Overview

URL wagna.ahlamontada.net/f60-montada
IP94.23.150.222
ASNOVH SAS
Location Netherlands
Report completed2022-09-27 14:36:12 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-27 2 cdn.betgorebysson.club/apu.php?zoneid=3765907 Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (59)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS www.googletagmanager.com (2) 75 2012-12-25 14:52:06 UTC 2022-09-27 04:52:54 UTC 142.250.74.72
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-27 04:53:14 UTC 142.250.74.164
mnemonic passive DNS wf.taboola.com (4) 2328 2017-03-01 15:03:50 UTC 2022-09-27 08:38:54 UTC 151.101.85.44
mnemonic passive DNS csm.nl.eu.criteo.net (1) 6830 2017-01-30 04:55:08 UTC 2022-09-27 13:35:11 UTC 178.250.2.150
mnemonic passive DNS wagna.ahlamontada.net (7) 0 2013-09-06 16:38:13 UTC 2022-08-29 12:38:30 UTC 178.33.43.150 Domain (ahlamontada.net) ranked at: 86428
mnemonic passive DNS api.viglink.com (6) 4397 2012-05-23 13:47:26 UTC 2022-09-27 07:13:21 UTC 34.248.7.88
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-09-27 09:44:42 UTC 104.18.32.68
mnemonic passive DNS am-vid-events.taboola.com (2) 11733 2020-04-26 14:32:16 UTC 2022-09-27 05:00:47 UTC 141.226.228.48
mnemonic passive DNS illiweb.com (7) 265462 2020-08-31 12:13:55 UTC 2022-09-27 07:13:20 UTC 172.67.150.97
mnemonic passive DNS ocsp.pki.goog (11) 175 2017-06-14 07:23:31 UTC 2022-09-27 04:53:14 UTC 142.250.74.3
mnemonic passive DNS gum.criteo.com (7) 381 2015-01-22 10:58:57 UTC 2022-09-27 09:43:38 UTC 178.250.2.146
mnemonic passive DNS www.google-analytics.com (3) 40 2012-10-03 01:04:21 UTC 2022-09-27 07:51:08 UTC 142.250.74.174
mnemonic passive DNS www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-09-27 05:08:12 UTC 142.250.74.3
mnemonic passive DNS status.geotrust.com (2) 3662 2017-12-01 08:55:31 UTC 2022-09-27 04:53:05 UTC 93.184.220.29
mnemonic passive DNS taboola-supply-partners.tremorhub.com (1) 3369 2018-12-02 13:13:18 UTC 2022-09-27 08:32:56 UTC 54.92.133.28
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-27 05:14:54 UTC 52.38.227.80
mnemonic passive DNS match.adsrvr.org (2) 349 2012-08-07 19:20:17 UTC 2022-09-27 05:00:47 UTC 3.33.220.150
mnemonic passive DNS wagna.ahlamontada.net (7) 0 2013-09-06 16:38:13 UTC 2022-08-29 12:38:30 UTC 178.33.115.32 Domain (ahlamontada.net) ranked at: 86428
mnemonic passive DNS i.servimg.com (5) 258270 2015-07-24 09:25:42 UTC 2022-09-27 12:21:59 UTC 104.21.31.159
mnemonic passive DNS trc-events.taboola.com (2) 1779 2020-06-09 13:52:57 UTC 2022-09-27 05:10:48 UTC 141.226.228.48
mnemonic passive DNS ocsp.digicert.com (19) 86 2012-05-21 07:02:23 UTC 2022-09-27 09:08:20 UTC 93.184.220.29
mnemonic passive DNS cdn.taboola.com (5) 1040 2013-07-19 23:48:03 UTC 2022-09-27 05:42:48 UTC 151.101.85.44
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-09-27 04:38:43 UTC 157.240.200.35
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-27 04:52:22 UTC 64.233.162.155
mnemonic passive DNS images.taboola.com (6) 1621 2013-07-11 09:17:44 UTC 2022-09-27 05:10:54 UTC 151.101.85.44
mnemonic passive DNS trc.taboola.com (2) 602 2013-07-11 10:17:31 UTC 2022-09-27 04:54:23 UTC 151.101.85.44
mnemonic passive DNS my.rtmark.net (1) 9054 2017-08-22 14:11:49 UTC 2022-09-27 04:54:13 UTC 139.45.195.8
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
mnemonic passive DNS img03.arabsh.com (1) 0 2014-01-22 15:25:41 UTC 2020-04-29 16:50:57 UTC 172.67.218.33 Domain (arabsh.com) ranked at: 37691
mnemonic passive DNS sync.search.spotxchange.com (10) 523 2014-05-29 23:15:03 UTC 2022-09-27 05:00:47 UTC 185.94.180.126
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-27 11:41:54 UTC 143.204.55.36
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-27 04:52:33 UTC 34.117.237.239
mnemonic passive DNS stootsou.net (8) 145219 2021-04-05 08:22:21 UTC 2022-09-27 08:44:53 UTC 139.45.197.250
mnemonic passive DNS il-trc-events.taboola.com (4) 22667 2021-06-17 07:23:06 UTC 2022-09-27 11:51:43 UTC 185.106.33.48
mnemonic passive DNS ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-09-27 05:00:30 UTC 104.18.20.226
mnemonic passive DNS static.criteo.net (1) 652 2015-06-24 06:04:54 UTC 2022-09-27 06:26:24 UTC 178.250.0.130
mnemonic passive DNS ajax.googleapis.com (1) 12905 2014-10-18 20:16:48 UTC 2022-09-27 11:26:26 UTC 142.250.74.10
mnemonic passive DNS 2img.net (9) 212398 2016-06-23 06:31:49 UTC 2022-09-27 12:17:26 UTC 172.64.111.19
mnemonic passive DNS ocsp.comodoca4.com (1) 23611 2014-10-06 13:20:48 UTC 2022-09-27 06:26:23 UTC 104.18.32.68
mnemonic passive DNS img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-09-27 12:12:33 UTC 34.120.237.76
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-27 05:14:54 UTC 143.204.55.35
mnemonic passive DNS connect.facebook.net (2) 139 2012-05-22 02:51:28 UTC 2022-09-27 04:52:24 UTC 157.240.200.14
mnemonic passive DNS arabsh.com (1) 37691 2012-06-03 10:14:58 UTC 2022-09-19 11:01:05 UTC 172.67.218.33
mnemonic passive DNS vidstatb.taboola.com (1) 8893 2017-10-08 16:05:45 UTC 2022-09-27 11:49:50 UTC 151.101.85.44
mnemonic passive DNS pips.taboola.com (1) 1840 2021-02-15 14:32:07 UTC 2022-09-27 04:54:25 UTC 151.101.85.44
mnemonic passive DNS gem.gbc.criteo.com (2) 6039 2019-02-06 06:21:41 UTC 2022-09-27 05:32:15 UTC 185.235.84.209
mnemonic passive DNS vidstat.taboola.com (2) 1927 2017-08-29 11:41:42 UTC 2022-09-27 08:38:52 UTC 151.101.85.44
mnemonic passive DNS x.bidswitch.net (2) 286 2017-08-28 15:21:00 UTC 2022-09-27 04:58:00 UTC 3.121.65.152
mnemonic passive DNS cds.taboola.com (1) 1068 2018-06-04 15:10:44 UTC 2022-09-27 06:44:36 UTC 141.226.224.32
mnemonic passive DNS connect.topicit.net (2) 523065 2019-08-12 09:46:32 UTC 2022-09-27 12:21:59 UTC 172.67.158.56
mnemonic passive DNS ups.analytics.yahoo.com (4) 287 2019-05-09 15:57:40 UTC 2022-09-27 04:58:00 UTC 18.156.0.31
mnemonic passive DNS twemoji.maxcdn.com (1) 9109 2017-01-30 05:01:32 UTC 2022-09-27 05:29:16 UTC 23.111.9.57
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-27 04:52:25 UTC 23.36.76.226
mnemonic passive DNS dnacdn.net (2) 3760 2019-09-02 15:07:45 UTC 2022-09-27 05:25:35 UTC 178.250.0.157
mnemonic passive DNS imprammp.taboola.com (2) 11978 2017-03-12 17:38:44 UTC 2022-09-27 11:31:07 UTC 151.101.85.44
mnemonic passive DNS ag.gbc.criteo.com (2) 5925 2018-12-17 13:17:41 UTC 2022-09-27 05:32:15 UTC 178.250.6.35
mnemonic passive DNS cdn.betgorebysson.club (1) 149925 2020-07-24 15:19:13 UTC 2022-09-27 12:22:00 UTC 139.45.195.8
mnemonic passive DNS 15.taboola.com (1) 1912 2017-03-15 11:40:55 UTC 2022-09-27 04:44:17 UTC 151.101.85.44
mnemonic passive DNS am-match.taboola.com (3) 12278 2020-03-18 14:33:10 UTC 2022-09-27 08:38:53 UTC 141.226.228.48


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 94.23.150.222

Date UQ / IDS / BL URL IP
2022-12-03 14:12:10 +0000
0 - 0 - 1 almraw3h.yoo7.com/t988-topic 94.23.150.222
2022-12-03 01:14:33 +0000
0 - 0 - 1 unlimited.forumvi.com/http:/unlimited.forumvi (...) 94.23.150.222
2022-11-22 23:43:14 +0000
0 - 0 - 2 marocbiblio.yoo7.com/t5203-topic 94.23.150.222
2022-11-16 11:09:14 +0000
0 - 0 - 8 pinkroose.yoo7.com/t2107-topic 94.23.150.222
2022-11-12 11:00:55 +0000
0 - 0 - 6 troy2.yoo7.com/t67-topic 94.23.150.222

Last 5 reports on ASN: OVH SAS

Date UQ / IDS / BL URL IP
2022-12-03 19:48:08 +0000
0 - 0 - 23 elmitec.es/ 164.132.108.127
2022-12-03 19:46:13 +0000
4 - 0 - 0 chronopost-service.ddns.net/client/login.php 217.182.38.2
2022-12-03 19:37:30 +0000
0 - 0 - 8 www.test.chat.gansmc.com/welcome 144.217.66.186
2022-12-03 19:37:12 +0000
0 - 0 - 9 www.test.chat.gansmc.com/ 144.217.66.186
2022-12-03 19:29:31 +0000
1 - 0 - 3 237792366283625.ga/ 162.19.138.79

Last 5 reports on domain: ahlamontada.net

Date UQ / IDS / BL URL IP
2022-11-10 12:58:59 +0000
0 - 0 - 10 atbara.ahlamontada.net/t7786-topic 178.33.43.178
2022-11-06 10:16:16 +0000
0 - 0 - 8 moontada.ahlamontada.net/t17-topic 178.33.115.32
2022-11-06 09:53:58 +0000
0 - 0 - 8 mayar.ahlamontada.net/t1411-topic 178.33.43.178
2022-11-05 09:56:23 +0000
0 - 0 - 5 alza3eem.ahlamontada.net/t290-topic 94.23.159.185
2022-10-24 13:25:29 +0000
0 - 0 - 2 kawtar.ahlamontada.net/t20-topic 94.23.76.111

No other reports with similar screenshot



JavaScript

Executed Scripts (63)


Executed Evals (5)

#1 JavaScript::Eval (size: 27082, repeated: 1) - SHA256: 705d1cb5e2f4f47479504438361475927d43d3fb8ca3b7ae86a19796a687dce9

