:14 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-1e444"
expires: Sun, 06 Nov 2022 09:56:11 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=alza3eem.ahlamontada.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=alza3eem.ahlamontada.net
IP
GET /syncframe?origin=publishertag&topUrl=alza3eem.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=f48075d7-a825-4820-bae6-68ad6e6934ee; expires=Thu, 30 Nov 2023 09:56:11 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 733544
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=undefined&cb=1667642172196&uv=3239&tms=1667642172196&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=55f41e80-b55d-4b8e-b06f-afa4dd8b8b56&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=undefined&cb=1667642172196&uv=3239&tms=1667642172196&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=55f41e80-b55d-4b8e-b06f-afa4dd8b8b56&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&cmcv=&pix=undefined&cb=1667642172196&uv=3239&tms=1667642172196&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=55f41e80-b55d-4b8e-b06f-afa4dd8b8b56&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.656442,VS0,VE29
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/trc/3/json?tim=09%3A56%3A11.147<i=deflated&data=%7B%22id%22%3A538%2C%22ii%22%3A%22%2Ft290-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1667480673762%2C%22vi%22%3A1667642171143%2C%22cv%22%3A%2220221102-48-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic%22%2C%22vpi%22%3A%22%2Ft290-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A7431%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A348.3999938964844%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A7392.39990234375%2C%22mw%22%3A854.4000244140625%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft290-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/trc/3/json?tim=09%3A56%3A11.147<i=deflated&data=%7B%22id%22%3A538%2C%22ii%22%3A%22%2Ft290-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1667480673762%2C%22vi%22%3A1667642171143%2C%22cv%22%3A%2220221102-48-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic%22%2C%22vpi%22%3A%22%2Ft290-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A7431%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A348.3999938964844%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A7392.39990234375%2C%22mw%22%3A854.4000244140625%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft290-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
GET /forumotion-ar/trc/3/json?tim=09%3A56%3A11.147<i=deflated&data=%7B%22id%22%3A538%2C%22ii%22%3A%22%2Ft290-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1667480673762%2C%22vi%22%3A1667642171143%2C%22cv%22%3A%2220221102-48-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Falza3eem.ahlamontada.net%2Ft290-topic%22%2C%22vpi%22%3A%22%2Ft290-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A7431%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A348.3999938964844%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A7392.39990234375%2C%22mw%22%3A854.4000244140625%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft290-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642173.666069,VS0,VE431
vary: Accept-Encoding
x-vcl-time-ms: 431
X-Firefox-Spdy: h2
illiweb.com/rs3/63/frm/embed/FA_Embed.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/63/frm/embed/FA_Embed.js
IP
GET /rs3/63/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Fri, 08 Sep 2023 08:06:07 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 5017803
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x%2B9K5bYTCPrQJdr3%2BHM6ZFWPHBd%2FdkFCT9%2Fy4gBVrx9eELVE7dxYrg91nLPnPrpqJ5EvCHoDWIJqUMgVOned%2BlyMUX%2FbrRrcxjVebEk2otYXXAn5XbWEuyNIxmdxJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d56c511c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
200 OK 0 B URL HTTP/2 connect.topicit.net/scripts/connect.js
IP
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 5150
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G7zuXpTOIP%2FzIWGQaO41PTPHVQR9c2bno2g2nPu41a66k5BRoR5%2FiqkqveA%2FxXjjgU6nki6oyaj9HZZWuT07zrEFVLsTGDOG3MxSKpO3ULOISZiV68y97t2Rwd%2B7pFT%2BP6J1HgDv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7654b7d81bf21bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.402
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.402
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/universal.min.js?v=3.1.402 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://alza3eem.ahlamontada.net/
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:02:54 GMT
etag: W/"63626a7e-180b9"
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3407
X-Firefox-Spdy: h2
alza3eem.ahlamontada.net/t290-topic
200 OK 0 B URL HTTP/2 alza3eem.ahlamontada.net/t290-topic
IP
GET /t290-topic HTTP/1.1
Host: alza3eem.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: text/html; charset=windows-1256
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache
pragma: no-cache
expires: Sat, 05 Nov 2022 00:00:00 GMT
last-modified: Sat, 05 Nov 2022 09:56:11 GMT
vary: User-Agent
set-cookie: exadd=166765; expires=Sat, 05-Nov-2022 13:56:11 GMT; Max-Age=14400
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
stootsou.net/pfe/current/tag.min.js?z=2308013
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/tag.min.js?z=2308013
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/tag.min.js?z=2308013 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:02:54 GMT