                                        var isApp = false;

cmTag.set('version', '23_2_8');

cmTag.set('sync', 'https://am-match.taboola.com/sync?dast=V7P5QCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJDKcOBbGzcgt2k0Ga9HEuHErJ56ZWzibWUyr4W65WYyMQCLDiWNh3Izcot1ksBZNjBu3cuKZuYWzmcW0Gu6Wm8XIChE3GQ6fg4Go6Hpb7A6n2fOGFDSdDp_rXq97-OwOu8Jodrj9dtPD5LDLXaa_zDZYq_1208PksAMAAADAw____z8EAAAAQAQAAACABAAAAABFQMW_hcAFAAAAAMb___-_BsAnB8F7zn5_AAAAAIAAAAAAkAAMrAaUAHycr5z8_________8cM0GfeyPz____fGPQAPPgAPAgBAABcDLkjF5NjwoXkExVwFjECAAAA2NJS0Tya1AmVRdX__3-_FcAVAEDA4B8YFWGW7qDEWxgAAEDA2AI9LH6_2WHX-N0u-_________83-z_7RxN6G71OC2IZvVb7BQQAWPsFBABgUzcAgLcAuKAjaMVgsDqF2A1ni91othnNDgAAAODu____Xw9EnJPZcjazGAablWWwsMxmC8tqYzMsRhuLwzPxeM8-1FqBjF7BvS_iJsPhczAQFV1vi93hNHvuR9GS5W65W40mi9FoudzshpvRYH8CORsgRUsWq-VwtZssRpvFYrLcDUeTCVK0ZLVcLlebzWq1Gy1mg81yuNkgRatWs9FmMFzNJrPdbjUcDJejEVK0ZLlb7lajyWI0Wi43u-FmNBgijDl2C4fLMlkLV6PRWrTZTdzCmW20Vq2Gu5Vx4fFNdgu36PUxPSwb48zk2aJgAMdeJE-LdKKbzCab4Wq2WGwso4lhtFi5Zq6Za7AxLGcWw2I5EUs0J4t0IrvsK87JbDmbWQyDzcoyWFhms4VltbEZFqONxeGZePw1x27hcFkma-FqNFqLNruJWzizjdaq1XC3Mi48vslu4Ra9PqaHZWOcmTz7xmw2mgyXm9lm35jNRpPhcjPb7Dt0hu_qczY6g-OJx2QeezbXZ81hULgMFu_vc5E2o42bUaUNWyyqa3Hnmlh12tjJ2DmYDQrf31zaioPbyLnclxzEBoMilggu0onMb3m9_aan3-5WWC5iidJ0kU70MttgrfbbTQ-TwyKWCE4X6UT0Mp4u6j8y5GKuHMxFk7liNVolAAAAAAAAAIAlzJk3AQAAADgNZDTYDFfrPJDBcrBbrpYLAOHspfvzNnwLgVz1v3s6auXmug0JX9z4cYP5La-33_T0290Ky5UBHqjJmTd_Joi1Wi1rAAAAAWwAAIAAbt28BWAz8f____9xAAAAMnL0AAAA4vtAUSAAAAAAAPwDrRoM!&excid=22&docw=0&cijs=1&nlb=false');

cmTag.set("player.settings.kaxwnc", 0);


cmTag.setByCondition({
    conditions: [{
        key: "ep",
        val: 1
    }],
    settings: {
        isMultiAd: false
    }
});
cmTag.set("preset", {
    "level": 1
});
cmTag.set('player.settings.regx', '\x22\x64\x65\x6D\x61\x6E\x64\x53\x6F\x75\x72\x63\x65\x49\x64\x22\x3A\x35\x34\x36\x38\x34\x7C\x2E\x63\x6C\x65\x61\x72\x73\x74\x72\x65\x61\x6D\x2E\x74\x76\x7C\x2E\x63\x6C\x72\x73\x74\x6D\x2E\x63\x6F\x6D\x7C\x74\x6D\x2D\x70\x72\x6F\x6D\x6F\x2E\x73\x33\x2E\x61\x6D\x61\x7A\x6F\x6E\x61\x77\x73\x7C\x61\x64\x76\x65\x72\x74\x69\x73\x69\x6E\x67\x73\x74\x6F\x72\x79\x2E\x63\x6F\x6D\x7C\x6D\x65\x64\x69\x61\x67\x72\x6F\x75\x70\x61\x64\x73\x2E\x63\x6F\x6D\x7C\x65\x6C\x69\x74\x65\x6C\x6D\x65\x64\x69\x61\x61\x64\x76\x65\x72\x74\x69\x73\x69\x6E\x67\x2E\x63\x6F\x6D\x7C\x76\x65\x72\x74\x61\x6D\x65\x64\x69\x61\x2E\x63\x6F\x6D\x7C\x6D\x65\x64\x69\x61\x67\x72\x6F\x75\x70\x70\x72\x6F\x2E\x63\x6F\x6D\x7C\x68\x69\x67\x68\x72\x61\x74\x65\x64\x61\x64\x73\x2E\x63\x6F\x6D\x7C\x2E\x76\x69\x64\x65\x6F\x67\x72\x61\x6D\x6D\x69\x63\x2E\x63\x6F\x6D\x7C\x76\x69\x64\x65\x6F\x67\x72\x61\x6D\x6D\x69\x63\x2E\x63\x6F\x6D\x7C\x66\x69\x6C\x65\x73\x2E\x77\x65\x62\x76\x69\x64\x65\x6F\x67\x6C\x6F\x62\x61\x6C\x2E\x63\x6F\x6D\x7C\x77\x65\x62\x76\x69\x64\x65\x6F\x67\x6C\x6F\x62\x61\x6C\x2E\x63\x6F\x6D\x7C\x77\x65\x62\x6D\x65\x64\x69\x61\x61\x70\x70\x2E\x63\x6F\x6D\x66\x69\x6C\x65\x73\x2E\x77\x65\x62\x6D\x65\x64\x69\x61\x61\x70\x70\x2E\x63\x6F\x6D\x7C\x6D\x61\x72\x6B\x65\x74\x69\x6E\x67\x76\x69\x64\x65\x6F\x6E\x6F\x77\x2E\x63\x6F\x6D\x7C\x70\x6F\x70\x6F\x76\x69\x64\x65\x6F\x61\x64\x2E\x63\x6F\x6D\x7C\x64\x61\x66\x61\x63\x64\x64\x2E\x61\x73\x69\x61\x7C\x73\x62\x2E\x77\x69\x6E\x39\x39\x39\x77\x69\x6E\x2E\x63\x6F\x6D\x7C\x6E\x73\x73\x66\x2E\x63\x6F\x6D\x7C\x75\x70\x69\x65\x77\x2E\x63\x6F\x6D\x7C\x70\x69\x65\x77\x2E\x63\x6F\x6D\x7C\x76\x2E\x73\x68\x75\x6C\x63\x6F\x6E\x74\x2E\x63\x6F\x6D\x7C\x76\x2E\x61\x6C\x67\x6F\x76\x69\x64\x2E\x63\x6F\x6D\x7C\x76\x69\x64\x2E\x73\x70\x72\x69\x6E\x67\x73\x65\x72\x76\x65\x2E\x63\x6F\x6D\x7C\x70\x6D\x69\x2E\x63\x6F\x6D');

cmTag.set('player.settings.hjkbldomsencdd', ["dGFncy5ia3J0eC5jb20=", "bGlwaWthcl9ib2R5Y2FyZV9hd2FyZW5lc3M=", "Z2FjZG4=", "bWlycmEuaW8=", "YnJ0bWVkaWE=", "VUEtNTcwODQyNTctNw==", "Y29pbi1oaXZlLmNvbQ==", "YnVuZGxlLmNsZWFyc3RyZWFtLnR2", "LmNscnN0bS5jb20=", "dmlkZW8ubGVhZHp1LmNvbQ==", "LmxlYWR6dS5jb20=", "czAuMm1kbi5uZXQvYWRzL3JpY2htZWRpYS9zdHVkaW8vcHYyLzYwMTI4Njk2Lw==", "YWR2ZXJ0aXNpbmdzdG9yeS5jb20=", "bWVkaWFncm91cGFkcy5jb20=", "ZWxpdGVsbWVkaWFhZHZlcnRpc2luZy5jb20=", "dmVydGFtZWRpYS5jb20=", "bWVkaWFncm91cHByby5jb20=", "aGlnaHJhdGVkYWRzLmNvbQ==", "dmlkZW9ncmFtbWljLmNvbQ==", "bWFya2V0aW5ndmlkZW9ub3cuY29t", "c3RhdGljLm1hcmtldGluZ3ZpZGVvbm93LmNvbQ==", "ZmlsZXMud2VidmlkZW9nbG9iYWwuY29t", "d2VidmlkZW9nbG9iYWwuY29t", "d2VibWVkaWFhcHAuY29t", "ZmlsZXMud2VibWVkaWFhcHAuY29t", "cG9wb3ZpZGVvYWQuY29t", "c2Iudm9pY2VmaXZlLmNvbQ==", "b25lLm00ZGMuY29t", "dXBpZXcuY29t", "cGlldy5jb20=", "di5zaHVsY29udC5jb20=", "di5hbGdvdmlkLmNvbQ==", "dmlkLnNwcmluZ3NlcnZlLmNvbQ==", "cG1pLmNvbQ=="]);

cmTag.set('liteUnitVersion', '3.9.5');
cmTag.set('player.versions.vplayer', 'v14.8.3');
cmTag.set('player.settings.anltcsurlv2', '/vpaid/vpaidAnalytics.3.js');
cmTag.set('player.settings.anltcsurlv4', '/vpaid/vpaidAnalytics.40.js');
cmTag.set('player.settings.hjkv1', '/vpaid/hjk.226.js');
cmTag.set('player.settings.dsu', '/vpaid/ds/188/dsm.js');
cmTag.set("player.settings.use_flash_player", false);
cmTag.set('player.settings.vidfkadldt', 100);
cmTag.set('player.settings.mintimwf', 5000);
cmTag.set('player.settings.dlyimpnonmoatrv', true);
cmTag.set('player.settings.frgtadpxls', 0);
cmTag.set('player.settings.rprtwrpropntime', true);
cmTag.set('player.settings.slwcnctlngt', 10);
cmTag.set('player.settings.mnbfrsz', 0.25);
cmTag.set("player.settings.prftchmxlngth", 15);
cmTag.set('player.settings.adtrgtcss', true);
cmTag.set('player.settings.pvpd', 'javascript');
cmTag.set('player.settings.prbdjsv', '1.0.18');
cmTag.set('player.settings.prfrmncmsrmnts', true);
cmTag.set('player.settings.encwfrs', true);
cmTag.set('player.settings.prfrmdfl', 'javascript');
cmTag.set('elasticLogger.isActive', false);
cmTag.set('elasticLogger.maxEventsToLog', 500);
cmTag.set('player.settings.dpndonuntfrlgtoelstc', false);
cmTag.set('player.settings.qsrtscr', function(it, vpd) {
    if (vpd.alfrox === 0 && vpd.rpox > 0) {
        return ((vpd.requiredViewability << 30) | (vpd.priority << 16) | parseInt(vpd.rpox * 1000));
    }
    return ((vpd.requiredViewability << 30) | (vpd.priority << 16) | parseInt(vpd.alfrox * vpd.rpox * 1000));
});
cmTag.set("player.settings.updtcmpbfrwf", false);
cmTag.set("components.adChoice.isActive", false);
cmTag.set("timeBetweenAds", 0);
cmTag.set("canStartPlayer", true);
cmTag.set('isAnimateOnClose', true);
cmTag.set('isToggleIframeContent', true);
cmTag.set('isPWOV', true);
cmTag.set('secondsToCloseGlobal', 2700);
cmTag.set('pubViewabilityPercent', 0);
cmTag.set('trcPerformanceMeasurementEnabled', true);
cmTag.set('additionalCss', {
    'text-align': 'left'
});
cmTag.set('player.urls.contentVideosLocation', '//vidstatb.taboola.com/vid');
cmTag.set('player.urls.contentImagesLocation', '//vidstatb.taboola.com/vid/img');
cmTag.set('microServices.PMS.version', '3.2.2');
cmTag.set('unitsBaseUrl', '//vidstat.taboola.com/vpaid/units/');
cmTag.set('player.urls.vplayerLocation', '//vidstat.taboola.com/vpaid/vPlayer');
cmTag.set('hasSupportTool', true);
cmTag.set('bllblevt', '1,21,22,23,24,25,30,32,42');
cmTag.set('gaFactor', 10000);


var dsvr = "" || false;
cmTag.set("player.settings.dataSaver", false);
if (dsvr === 'on') {
    cmTag.set("player.settings.max_ready_vpaid", 4);
    cmTag.set("player.settings.mintimwf", 5000);
}

cmTag.set("countryIsoCode", "nor");
cmTag.setByCondition({
    conditions: [{
        key: 'countryIsoCode',
        val: 'tha'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'TH'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'countryIsoCode',
        val: 'ind'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'IN'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});




cmTag.set('version', '32_3_0');
cmTag.set('pixels.url', '//am-vid-events.taboola.com/st');
cmTag.set('pixels.unitLoadedWithFill.isFire', false);
cmTag.set('fireLoadUnitPixelsFactor', 10);
cmTag.set("secondsToClose", 120);
cmTag.set("adMaxPlaySeconds", 210);
cmTag.set('player.settings.prtct', '/vpaid/hjk.16.js');
cmTag.set('player.settings.cntonvfrc', false);
cmTag.set('player.settings.mxemptwf', 5);
cmTag.set('player.settings.ltmxemptwf', 5);
cmTag.set('player.settings.erlyai', true);
cmTag.set("player.settings.timbtopps", 5000);
cmTag.set('player.settings.frstlk', true);
cmTag.set('viewPercent', '50');
cmTag.set('timbtopps', 5000);
cmTag.set('cookieMatchActive', true);
cmTag.set('maxNonRvVimpsInQueue', 2);
cmTag.set('maxVimpsInQueue', 1);
cmTag.set('numOfWfUntilDcSwitch', 19);
cmTag.set('eligibilityValidator.isActive', false);
cmTag.set('eligibilityValidator.observers.mutation.isActive', true);
cmTag.set('eligibilityValidator.observers.mutation.isObserveParent', true);
cmTag.set('eligibilityValidator.isRvOnly', true);
cmTag.set('player.settings.rvfrquesttsemttr', 'any');
cmTag.set('pixels.overlayDetectedAfterImpression.factor', 20);
cmTag.set('animation', false);
cmTag.set('clsDetector.isActive', true);
// Browser and OS wurfl
cmTag.set("wurfl.os.name", "Linux");
cmTag.set("wurfl.os.version", "");
cmTag.set("wurfl.browser.name", "Firefox");
cmTag.set("wurfl.browser.version", "96");
cmTag.set("player.settings.wurfl.os.name", "Linux");
cmTag.set("player.settings.wurfl.os.version", "");
cmTag.set("player.settings.wurfl.browser.name", "Firefox");
cmTag.set("player.settings.wurfl.browser.version", "96");

cmTag.set('opps.detach.isFire', true);
cmTag.set('opps.attach.isFire', true);
cmTag.set("player.settings.sndvltopp", false);
cmTag.set('player.settings.tglifrmcntndsplyactv', true);
cmTag.set('player.settings.aduntldflbfruntld', true);
cmTag.set('player.settings.dtctprvtbrwsng', false);
cmTag.set('isUseNewViewabilityCalc', true);
cmTag.set('100viewPercent', 98);
cmTag.set('traceViewability100Seconds', 0);
cmTag.set('isChangePredictPointsWithAny', false);
cmTag.set('isCancelGetAdOnEligibilityLost.isActive', true);
cmTag.set('isCancelGetAdOnEligibilityLost.includeRVAny', true);
cmTag.set('isGetRv1OnlyForEligible.isActive', true);
cmTag.set('isGetRv1OnlyForEligible.delayPrediction', false);
cmTag.set('player.settings.vwclcflbkenbld', true);
cmTag.set('scrollEndTimeout', 500);
cmTag.set('player.settings.omid.isActive', true);

// Cookie sync predictor config
cmTag.set('predictors.time.cookieSync.isActive', true);
cmTag.set('predictors.time.cookieSync.lengthInSeconds', 20);
cmTag.set('predictors.time.cookieSync.repeat', 1);

cmTag.set('components.CloseButtonView.delay', 0);


cmTag.push = cmTag.push || function() {};

cmTag.set("player.settings.tmbtwfs", function(successes, failures, store) {
    if (failures > 45) {
        return 999;
    }
    return store.get('time_between_waterfall');
});


cmTag.set('player.settings.mntmbtwfsf', function(successes, failures, store) {
    if (failures > 45) {
        return 999000;
    }
    return store.get('mintimwf');
});
cmTag.set('unitThrottlerFiltered', "false");

cmTag.setByCondition({
    conditions: [{
        key: 'preset.level',
        val: 1
    }, {
        key: "unitThrottlerFiltered",
        val: true
    }],
    settings: {
        'preset.level': 3
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'countryIsoCode',
        val: 'bra'
    }],
    settings: {
        'player.settings.expxls.adimpression': 'https://sb.scorecardresearch.com/p?c1=2&c2=34311413&ns_ap_sv=2.1511.10&ns_type=hidden&ns_st_it=a&ns_st_sv=4.0.0&ns_st_ad=1&ns_st_sq=1&ns_st_id=%%impression_id%%&ns_st_ec=1&ns_st_cn=1&ns_st_ev=play&ns_st_ct=va00&ns_st_cl=%%duration%%&ns_st_pt=0&c3=2&c4=&c6=&ns_ts=%%timestamp%%',
        'player.settings.expxls.advideocomplete': 'https://sb.scorecardresearch.com/p?c1=2&c2=34311413&ns_ap_sv=2.1511.10&ns_type=hidden&ns_st_it=a&ns_st_sv=4.0.0&ns_st_ad=1&ns_st_sq=1&ns_st_id=%%impression_id%%&ns_st_ec=2&ns_st_cn=1&ns_st_ev=end&ns_st_ct=va00&ns_st_cl=%%duration%%&ns_st_pt=%%duration%%&c3=2&c4=&c6=&ns_ts=%%timestamp%%'
    }
});




if ('am' == 'la' || 'am' == 'LA') {
    cmTag.set('cm_predictors.time.cookieSync.isActive', false);
}

if ('am' == 'sg' || 'am' == 'SG') {
    cmTag.set('player.settings.wf_base_path', '//sg-wf.taboola.com');
}

if ('am' == 'hk' || 'am' == 'HK' || 'am' == 'ch' || 'am' == 'CH' || 'am' == 'us' || 'am' == 'US' || 'am' == 'la' || 'am' == 'LA') {
    cmTag.set('numOfWfUntilDcSwitch', 1);
    cmTag.set('player.settings.numOfWfUntilDcSwitch', 1);
}

if ('am' == 'am' || 'am' == 'AM') {
    cmTag.set('numOfWfUntilDcSwitch', 2);
    cmTag.set('player.settings.numOfWfUntilDcSwitch', 2);
}


cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 166717
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 1,
        'abTest': '166721b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 166717
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 1,
        'abTest': '166721b_vA'
    }
});

cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 292045
    }],
    settings: {
        "preroll.pubId": 208401,
        "preroll.pubTagId": 1047981,
        "midroll.pubId": 208401,
        "midroll.pubTagId": 1047981,
        "postroll.pubId": 208401,
        "postroll.pubTagId": 1047981,
        "pubId": 208401,
        "pubTagId": 1047981,
        "migratedwf": 2,
        'abTest': '166724b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 292045
    }],
    settings: {
        "preroll.pubId": 208401,
        "preroll.pubTagId": 1047981,
        "midroll.pubId": 208401,
        "midroll.pubTagId": 1047981,
        "postroll.pubId": 208401,
        "postroll.pubTagId": 1047981,
        "pubId": 208401,
        "pubTagId": 1047981,
        "migratedwf": 2,
        'abTest': '166724b_vA'
    }
});


cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 236525
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 3,
        'abTest': '166725b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 236525
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 3,
        'abTest': '166725b_vA'
    }
});


cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 198827
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 4,
        'abTest': '206725b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 198827
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 4,
        'abTest': '206725b_vA'
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'IL'
    }],
    settings: {
        'player.settings.optpwov': 0,
        'isPWOV': false,
        'onOutOfView': 'pause'
    }
});

cmTag.set("player.settings.frcmtfrms", true);
cmTag.set("player.settings.fire_piggies", true);
cmTag.set("secondsBW", 17);
cmTag.set("player.settings.adto", 300000);
cmTag.set("player.settings.vakll", 300000);
cmTag.set("noaop", 3);
cmTag.set("player.settings.rstmrai", true);
cmTag.set("player.settings.dsktmouttoadcmpltn", 30000);
cmTag.set("player.settings.mprdct", 0.033);
cmTag.set("category", "ShortContent");



cmTag.set('pixels.startWithABT.isFire', true);
cmTag.set('player.settings.mprdct', 0.025);
cmTag.push('abTest', 'mprdctdt6_vA');







cmTag.set('vForce.getAdTimeoutSeconds', 60);
cmTag.set('secondsToCloseGlobal', 0);
cmTag.set('predictors.distancePixels.isListenToScrollSpeedChange', true);
cmTag.set('predictors.playerReady.isActive', true);
cmTag.set('predictors.playerReady.predictPoint', 0);
cmTag.set('predictors.multiAd.isActive', true);
cmTag.set('predictors.multiAd.predictPoints.1.qState', 'q3');
cmTag.set('predictors.multiAd.predictPoints.0.qState', 'q1');
cmTag.set('predictors.getAdFail.isActive', true);
cmTag.set('predictors.distancePixels.isActive', true);
cmTag.set('predictors.distancePixels.predictPoints.1.pixelsFromSelectors', 10);
cmTag.set('vForce.isActive', true);
cmTag.set('isMultiAd', true);
cmTag.set('scrollEndTimeout', 500);
cmTag.set('playPriority.type', 'ppKey');
cmTag.set('playPriority.key', 1);
cmTag.set('isTestParentSelector', true);
cmTag.set('isReportToKibana', true);
cmTag.set('player.settings.rplvpdactv', true);
cmTag.set('player.settings.bllblevt', '1,21,22,23,24,25,30,32,42');
cmTag.set('bllblevt', '1,21,22,23,24,25,30,32,42');
cmTag.set('isOppsulaEnabled', true);
cmTag.set('microServices.oppsula.version', '1.4.4');
cmTag.set('psthdrs', 'text/plain');
cmTag.set('player.settings.cmbopps', true);
cmTag.set('cmbopps', true);
cmTag.set('verticalWidthThreshold', 480);
cmTag.set('predictors.distancePixels.maxPPS', 100);
cmTag.set('predictors.intersection.isActive', true);
cmTag.set('predictors.intersection.predictPoints.1.intersectionPercent', 50);
cmTag.set('predictors.intersection.isStartWF', true);
cmTag.set('predictors.emptyQueue.predictPoints', 0);
cmTag.set("predictors.getAdFail.allowedPredictPoints", 0);
cmTag.set('player.settings.vwclcflbkenbld', true);
cmTag.set('player.settings.dwnlnktrshld', 2);
cmTag.set('player.settings.frdwnlnkpxls', 1);
cmTag.set('player.settings.rmvrvlwntwrk', true);
cmTag.set('eligibilityValidator.isActive', false);
cmTag.set("components.adChoice.isTranslateText", false);
cmTag.set("components.Repeat.isTranslateText", true);
cmTag.set("language", "ar");
cmTag.set("player.settings.omidExcludedVendors", []);
cmTag.set("mediatypesArraySkippingViewableCheckAtSendOppMoment", [2]);
cmTag.set("stickyCard.restrictions.isActive.default", true);
cmTag.set("player.settings.externalDelayedEvents", ['AdImpression', 'AdVideoStart', 'AdStarted']);
cmTag.set('player.settings.jsDsbleErlyai', true);
cmTag.set('player.settings.frtbcmpaftrmtvw', false);