etag: W/"63626a7e-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&cmcv=&pix=undefined&cb=1667642172158&uv=3239&tms=1667642172158&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=88e0c1dd-a4e8-453f-96a9-9ac7a67b3983&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&cmcv=&pix=undefined&cb=1667642172158&uv=3239&tms=1667642172158&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=88e0c1dd-a4e8-453f-96a9-9ac7a67b3983&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&cmcv=&pix=undefined&cb=1667642172158&uv=3239&tms=1667642172158&abt=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=88e0c1dd-a4e8-453f-96a9-9ac7a67b3983&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:13 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642174.608443,VS0,VE24
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&excid=22&docw=0&cijs=1&nlb=true
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 09:56:13 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:12 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 511379
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=332&height=186&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1667642177768&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=1049945457&tz=0&viewable=true&ddast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t120!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=332&height=186&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1667642177768&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=1049945457&tz=0&viewable=true&ddast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t120!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=332&height=186&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1667642177768&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=1049945457&tz=0&viewable=true&ddast=V73nQCFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJLWamRYr42Atca1GbtHEuHJLDLOZW2FzmEYm48Q4cc2GQBIL22S3sQ3XgtVmsxathsu1wuWwuEUr22Iwc1icG5dtCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eoXZ-vCsXG67wmh2uP1208PksMtdpr_oshysRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKjgsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgADCI5yTnzAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IeBYj12Qwcy5GI4vDM_LYLCbDyOZcOVzO0W6y2p5QrGR6a2YXYZ-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMGNbTGyjkWmtsHkcbtFi43IrPMONW7kZbhy2mWlm8c3WotfH9HDNLMaJx4uCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu-4ZnMXJNBjPnYjSyODwjj81iMoxszpXD5RztJqt9x7aY2EYj01ph8zjcosXG5VZ4hhu3cjPcOGwz08zim61Fr4_p4ZpZjBOPvzGb7WajyWI32Tdms91sNFnsJvsOneG7-pyNzuB44jFZbtGY7mJzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBORY2SZTVyDycLmGi48LofJYxquRg7XyDdyrhyGiViiNF2kE73oshysRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-5PPbIK6Noi9W4ZKgh54zA2c3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DLXGi1As_cvET5GC1Gw!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t120!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1436
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642179.212102,VS0,VE124
vary: Accept-Encoding
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1667642177940&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=1711327639&tz=0&viewable=true&ddast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1667642177940&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=1711327639&tz=0&viewable=true&ddast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1667642177940&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=1711327639&tz=0&viewable=true&ddast=V7FqICFgP8vR_eZeITGAT8vR_eZeITGAUAAAAGBuIHJDhcGTaOkcmtMK2Ma9FqM3MrZwvnWrnw-Ba23cSzHG6GQILDlWHjGJncCtPKuBatNjO3crZwrpULj29h2008y-FmChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq8wWx-elcttVxjNDrffbnqYHHa5y_QXXZaDtehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDtWh8Rqks6thEBclFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEB4hFPClqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XAwnPYuSaDGbOxWhkcXhGHpvFZBjZnCuHyznaTVbbE4qVTG_N7CLsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHCjG0xsY1GprXC5nG4RYuNy63wDDdu5Wa4cdhmppnFN1uLXh_TwzWzGCceLwoGbOxF8rRIJ5LhcGYcmYajxWpjXJlmq41pNPH4ZsbJbOZaLFwTsURzskgnssu-4VmMXJPBzLkYjSwOz8hjs5gMI5tz5XA5R7vJat-xLSa20ci0Vtg8DrdosXG5FZ7hxq3cDDcO28w0s_hma9HrY3q4ZhbjxONvzGa72Wiy2E32jdlsNxtNFrvJvkNn-K4-Z6MzOJ54TJZbNKa72BwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuiwHa9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f-qRVUDXFql3y1BByBuHsZmLGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H2iJE6Ve-JGLnyAHq90A!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=aat1_vA!mprdctdt6_vA!smbs!spa2_vA!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Falza3eem.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://alza3eem.ahlamontada.net
Connection: keep-alive
Referer: https://alza3eem.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1470
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://alza3eem.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Sat, 05 Nov 2022 09:56:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1667642179.383866,VS0,VE215
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 60604
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=o1SJuF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzZWJxNXRYTWxKcjFpbkQ5ZEtwUVROSQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 09:56:11 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=Uc0PxF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czA0V1RkMDM4cmMycmIyQyUyQkxHNTFzY0pCb205WDR4bGMlMkY5eE9xJTJGNUkyV3E; expires=Thu, 30 Nov 2023 09:56:12 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 375725
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
94.23.159.185
151.101.85.44
23.111.9.57
178.250.2.146
52.209.240.119
141.226.228.48
104.21.63.213
185.106.33.48
3.64.28.4
23.36.77.32