cmTag.set('sendBeacon', true);
cmTag.setByCondition({
    conditions: [{
        key: "iframeData.inDFP",
        val: true
    }],
    settings: {
        "isSkippedDistancePredict": true,
        "eligibilityValidator.isActive": false
    }
});
cmTag.setByCondition({
    conditions: [{
        key: 'frameType',
        val: 3
    }],
    settings: {
        'isChangePredictPointsWithAny': true,
        'predictors.intersection.isActive': true,
        'isUseAmpObserver': true,
        'eligibilityValidator.isActive': false
    }
});

cmTag.set("isStayInIframe", true);
cmTag.set("player.settings.disctxt", "");
cmTag.set('midrollTimeout', 3);
cmTag.set('isUseObserver', true);
cmTag.set('isCallIDLE', true);
cmTag.set("isKeepUnitOnMidroll", true);
cmTag.set('predictors.fullEligibility.isActive', true);
cmTag.set('predictors.fullEligibility.maxPPS', 50);
cmTag.set('predictors.distancePixels.maxPPS', 1);
cmTag.set('isForceStopObserver', true);
cmTag.set('isForceSwapToRV', true);
cmTag.set('components.nativeAd.isActive', true);
cmTag.set('floatingNAS.isActive', true);
cmTag.set('predictors.postRepeat.isActive', true);
var isApp = isApp || false;
if (!isApp) {
    cmTag.set('isRvPriority', false);
    cmTag.set('playPriority.isAlwaysWaitForRv', true);
    cmTag.set('playPriority.checkForRvPriority', 'pixelsFromSelector');
    cmTag.set('playPriority.pixelsFromSelector', 50);
    cmTag.set('playPriority.isAllowInIframes', true);
}

var isApp = isApp || false;
if (isApp) {
    cmTag.set("isInAppBridgeOn", true);
    cmTag.set("isUseObserver", false);
    cmTag.set('predictors.playerReady.predictPoint', [0, 0]);
}

cmTag.set('predictors.playerReady.isStartWF', true);
cmTag.set('isUseWidget', true);
cmTag.set('isStartWithLoader', true);
cmTag.set('components.adLoadingProgress.showProgressBar', true);
cmTag.set('predictors.playerReady.predictPoint', [0, 0]);
cmTag.set('animation.transitionAnimationTime', 0);
cmTag.set('predictors.intersection.isActive', false);

cmTag.setByCondition({
    conditions: [{
        key: 'isDisableSticky',
        val: true
    }],
    settings: {
        'stickyCard.isActive': false,
    }
});
cmTag.set("unitType", "WIDGET_ITEM");

cmTag.set("adMaxPlaySeconds", 210);

cmTag.setByCondition({
    conditions: [{
        key: "ep",
        val: "1"
    }],
    settings: {
        isMultiAd: false,
        volume: "onHover",
        isSoundOnHover: true,
        "components.CloseButtonView.hasCloseButton": false,
        "onOutOfView": "pause",
        "originId": 15,
        "preroll.pubId": 133128,
        "preroll.pubTagId": 779408,
        "midroll.pubId": 133128,
        "midroll.pubTagId": 779408,
        "postroll.pubId": 133128,
        "postroll.pubTagId": 779408,
        "pubId": 133128,
        "pubTagId": 779408,
        "player.settings.mprdct": 0,
        "player.settings.encwfrs": false,
        "player.settings.cmbopps": false,
        "abTest": "ep1_vA"
    }
});
if (window.conf300 == 1) {
    cmTag.set("urls.staticImage", "//cdn.cmeden.com/img/play_image_169.jpg");
}
cmTag.set("multiUnitManager.isActive", true);
cmTag.setByCondition({
    conditions: [{
        key: "player.versions.content",
        val: "26_1_18m"
    }],
    settings: {
        "player.versions.content": "14_10_18m"
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'IL'
    }],
    settings: {
        'stickyCard.isActive': false,
        'player.settings.optpwov': 0
    }
});





cmTag.set('pixels.startWithABT.isFire', true);
cmTag.push('abTest', 'spa2_vA');



cmTag.push('abTest', 'id5mc_vB');
cmTag.set('pixels.startWithABT.isFire', true);









// Roll out level 4 on amp
cmTag.setByCondition({
    conditions: [{
        key: 'frameType',
        val: 3
    }],
    settings: {
        'pubId': 383725,
        'pubTagId': 2077655,
        'preroll.pubId': 383725,
        'preroll.pubTagId': 2077655,
        'midroll.pubId': 383725,
        'midroll.pubTagId': 2077655,
        'postroll.pubId': 383725,
        'postroll.pubTagId': 2077655
    }
});









cmTag.push('abTest', 'Noappq22_vC');
cmTag.set('noaop', 5);
cmTag.set('player.settings.queue_size', 7);
cmTag.set('predictors.time.isActive', true);
cmTag.set('predictors.time.predictPoints', 0);
cmTag.set('predictors.time.lengthInSeconds', 5);
cmTag.set('predictors.time.repeat', 20);
cmTag.set('maxNonRvVimpsInQueue', 3);









cmTag.set('noaop', 5);
cmTag.set('player.settings.queue_size', 7);
cmTag.set('predictors.time.isActive', true);
cmTag.set('predictors.time.predictPoints', 0);
cmTag.set('predictors.time.lengthInSeconds', 5);
cmTag.set('predictors.time.repeat', 20);
cmTag.set('maxNonRvVimpsInQueue', 3);
cmTag.push('abTest', 'smbs');


cmTag.set("player.settings.volume", 0);
cmTag.setMacros({
    dast: "V7P5QCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJDKcOBbGzcgt2k0Ga9HEuHErJ56ZWzibWUyr4W65WYyMQCLDiWNh3Izcot1ksBZNjBu3cuKZuYWzmcW0Gu6Wm8XIChE3GQ6fg4Go6Hpb7A6n2fOGFDSdDp_rXq97-OwOu8Jodrj9dtPD5LDLXaa_zDZYq_1208PksAMAAADAw____z8EAAAAQAQAAACABAAAAABFQMW_hcAFAAAAAMb___-_BsAnB8F7zn5_AAAAAIAAAAAAkAAMrAaUAHycr5z8_________8cM0GfeyPz____fGPQAPPgAPAgBAABcDLkjF5NjwoXkExVwFjECAAAA2NJS0Tya1AmVRdX__3-_FcAVAEDA4B8YFWGW7qDEWxgAAEDA2AI9LH6_2WHX-N0u-_________83-z_7RxN6G71OC2IZvVb7BQQAWPsFBABgUzcAgLcAuKAjaMVgsDqF2A1ni91othnNDgAAAODu____Xw9EnJPZcjazGAablWWwsMxmC8tqYzMsRhuLwzPxeM8-1FqBjF7BvS_iJsPhczAQFV1vi93hNHvuR9GS5W65W40mi9FoudzshpvRYH8CORsgRUsWq-VwtZssRpvFYrLcDUeTCVK0ZLVcLlebzWq1Gy1mg81yuNkgRatWs9FmMFzNJrPdbjUcDJejEVK0ZLlb7lajyWI0Wi43u-FmNBgijDl2C4fLMlkLV6PRWrTZTdzCmW20Vq2Gu5Vx4fFNdgu36PUxPSwb48zk2aJgAMdeJE-LdKKbzCab4Wq2WGwso4lhtFi5Zq6Za7AxLGcWw2I5EUs0J4t0IrvsK87JbDmbWQyDzcoyWFhms4VltbEZFqONxeGZePw1x27hcFkma-FqNFqLNruJWzizjdaq1XC3Mi48vslu4Ra9PqaHZWOcmTz7xmw2mgyXm9lm35jNRpPhcjPb7Dt0hu_qczY6g-OJx2QeezbXZ81hULgMFu_vc5E2o42bUaUNWyyqa3Hnmlh12tjJ2DmYDQrf31zaioPbyLnclxzEBoMilggu0onMb3m9_aan3-5WWC5iidJ0kU70MttgrfbbTQ-TwyKWCE4X6UT0Mp4u6j8y5GKuHMxFk7liNVolAAAAAAAAAIAlzJk3AQAAADgNZDTYDFfrPJDBcrBbrpYLAOHspfvzNnwLgVz1v3s6auXmug0JX9z4cYP5La-33_T0290Ky5UBHqjJmTd_Joi1Wi1rAAAAAWwAAIAAbt28BWAz8f____9xAAAAMnL0AAAA4vtAUSAAAAAAAPwDrRoM!",
    dataCenter: "am",
    clickUrl: "",
    referrer: "https%3A%2F%2Fwagna.ahlamontada.net",
    cipid: "66361655",
    cmDast: "V7P5QCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJDKcOBbGzcgt2k0Ga9HEuHErJ56ZWzibWUyr4W65WYyMQCLDiWNh3Izcot1ksBZNjBu3cuKZuYWzmcW0Gu6Wm8XIChE3GQ6fg4Go6Hpb7A6n2fOGFDSdDp_rXq97-OwOu8Jodrj9dtPD5LDLXaa_zDZYq_1208PksAMAAADAw____z8EAAAAQAQAAACABAAAAABFQMW_hcAFAAAAAMb___-_BsAnB8F7zn5_AAAAAIAAAAAAkAAMrAaUAHycr5z8_________8cM0GfeyPz____fGPQAPPgAPAgBAABcDLkjF5NjwoXkExVwFjECAAAA2NJS0Tya1AmVRdX__3-_FcAVAEDA4B8YFWGW7qDEWxgAAEDA2AI9LH6_2WHX-N0u-_________83-z_7RxN6G71OC2IZvVb7BQQAWPsFBABgUzcAgLcAuKAjaMVgsDqF2A1ni91othnNDgAAAODu____Xw9EnJPZcjazGAablWWwsMxmC8tqYzMsRhuLwzPxeM8-1FqBjF7BvS_iJsPhczAQFV1vi93hNHvuR9GS5W65W40mi9FoudzshpvRYH8CORsgRUsWq-VwtZssRpvFYrLcDUeTCVK0ZLVcLlebzWq1Gy1mg81yuNkgRatWs9FmMFzNJrPdbjUcDJejEVK0ZLlb7lajyWI0Wi43u-FmNBgijDl2C4fLMlkLV6PRWrTZTdzCmW20Vq2Gu5Vx4fFNdgu36PUxPSwb48zk2aJgAMdeJE-LdKKbzCab4Wq2WGwso4lhtFi5Zq6Za7AxLGcWw2I5EUs0J4t0IrvsK87JbDmbWQyDzcoyWFhms4VltbEZFqONxeGZePw1x27hcFkma-FqNFqLNruJWzizjdaq1XC3Mi48vslu4Ra9PqaHZWOcmTz7xmw2mgyXm9lm35jNRpPhcjPb7Dt0hu_qczY6g-OJx2QeezbXZ81hULgMFu_vc5E2o42bUaUNWyyqa3Hnmlh12tjJ2DmYDQrf31zaioPbyLnclxzEBoMilggu0onMb3m9_aan3-5WWC5iidJ0kU70MttgrfbbTQ-TwyKWCE4X6UT0Mp4u6j8y5GKuHMxFk7liNVolAAAAAAAAAIAlzJk3AQAAADgNZDTYDFfrPJDBcrBbrpYLAOHspfvzNnwLgVz1v3s6auXmug0JX9z4cYP5La-33_T0290Ky5UBHqjJmTd_Joi1Wi1rAAAAAWwAAIAAbt28BWAz8f____9xAAAAMnL0AAAA4vtAUSAAAAAAAPwDrRoM!",
    tagId: "e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc",
    creativeId: "-1",
    baseReportD: "taboola.com",
    redId: "28b1a83d-4720-4b8c-9b3f-86fb4587931d",
    dtagid: "2090795",
    dpubid: "240385",
    vertical: "source",
    placement: "728x90 Thumbnails",
    lineItemId: "-1",
    oppsDataCenter: "am"
});
                                    

#2 JavaScript::Eval (size: 27040, repeated: 1) - SHA256: 7ce0a66e366558e0d4e1fc548a86701d2a714002a597e06f7cb383f408b33c00

                                        var isApp = false;

cmTag.set('version', '23_2_8');

cmTag.set('sync', 'https://am-match.taboola.com/sync?dast=V7JSUCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJGWZ-WajzcytWU42a9FwZXJLHIbRWmSc2Rwrl2-32EyGQFIz52K22CzXusXM5RZtXLa1wjByuYUbx2jlsjg2luFyCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjekoOl0-Fz3et3DZ3fYFUazw-23mx4mh13uMv1ltsFa7bebHiaHHQAAAAAeAKzeMiF-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAMSC40AD45CN5z9vsDAKBBCwQAIECABGBgNaAE4ON85QQAAAAAAAAAgOX___8_BmAPa0wGYGR_pwfgwQfggahAtIgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACBv_ArFrDAAAAAsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0NvodVoQy-i12i8gAMDaLyAAAJu6AQC8BcAFHUErBoPVKcRuOFvsRrPNaHYAAAAAd_____96IOKczJazmcUw2Kwsg4VlNltYVhubYTHaWByeicd79qHWCmT0Cu59HsIy-30HEcvzNf0NBxnf8nobREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNifQM4GSNGSxWo5XO0mi9FmsZgsd8PRZIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCGOO3cLhskzWwtVotBZtdhO3cGYbrVWr4W5lXHh8k93CLXp9TA_LxjgzebYoGMCxF8FFOpH5La-33_T0290Ky0Us0Zws0onssq84J7PlbGYxDDYry2Bhmc0WltXGZliMNhaHZ-Lx1xy7hcNlmayFq9FoLdrsJm7hzDZaq1bD3cq48Pgmu4Vb9PqYHpaNcWby7Buz2WgyXG5mm31jNhtNhsvNbLPv0Bm-q8_Z6AyOJx6TeezZXJ81h0HhMli8v89F2ow2bkaVNmyxqK7FnWti1WljJ2PnYDYofH9zaSsObiPncl9yEBsMilgiOF2kE9HLeLqIJZKnRToRLAwTx8zjHC1MFudsstusnDPnyDYc7TY258y0m4glStNFOtHLbIO12m83PUwOi_qPDLmYKwdz0WSuWI1WCQAAAAAAAABgCXPmTQAAAABOAxkNNsPVcgEgnL10f96GbyGQq_53T0et3Fy3IeGLGz9uML_l9fabnn67W2G5MsADNTnzZs8EsVarZQ0AACCADQAAEMCtm7cAbEZuHwiKi5mZmbmZf6BVgwE!&excid=22&docw=0&cijs=1&nlb=true');

cmTag.set("player.settings.kaxwnc", 0);


cmTag.setByCondition({
    conditions: [{
        key: "ep",
        val: 1
    }],
    settings: {
        isMultiAd: false
    }
});
cmTag.set("preset", {
    "level": 1
});
cmTag.set('player.settings.regx', '\x22\x64\x65\x6D\x61\x6E\x64\x53\x6F\x75\x72\x63\x65\x49\x64\x22\x3A\x35\x34\x36\x38\x34\x7C\x2E\x63\x6C\x65\x61\x72\x73\x74\x72\x65\x61\x6D\x2E\x74\x76\x7C\x2E\x63\x6C\x72\x73\x74\x6D\x2E\x63\x6F\x6D\x7C\x74\x6D\x2D\x70\x72\x6F\x6D\x6F\x2E\x73\x33\x2E\x61\x6D\x61\x7A\x6F\x6E\x61\x77\x73\x7C\x61\x64\x76\x65\x72\x74\x69\x73\x69\x6E\x67\x73\x74\x6F\x72\x79\x2E\x63\x6F\x6D\x7C\x6D\x65\x64\x69\x61\x67\x72\x6F\x75\x70\x61\x64\x73\x2E\x63\x6F\x6D\x7C\x65\x6C\x69\x74\x65\x6C\x6D\x65\x64\x69\x61\x61\x64\x76\x65\x72\x74\x69\x73\x69\x6E\x67\x2E\x63\x6F\x6D\x7C\x76\x65\x72\x74\x61\x6D\x65\x64\x69\x61\x2E\x63\x6F\x6D\x7C\x6D\x65\x64\x69\x61\x67\x72\x6F\x75\x70\x70\x72\x6F\x2E\x63\x6F\x6D\x7C\x68\x69\x67\x68\x72\x61\x74\x65\x64\x61\x64\x73\x2E\x63\x6F\x6D\x7C\x2E\x76\x69\x64\x65\x6F\x67\x72\x61\x6D\x6D\x69\x63\x2E\x63\x6F\x6D\x7C\x76\x69\x64\x65\x6F\x67\x72\x61\x6D\x6D\x69\x63\x2E\x63\x6F\x6D\x7C\x66\x69\x6C\x65\x73\x2E\x77\x65\x62\x76\x69\x64\x65\x6F\x67\x6C\x6F\x62\x61\x6C\x2E\x63\x6F\x6D\x7C\x77\x65\x62\x76\x69\x64\x65\x6F\x67\x6C\x6F\x62\x61\x6C\x2E\x63\x6F\x6D\x7C\x77\x65\x62\x6D\x65\x64\x69\x61\x61\x70\x70\x2E\x63\x6F\x6D\x66\x69\x6C\x65\x73\x2E\x77\x65\x62\x6D\x65\x64\x69\x61\x61\x70\x70\x2E\x63\x6F\x6D\x7C\x6D\x61\x72\x6B\x65\x74\x69\x6E\x67\x76\x69\x64\x65\x6F\x6E\x6F\x77\x2E\x63\x6F\x6D\x7C\x70\x6F\x70\x6F\x76\x69\x64\x65\x6F\x61\x64\x2E\x63\x6F\x6D\x7C\x64\x61\x66\x61\x63\x64\x64\x2E\x61\x73\x69\x61\x7C\x73\x62\x2E\x77\x69\x6E\x39\x39\x39\x77\x69\x6E\x2E\x63\x6F\x6D\x7C\x6E\x73\x73\x66\x2E\x63\x6F\x6D\x7C\x75\x70\x69\x65\x77\x2E\x63\x6F\x6D\x7C\x70\x69\x65\x77\x2E\x63\x6F\x6D\x7C\x76\x2E\x73\x68\x75\x6C\x63\x6F\x6E\x74\x2E\x63\x6F\x6D\x7C\x76\x2E\x61\x6C\x67\x6F\x76\x69\x64\x2E\x63\x6F\x6D\x7C\x76\x69\x64\x2E\x73\x70\x72\x69\x6E\x67\x73\x65\x72\x76\x65\x2E\x63\x6F\x6D\x7C\x70\x6D\x69\x2E\x63\x6F\x6D');

cmTag.set('player.settings.hjkbldomsencdd', ["dGFncy5ia3J0eC5jb20=", "bGlwaWthcl9ib2R5Y2FyZV9hd2FyZW5lc3M=", "Z2FjZG4=", "bWlycmEuaW8=", "YnJ0bWVkaWE=", "VUEtNTcwODQyNTctNw==", "Y29pbi1oaXZlLmNvbQ==", "YnVuZGxlLmNsZWFyc3RyZWFtLnR2", "LmNscnN0bS5jb20=", "dmlkZW8ubGVhZHp1LmNvbQ==", "LmxlYWR6dS5jb20=", "czAuMm1kbi5uZXQvYWRzL3JpY2htZWRpYS9zdHVkaW8vcHYyLzYwMTI4Njk2Lw==", "YWR2ZXJ0aXNpbmdzdG9yeS5jb20=", "bWVkaWFncm91cGFkcy5jb20=", "ZWxpdGVsbWVkaWFhZHZlcnRpc2luZy5jb20=", "dmVydGFtZWRpYS5jb20=", "bWVkaWFncm91cHByby5jb20=", "aGlnaHJhdGVkYWRzLmNvbQ==", "dmlkZW9ncmFtbWljLmNvbQ==", "bWFya2V0aW5ndmlkZW9ub3cuY29t", "c3RhdGljLm1hcmtldGluZ3ZpZGVvbm93LmNvbQ==", "ZmlsZXMud2VidmlkZW9nbG9iYWwuY29t", "d2VidmlkZW9nbG9iYWwuY29t", "d2VibWVkaWFhcHAuY29t", "ZmlsZXMud2VibWVkaWFhcHAuY29t", "cG9wb3ZpZGVvYWQuY29t", "c2Iudm9pY2VmaXZlLmNvbQ==", "b25lLm00ZGMuY29t", "dXBpZXcuY29t", "cGlldy5jb20=", "di5zaHVsY29udC5jb20=", "di5hbGdvdmlkLmNvbQ==", "dmlkLnNwcmluZ3NlcnZlLmNvbQ==", "cG1pLmNvbQ=="]);

cmTag.set('liteUnitVersion', '3.9.5');
cmTag.set('player.versions.vplayer', 'v14.8.3');
cmTag.set('player.settings.anltcsurlv2', '/vpaid/vpaidAnalytics.3.js');
cmTag.set('player.settings.anltcsurlv4', '/vpaid/vpaidAnalytics.40.js');
cmTag.set('player.settings.hjkv1', '/vpaid/hjk.226.js');
cmTag.set('player.settings.dsu', '/vpaid/ds/188/dsm.js');
cmTag.set("player.settings.use_flash_player", false);
cmTag.set('player.settings.vidfkadldt', 100);
cmTag.set('player.settings.mintimwf', 5000);
cmTag.set('player.settings.dlyimpnonmoatrv', true);
cmTag.set('player.settings.frgtadpxls', 0);
cmTag.set('player.settings.rprtwrpropntime', true);
cmTag.set('player.settings.slwcnctlngt', 10);
cmTag.set('player.settings.mnbfrsz', 0.25);
cmTag.set("player.settings.prftchmxlngth", 15);
cmTag.set('player.settings.adtrgtcss', true);
cmTag.set('player.settings.pvpd', 'javascript');
cmTag.set('player.settings.prbdjsv', '1.0.18');
cmTag.set('player.settings.prfrmncmsrmnts', true);
cmTag.set('player.settings.encwfrs', true);
cmTag.set('player.settings.prfrmdfl', 'javascript');
cmTag.set('elasticLogger.isActive', false);
cmTag.set('elasticLogger.maxEventsToLog', 500);
cmTag.set('player.settings.dpndonuntfrlgtoelstc', false);
cmTag.set('player.settings.qsrtscr', function(it, vpd) {
    if (vpd.alfrox === 0 && vpd.rpox > 0) {
        return ((vpd.requiredViewability << 30) | (vpd.priority << 16) | parseInt(vpd.rpox * 1000));
    }
    return ((vpd.requiredViewability << 30) | (vpd.priority << 16) | parseInt(vpd.alfrox * vpd.rpox * 1000));
});
cmTag.set("player.settings.updtcmpbfrwf", false);
cmTag.set("components.adChoice.isActive", false);
cmTag.set("timeBetweenAds", 0);
cmTag.set("canStartPlayer", true);
cmTag.set('isAnimateOnClose', true);
cmTag.set('isToggleIframeContent', true);
cmTag.set('isPWOV', true);
cmTag.set('secondsToCloseGlobal', 2700);
cmTag.set('pubViewabilityPercent', 0);
cmTag.set('trcPerformanceMeasurementEnabled', true);
cmTag.set('additionalCss', {
    'text-align': 'left'
});
cmTag.set('player.urls.contentVideosLocation', '//vidstatb.taboola.com/vid');
cmTag.set('player.urls.contentImagesLocation', '//vidstatb.taboola.com/vid/img');
cmTag.set('microServices.PMS.version', '3.2.2');
cmTag.set('unitsBaseUrl', '//vidstat.taboola.com/vpaid/units/');
cmTag.set('player.urls.vplayerLocation', '//vidstat.taboola.com/vpaid/vPlayer');
cmTag.set('hasSupportTool', true);
cmTag.set('bllblevt', '1,21,22,23,24,25,30,32,42');
cmTag.set('gaFactor', 10000);


var dsvr = "" || false;
cmTag.set("player.settings.dataSaver", false);
if (dsvr === 'on') {
    cmTag.set("player.settings.max_ready_vpaid", 4);
    cmTag.set("player.settings.mintimwf", 5000);
}

cmTag.set("countryIsoCode", "nor");
cmTag.setByCondition({
    conditions: [{
        key: 'countryIsoCode',
        val: 'tha'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'TH'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'countryIsoCode',
        val: 'ind'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'IN'
    }],
    settings: {
        'pubId': 165757,
        'pubTagId': 946347,
        'preroll.pubId': 165757,
        'preroll.pubTagId': 946347,
        'midroll.pubId': 165757,
        'midroll.pubTagId': 946347,
        'postroll.pubId': 165757,
        'postroll.pubTagId': 946347
    }
});




cmTag.set('version', '32_3_0');
cmTag.set('pixels.url', '//am-vid-events.taboola.com/st');
cmTag.set('pixels.unitLoadedWithFill.isFire', false);
cmTag.set('fireLoadUnitPixelsFactor', 10);
cmTag.set("secondsToClose", 120);
cmTag.set("adMaxPlaySeconds", 210);
cmTag.set('player.settings.prtct', '/vpaid/hjk.16.js');
cmTag.set('player.settings.cntonvfrc', false);
cmTag.set('player.settings.mxemptwf', 5);
cmTag.set('player.settings.ltmxemptwf', 5);
cmTag.set('player.settings.erlyai', true);
cmTag.set("player.settings.timbtopps", 5000);
cmTag.set('player.settings.frstlk', true);
cmTag.set('viewPercent', '50');
cmTag.set('timbtopps', 5000);
cmTag.set('cookieMatchActive', true);
cmTag.set('maxNonRvVimpsInQueue', 2);
cmTag.set('maxVimpsInQueue', 1);
cmTag.set('numOfWfUntilDcSwitch', 19);
cmTag.set('eligibilityValidator.isActive', false);
cmTag.set('eligibilityValidator.observers.mutation.isActive', true);
cmTag.set('eligibilityValidator.observers.mutation.isObserveParent', true);
cmTag.set('eligibilityValidator.isRvOnly', true);
cmTag.set('player.settings.rvfrquesttsemttr', 'any');
cmTag.set('pixels.overlayDetectedAfterImpression.factor', 20);
cmTag.set('animation', false);
cmTag.set('clsDetector.isActive', true);
// Browser and OS wurfl
cmTag.set("wurfl.os.name", "Linux");
cmTag.set("wurfl.os.version", "");
cmTag.set("wurfl.browser.name", "Firefox");
cmTag.set("wurfl.browser.version", "96");
cmTag.set("player.settings.wurfl.os.name", "Linux");
cmTag.set("player.settings.wurfl.os.version", "");
cmTag.set("player.settings.wurfl.browser.name", "Firefox");
cmTag.set("player.settings.wurfl.browser.version", "96");

cmTag.set('opps.detach.isFire', true);
cmTag.set('opps.attach.isFire', true);
cmTag.set("player.settings.sndvltopp", false);
cmTag.set('player.settings.tglifrmcntndsplyactv', true);
cmTag.set('player.settings.aduntldflbfruntld', true);
cmTag.set('player.settings.dtctprvtbrwsng', false);
cmTag.set('isUseNewViewabilityCalc', true);
cmTag.set('100viewPercent', 98);
cmTag.set('traceViewability100Seconds', 0);
cmTag.set('isChangePredictPointsWithAny', false);
cmTag.set('isCancelGetAdOnEligibilityLost.isActive', true);
cmTag.set('isCancelGetAdOnEligibilityLost.includeRVAny', true);
cmTag.set('isGetRv1OnlyForEligible.isActive', true);
cmTag.set('isGetRv1OnlyForEligible.delayPrediction', false);
cmTag.set('player.settings.vwclcflbkenbld', true);
cmTag.set('scrollEndTimeout', 500);
cmTag.set('player.settings.omid.isActive', true);

// Cookie sync predictor config
cmTag.set('predictors.time.cookieSync.isActive', true);
cmTag.set('predictors.time.cookieSync.lengthInSeconds', 20);
cmTag.set('predictors.time.cookieSync.repeat', 1);

cmTag.set('components.CloseButtonView.delay', 0);


cmTag.push = cmTag.push || function() {};

cmTag.set("player.settings.tmbtwfs", function(successes, failures, store) {
    if (failures > 45) {
        return 999;
    }
    return store.get('time_between_waterfall');
});


cmTag.set('player.settings.mntmbtwfsf', function(successes, failures, store) {
    if (failures > 45) {
        return 999000;
    }
    return store.get('mintimwf');
});
cmTag.set('unitThrottlerFiltered', "false");

cmTag.setByCondition({
    conditions: [{
        key: 'preset.level',
        val: 1
    }, {
        key: "unitThrottlerFiltered",
        val: true
    }],
    settings: {
        'preset.level': 3
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'countryIsoCode',
        val: 'bra'
    }],
    settings: {
        'player.settings.expxls.adimpression': 'https://sb.scorecardresearch.com/p?c1=2&c2=34311413&ns_ap_sv=2.1511.10&ns_type=hidden&ns_st_it=a&ns_st_sv=4.0.0&ns_st_ad=1&ns_st_sq=1&ns_st_id=%%impression_id%%&ns_st_ec=1&ns_st_cn=1&ns_st_ev=play&ns_st_ct=va00&ns_st_cl=%%duration%%&ns_st_pt=0&c3=2&c4=&c6=&ns_ts=%%timestamp%%',
        'player.settings.expxls.advideocomplete': 'https://sb.scorecardresearch.com/p?c1=2&c2=34311413&ns_ap_sv=2.1511.10&ns_type=hidden&ns_st_it=a&ns_st_sv=4.0.0&ns_st_ad=1&ns_st_sq=1&ns_st_id=%%impression_id%%&ns_st_ec=2&ns_st_cn=1&ns_st_ev=end&ns_st_ct=va00&ns_st_cl=%%duration%%&ns_st_pt=%%duration%%&c3=2&c4=&c6=&ns_ts=%%timestamp%%'
    }
});




if ('am' == 'la' || 'am' == 'LA') {
    cmTag.set('cm_predictors.time.cookieSync.isActive', false);
}

if ('am' == 'sg' || 'am' == 'SG') {
    cmTag.set('player.settings.wf_base_path', '//sg-wf.taboola.com');
}

if ('am' == 'hk' || 'am' == 'HK' || 'am' == 'ch' || 'am' == 'CH' || 'am' == 'us' || 'am' == 'US' || 'am' == 'la' || 'am' == 'LA') {
    cmTag.set('numOfWfUntilDcSwitch', 1);
    cmTag.set('player.settings.numOfWfUntilDcSwitch', 1);
}

if ('am' == 'am' || 'am' == 'AM') {
    cmTag.set('numOfWfUntilDcSwitch', 2);
    cmTag.set('player.settings.numOfWfUntilDcSwitch', 2);
}


cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 166717
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 1,
        'abTest': '166721b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 166717
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 1,
        'abTest': '166721b_vA'
    }
});

cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 292045
    }],
    settings: {
        "preroll.pubId": 208401,
        "preroll.pubTagId": 1047981,
        "midroll.pubId": 208401,
        "midroll.pubTagId": 1047981,
        "postroll.pubId": 208401,
        "postroll.pubTagId": 1047981,
        "pubId": 208401,
        "pubTagId": 1047981,
        "migratedwf": 2,
        'abTest': '166724b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 292045
    }],
    settings: {
        "preroll.pubId": 208401,
        "preroll.pubTagId": 1047981,
        "midroll.pubId": 208401,
        "midroll.pubTagId": 1047981,
        "postroll.pubId": 208401,
        "postroll.pubTagId": 1047981,
        "pubId": 208401,
        "pubTagId": 1047981,
        "migratedwf": 2,
        'abTest': '166724b_vA'
    }
});


cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 236525
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 3,
        'abTest': '166725b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 236525
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 3,
        'abTest': '166725b_vA'
    }
});


cmTag.setByCondition({
    conditions: [{
        key: "preroll.pubId",
        val: 198827
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 4,
        'abTest': '206725b_vA'
    }
});
cmTag.setByCondition({
    conditions: [{
        key: "pubId",
        val: 198827
    }],
    settings: {
        "preroll.pubId": 169497,
        "preroll.pubTagId": 953497,
        "midroll.pubId": 169497,
        "midroll.pubTagId": 953497,
        "postroll.pubId": 169497,
        "postroll.pubTagId": 953497,
        "pubId": 169497,
        "pubTagId": 953497,
        "migratedwf": 4,
        'abTest': '206725b_vA'
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'IL'
    }],
    settings: {
        'player.settings.optpwov': 0,
        'isPWOV': false,
        'onOutOfView': 'pause'
    }
});

cmTag.set("player.settings.frcmtfrms", true);
cmTag.set("player.settings.fire_piggies", true);
cmTag.set("secondsBW", 17);
cmTag.set("player.settings.adto", 300000);
cmTag.set("player.settings.vakll", 300000);
cmTag.set("noaop", 3);
cmTag.set("player.settings.rstmrai", true);
cmTag.set("player.settings.dsktmouttoadcmpltn", 30000);
cmTag.set("player.settings.mprdct", 0.033);
cmTag.set("category", "ShortContent");



cmTag.set('pixels.startWithABT.isFire', true);
cmTag.set('player.settings.mprdct', 0.025);
cmTag.push('abTest', 'mprdctdt6_vA');







cmTag.set('vForce.getAdTimeoutSeconds', 60);
cmTag.set('secondsToCloseGlobal', 0);
cmTag.set('predictors.distancePixels.isListenToScrollSpeedChange', true);
cmTag.set('predictors.playerReady.isActive', true);
cmTag.set('predictors.playerReady.predictPoint', 0);
cmTag.set('predictors.multiAd.isActive', true);
cmTag.set('predictors.multiAd.predictPoints.1.qState', 'q3');
cmTag.set('predictors.multiAd.predictPoints.0.qState', 'q1');
cmTag.set('predictors.getAdFail.isActive', true);
cmTag.set('predictors.distancePixels.isActive', true);
cmTag.set('predictors.distancePixels.predictPoints.1.pixelsFromSelectors', 10);
cmTag.set('vForce.isActive', true);
cmTag.set('isMultiAd', true);
cmTag.set('scrollEndTimeout', 500);
cmTag.set('playPriority.type', 'ppKey');
cmTag.set('playPriority.key', 1);
cmTag.set('isTestParentSelector', true);
cmTag.set('isReportToKibana', true);
cmTag.set('player.settings.rplvpdactv', true);
cmTag.set('player.settings.bllblevt', '1,21,22,23,24,25,30,32,42');
cmTag.set('bllblevt', '1,21,22,23,24,25,30,32,42');
cmTag.set('isOppsulaEnabled', true);
cmTag.set('microServices.oppsula.version', '1.4.4');
cmTag.set('psthdrs', 'text/plain');
cmTag.set('player.settings.cmbopps', true);
cmTag.set('cmbopps', true);
cmTag.set('verticalWidthThreshold', 480);
cmTag.set('predictors.distancePixels.maxPPS', 100);
cmTag.set('predictors.intersection.isActive', true);
cmTag.set('predictors.intersection.predictPoints.1.intersectionPercent', 50);
cmTag.set('predictors.intersection.isStartWF', true);
cmTag.set('predictors.emptyQueue.predictPoints', 0);
cmTag.set("predictors.getAdFail.allowedPredictPoints", 0);
cmTag.set('player.settings.vwclcflbkenbld', true);
cmTag.set('player.settings.dwnlnktrshld', 2);
cmTag.set('player.settings.frdwnlnkpxls', 1);
cmTag.set('player.settings.rmvrvlwntwrk', true);
cmTag.set('eligibilityValidator.isActive', false);
cmTag.set("components.adChoice.isTranslateText", false);
cmTag.set("components.Repeat.isTranslateText", true);
cmTag.set("language", "ar");
cmTag.set("player.settings.omidExcludedVendors", []);
cmTag.set("mediatypesArraySkippingViewableCheckAtSendOppMoment", [2]);
cmTag.set("stickyCard.restrictions.isActive.default", true);
cmTag.set("player.settings.externalDelayedEvents", ['AdImpression', 'AdVideoStart', 'AdStarted']);
cmTag.set('player.settings.jsDsbleErlyai', true);
cmTag.set('player.settings.frtbcmpaftrmtvw', false);


cmTag.set('sendBeacon', true);
cmTag.setByCondition({
    conditions: [{
        key: "iframeData.inDFP",
        val: true
    }],
    settings: {
        "isSkippedDistancePredict": true,
        "eligibilityValidator.isActive": false
    }
});
cmTag.setByCondition({
    conditions: [{
        key: 'frameType',
        val: 3
    }],
    settings: {
        'isChangePredictPointsWithAny': true,
        'predictors.intersection.isActive': true,
        'isUseAmpObserver': true,
        'eligibilityValidator.isActive': false
    }
});

cmTag.set("isStayInIframe", true);
cmTag.set("player.settings.disctxt", "");
cmTag.set('midrollTimeout', 3);
cmTag.set('isUseObserver', true);
cmTag.set('isCallIDLE', true);
cmTag.set("isKeepUnitOnMidroll", true);
cmTag.set('predictors.fullEligibility.isActive', true);
cmTag.set('predictors.fullEligibility.maxPPS', 50);
cmTag.set('predictors.distancePixels.maxPPS', 1);
cmTag.set('isForceStopObserver', true);
cmTag.set('isForceSwapToRV', true);
cmTag.set('components.nativeAd.isActive', true);
cmTag.set('floatingNAS.isActive', true);
cmTag.set('predictors.postRepeat.isActive', true);
var isApp = isApp || false;
if (!isApp) {
    cmTag.set('isRvPriority', false);
    cmTag.set('playPriority.isAlwaysWaitForRv', true);
    cmTag.set('playPriority.checkForRvPriority', 'pixelsFromSelector');
    cmTag.set('playPriority.pixelsFromSelector', 50);
    cmTag.set('playPriority.isAllowInIframes', true);
}

var isApp = isApp || false;
if (isApp) {
    cmTag.set("isInAppBridgeOn", true);
    cmTag.set("isUseObserver", false);
    cmTag.set('predictors.playerReady.predictPoint', [0, 0]);
}

cmTag.set('predictors.playerReady.isStartWF', true);
cmTag.set('isUseWidget', true);
cmTag.set('isStartWithLoader', true);
cmTag.set('components.adLoadingProgress.showProgressBar', true);
cmTag.set('predictors.playerReady.predictPoint', [0, 0]);
cmTag.set('animation.transitionAnimationTime', 0);
cmTag.set('predictors.intersection.isActive', false);

cmTag.setByCondition({
    conditions: [{
        key: 'isDisableSticky',
        val: true
    }],
    settings: {
        'stickyCard.isActive': false,
    }
});
cmTag.set("unitType", "WIDGET_ITEM");

cmTag.set("adMaxPlaySeconds", 210);

cmTag.setByCondition({
    conditions: [{
        key: "ep",
        val: "1"
    }],
    settings: {
        isMultiAd: false,
        volume: "onHover",
        isSoundOnHover: true,
        "components.CloseButtonView.hasCloseButton": false,
        "onOutOfView": "pause",
        "originId": 15,
        "preroll.pubId": 133128,
        "preroll.pubTagId": 779408,
        "midroll.pubId": 133128,
        "midroll.pubTagId": 779408,
        "postroll.pubId": 133128,
        "postroll.pubTagId": 779408,
        "pubId": 133128,
        "pubTagId": 779408,
        "player.settings.mprdct": 0,
        "player.settings.encwfrs": false,
        "player.settings.cmbopps": false,
        "abTest": "ep1_vA"
    }
});
if (window.conf300 == 1) {
    cmTag.set("urls.staticImage", "//cdn.cmeden.com/img/play_image_169.jpg");
}
cmTag.set("multiUnitManager.isActive", true);
cmTag.setByCondition({
    conditions: [{
        key: "player.versions.content",
        val: "26_1_18m"
    }],
    settings: {
        "player.versions.content": "14_10_18m"
    }
});

cmTag.setByCondition({
    conditions: [{
        key: 'country',
        val: 'IL'
    }],
    settings: {
        'stickyCard.isActive': false,
        'player.settings.optpwov': 0
    }
});





cmTag.set('pixels.startWithABT.isFire', true);
cmTag.push('abTest', 'spa2_vA');



cmTag.push('abTest', 'id5mc_vB');
cmTag.set('pixels.startWithABT.isFire', true);









// Roll out level 4 on amp
cmTag.setByCondition({
    conditions: [{
        key: 'frameType',
        val: 3
    }],
    settings: {
        'pubId': 383725,
        'pubTagId': 2077655,
        'preroll.pubId': 383725,
        'preroll.pubTagId': 2077655,
        'midroll.pubId': 383725,
        'midroll.pubTagId': 2077655,
        'postroll.pubId': 383725,
        'postroll.pubTagId': 2077655
    }
});









cmTag.push('abTest', 'Noappq22_vC');
cmTag.set('noaop', 5);
cmTag.set('player.settings.queue_size', 7);
cmTag.set('predictors.time.isActive', true);
cmTag.set('predictors.time.predictPoints', 0);
cmTag.set('predictors.time.lengthInSeconds', 5);
cmTag.set('predictors.time.repeat', 20);
cmTag.set('maxNonRvVimpsInQueue', 3);









cmTag.set('noaop', 5);
cmTag.set('player.settings.queue_size', 7);
cmTag.set('predictors.time.isActive', true);
cmTag.set('predictors.time.predictPoints', 0);
cmTag.set('predictors.time.lengthInSeconds', 5);
cmTag.set('predictors.time.repeat', 20);
cmTag.set('maxNonRvVimpsInQueue', 3);
cmTag.push('abTest', 'smbs');


cmTag.set("player.settings.volume", 0);
cmTag.setMacros({
    dast: "V7JSUCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJGWZ-WajzcytWU42a9FwZXJLHIbRWmSc2Rwrl2-32EyGQFIz52K22CzXusXM5RZtXLa1wjByuYUbx2jlsjg2luFyCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjekoOl0-Fz3et3DZ3fYFUazw-23mx4mh13uMv1ltsFa7bebHiaHHQAAAAAeAKzeMiF-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAMSC40AD45CN5z9vsDAKBBCwQAIECABGBgNaAE4ON85QQAAAAAAAAAgOX___8_BmAPa0wGYGR_pwfgwQfggahAtIgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACBv_ArFrDAAAAAsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0NvodVoQy-i12i8gAMDaLyAAAJu6AQC8BcAFHUErBoPVKcRuOFvsRrPNaHYAAAAAd_____96IOKczJazmcUw2Kwsg4VlNltYVhubYTHaWByeicd79qHWCmT0Cu59HsIy-30HEcvzNf0NBxnf8nobREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNifQM4GSNGSxWo5XO0mi9FmsZgsd8PRZIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCGOO3cLhskzWwtVotBZtdhO3cGYbrVWr4W5lXHh8k93CLXp9TA_LxjgzebYoGMCxF8FFOpH5La-33_T0290Ky0Us0Zws0onssq84J7PlbGYxDDYry2Bhmc0WltXGZliMNhaHZ-Lx1xy7hcNlmayFq9FoLdrsJm7hzDZaq1bD3cq48Pgmu4Vb9PqYHpaNcWby7Buz2WgyXG5mm31jNhtNhsvNbLPv0Bm-q8_Z6AyOJx6TeezZXJ81h0HhMli8v89F2ow2bkaVNmyxqK7FnWti1WljJ2PnYDYofH9zaSsObiPncl9yEBsMilgiOF2kE9HLeLqIJZKnRToRLAwTx8zjHC1MFudsstusnDPnyDYc7TY258y0m4glStNFOtHLbIO12m83PUwOi_qPDLmYKwdz0WSuWI1WCQAAAAAAAABgCXPmTQAAAABOAxkNNsPVcgEgnL10f96GbyGQq_53T0et3Fy3IeGLGz9uML_l9fabnn67W2G5MsADNTnzZs8EsVarZQ0AACCADQAAEMCtm7cAbEZuHwiKi5mZmbmZf6BVgwE!",
    dataCenter: "am",
    clickUrl: "",
    referrer: "https%3A%2F%2Fwagna.ahlamontada.net",
    cipid: "8083555",
    cmDast: "V7JSUCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJGWZ-WajzcytWU42a9FwZXJLHIbRWmSc2Rwrl2-32EyGQFIz52K22CzXusXM5RZtXLa1wjByuYUbx2jlsjg2luFyCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjekoOl0-Fz3et3DZ3fYFUazw-23mx4mh13uMv1ltsFa7bebHiaHHQAAAAAeAKzeMiF-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAMSC40AD45CN5z9vsDAKBBCwQAIECABGBgNaAE4ON85QQAAAAAAAAAgOX___8_BmAPa0wGYGR_pwfgwQfggahAtIgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACBv_ArFrDAAAAAsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0NvodVoQy-i12i8gAMDaLyAAAJu6AQC8BcAFHUErBoPVKcRuOFvsRrPNaHYAAAAAd_____96IOKczJazmcUw2Kwsg4VlNltYVhubYTHaWByeicd79qHWCmT0Cu59HsIy-30HEcvzNf0NBxnf8nobREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNifQM4GSNGSxWo5XO0mi9FmsZgsd8PRZIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCGOO3cLhskzWwtVotBZtdhO3cGYbrVWr4W5lXHh8k93CLXp9TA_LxjgzebYoGMCxF8FFOpH5La-33_T0290Ky0Us0Zws0onssq84J7PlbGYxDDYry2Bhmc0WltXGZliMNhaHZ-Lx1xy7hcNlmayFq9FoLdrsJm7hzDZaq1bD3cq48Pgmu4Vb9PqYHpaNcWby7Buz2WgyXG5mm31jNhtNhsvNbLPv0Bm-q8_Z6AyOJx6TeezZXJ81h0HhMli8v89F2ow2bkaVNmyxqK7FnWti1WljJ2PnYDYofH9zaSsObiPncl9yEBsMilgiOF2kE9HLeLqIJZKnRToRLAwTx8zjHC1MFudsstusnDPnyDYc7TY258y0m4glStNFOtHLbIO12m83PUwOi_qPDLmYKwdz0WSuWI1WCQAAAAAAAABgCXPmTQAAAABOAxkNNsPVcgEgnL10f96GbyGQq_53T0et3Fy3IeGLGz9uML_l9fabnn67W2G5MsADNTnzZs8EsVarZQ0AACCADQAAEMCtm7cAbEZuHwiKi5mZmbmZf6BVgwE!",
    tagId: "e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc",
    creativeId: "5664665",
    baseReportD: "taboola.com",
    redId: "e2f7643f-3923-48ed-ba04-d8ff1ee77132",
    dtagid: "2090795",
    dpubid: "240385",
    vertical: "inline",
    placement: "Below Desktop Forum Thumbnails",
    lineItemId: "2358075",
    oppsDataCenter: "am"
});
                                    

#3 JavaScript::Eval (size: 9, repeated: 1) - SHA256: 9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351

                                        debugger;
                                    

#4 JavaScript::Eval (size: 18, repeated: 1) - SHA256: 0f3342bc14063d9ed7a669eb067b50ea17b2cb7dcb51968939b72fa9ac862d91

                                        var foo = (x) => x + 1
                                    

#5 JavaScript::Eval (size: 79, repeated: 1) - SHA256: d09bc8e2405bc649dd3d062c9b4a10b59e1989dac37162e337f43db1e81e3cfe

                                        (() => {
    const a = async
    function name() {};
    window['33on2hxydw'] = true;
})()
                                    

Executed Writes (2)

#1 JavaScript::Write (size: 104, repeated: 1) - SHA256: 147f74332da8a3a6025c02528aa92901c92553e8066a4924adf0b4d08a8439fc

                                        < script src = "https://stootsou.net/pfe/current/tag.min.js?z=2308013"
data - cfasync = "false"
async > < /script>
                                    

#2 JavaScript::Write (size: 759, repeated: 1) - SHA256: a7e9c7904cd65627b33964bbb90839a2fa154c33d9c353413da6dcdc4fba2295

                                        < !doctype html >
    < body >
    < script >
    document.head = document.head || document.getElementsByTagName('head')[0]; < /script> < div class = "popupContentWrapper" >
    < div class = " trc_popover_title_wrapper " >
    < div class = " trc_popover_title "
id = "trc_userx_popover_title" >
    < span class = " trc_popover_title_text " > < /span> < /div> < /div> < div class = " trc_popover_content_wrapper " >
    < div id = "trc_userx_popover_content"
class = " trc_popover_content " > < /div> < /div> < /div> < /body>
                                    


HTTP Transactions (185)


Request Response
                                        
                                            GET /f60-montada HTTP/1.1 
Host: wagna.ahlamontada.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         178.33.115.32
HTTP/1.1 301 Moved Permanently
                                        
Date: Tue, 27 Sep 2022 14:36:01 GMT
Content-Length: 0
Location: https://wagna.ahlamontada.net/f60-montada

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11909
Expires: Tue, 27 Sep 2022 17:54:29 GMT
Date: Tue, 27 Sep 2022 14:36:00 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 14:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: izYS8r9oM0hQ6v2pTu4KL9Nx5lObZeKJwV53Iyz29olrGtUtd5J5dg==
Age: 1230


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OK3sISPNzzfVvd6H95HXi_nRGQpBurdy5vdNArXhLYwh4c6_vU4Ipg==
age: 18708
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A20F5AB348E8636C317A23BF463E6B99D11C2CCCBA4787EA0A7998A61F8234C"
Last-Modified: Mon, 26 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14142
Expires: Tue, 27 Sep 2022 18:31:43 GMT
Date: Tue, 27 Sep 2022 14:36:01 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 14:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 15:06:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b2c2CUp3xfrDMdbN6HnDwOdnpepiie-idf207hYOfb-nhbcuvDCU6Q==
Age: 1515


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5110
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:10:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4492
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:21:10 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1332
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 14:13:49 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5839
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 12:58:42 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /0-rtl.css HTTP/1.1 
Host: wagna.ahlamontada.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/f60-montada
Cookie: exadd=166430
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.33.43.150
HTTP/2 200 OK
content-type: text/css
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 56476
last-modified: Tue, 27 Sep 2022 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size:   56476
Md5:    472061ee64cb320102f2ca06c99a3240
Sha1:   62bb24735b75581cb5063c1a84fcd14cfd4c2618
Sha256: d9a63df7cda30207db74cf0520ad1395a143fb0cd35e9e8f4379f648c32590b5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5939
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 12:57:02 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 10:40:15 GMT
expires: Mon, 25 Sep 2023 10:40:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 186946
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Size:   33845
Md5:    d989f35706c62ce4a5c561586c55566e
Sha1:   d32e7958e5765609bf08dcdefd0b2c2a8714ce34
Sha256: 375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3987
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:29:34 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4492
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:21:10 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4035
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:28:47 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /i/empty.gif HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 43
access-control-allow-origin: *
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "57304e3e-2b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 09 May 2016 08:45:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 24213742
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T2LKNh0wf6SZr%2FrmTr2IuRzuqoCHh8HOfKuRxtNGgQ6hnXh6jgr0SD8g2HKp6etNJmrV59y0W3GoCLXi5aEzNbdoG6lk%2BsrhPLw5zUQxknHEis7EWNFhYTpaaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f4b5872eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    6d22e4f2d2057c6e8d6fab098e76e80f
Sha1:   b80b11203d97fe01c5597ca3be70406ea48f5709
Sha256: afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /i/fa/empty.gif HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 42
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 10714109
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6UeG8I%2BPUYTHnI4SOQAaTvU0h7Tdbg%2FgAy%2F2167miKGNbiO%2B4Ep5quixnoo6ZOd7tSGkmKQP%2Fn4LQF8tLuivy8vAZPTR5DcqMbpLiecDeKqbuD9LQs1ZqV9GOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f5b9a72eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4232
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:25:29 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /ar_AR/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: b2de335a94a7e615806460db72c9bba6
etag: "c161a4594c6c4aacd9f5907e68b245be"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 27 Sep 2022 14:47:10 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: GwZie/B81ZvNn2JdGwvyFw==
x-fb-debug: 3B0JBRNLcfouAqm24mLpSjYW4DinhB7EZ2RoX7eFoaRQUlnwxhhwirXIk6x+vW/kb5lWcNZ/A3aCqkMJWgYJ+w==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 14:36:01 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1961)
Size:   1686
Md5:    1b06627bf07cd59bcd9f625d1b0bf217
Sha1:   483f7031e27bbb392083e386e0f08eb2fd6fd9fd
Sha256: 46fe0d76e03c75ce29b67eeaaeed438de23028c990baced07cf4af5e41885cff
                                        
                                            GET /gtag/js?id=UA-144347007-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 14:36:01 GMT
expires: Tue, 27 Sep 2022 14:36:01 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42241
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   42241
Md5:    7d5c80f77a2ed76e09cd0140c5a6eb85
Sha1:   9a867ee12580e6b9736f2835fec0ad44f6c34e6f
Sha256: 2842fa7dc5a2fcf3a3635c633d60656adb2f04975bb703a6c1f7a9990b0889ab
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-12732876-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 14:36:01 GMT
expires: Tue, 27 Sep 2022 14:36:01 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42224
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   42224
Md5:    1798f1b83a5afd44b4aee1ebd0838598
Sha1:   0d2ee7703262fb165a0ae4f0836e92ec1ff54cb0
Sha256: fb6ca24d905d2047f2c116c86aac984b5df7de1f747b6e1b6142da976f005184
                                        
                                            GET /s/t/16/50/72/i_icon_minitime.gif HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 1051
last-modified: Sun, 14 Nov 2010 21:05:20 GMT
etag: "4ce04f10-41b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m2nJ6f3lI3fTxJy2hJp4fh2yEcOgChnq2XRAz8YfSYqd5RhrwQjhGmRbwULoF%2F9KQwk86vThfRSPMer832UeoykMFayWEyZe2zHSJYtR7HQEvcKBtR%2F3mfFVXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f4b5972eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 17 x 17\012- data
Size:   1051
Md5:    9636eb27d2abfee99ee63292d342088e
Sha1:   e518a8f7692f9171738a347cdb37e48448fa7b77
Sha256: fc3b4563760da7ace0ba015a942d0612897518c9702c499704c20972bc263082
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4035
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:01 GMT
Last-Modified: Tue, 27 Sep 2022 13:28:47 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/t/16/50/72/i_vote_lcap.png HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 489
last-modified: Sun, 14 Nov 2010 21:05:30 GMT
etag: "4ce04f1a-1e9"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yfZrh7xN%2Ft4HA753EEI%2FA2hcAJ3Gb7OJm%2BFz9bnKkMdy6Kznm3c7Q6TNtWRNDHgTHb3lCtgfQpidvMn95sEPPpmwnEpkQmYBdkXSXZkdF9TSoSiVJ%2F9Q4wNEFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f3b5472eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 11 x 12, 8-bit/color RGBA, interlaced\012- data
Size:   489
Md5:    b2dd10595978a48f6c321310b15589ba
Sha1:   ef3d906705115627c7a587e379b0e73fbbaf28b6
Sha256: c73abe8d42a7ca54ce1623882e639254ae36b3f16de16feeeffa292611358202
                                        
                                            GET /s/t/16/50/72/i_icon_mini_register.png HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 4712
last-modified: Sun, 14 Nov 2010 21:05:32 GMT
etag: "4ce04f1c-1268"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bvepurpjwrn8aGf%2F%2B5glbZWm2Y1bzT6WWxnj6GEHWCxDTmxo0%2For6vne4jf57BcFc7p4o8RduAzvdZg%2FTFkLLZ6IH2ovNqUu4KB4Ep8LLChcVpx1%2BfqBvAf06Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f5b9972eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 100 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   4712
Md5:    2b675bf2cae7d92bb81407f21925dc7b
Sha1:   2924d9ee4d77732839d7c32412fe51092ff89350
Sha256: abd0c11ac9536c34d829261c22a8ed32f9e0b2e223c25747741c622744baf8cf
                                        
                                            GET /s/t/16/50/72/i_icon_latest_reply.gif HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 956
last-modified: Sun, 14 Nov 2010 21:05:22 GMT
etag: "4ce04f12-3bc"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GA6QqKmfib0dR6meq33U0EkseyDKEu0KgPEsQN7j4pY8yJ6X%2BeOBTVOXvKEoPcKF0iI%2BECfNz6kWwJa%2BUucFE8kf%2Bg5xKrfKFmdRrC7wqtBijx9B6BW78vMyvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f3b5372eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 12 x 12\012- data
Size:   956
Md5:    84cca2d5517a54d7774f2874d7910987
Sha1:   791bf84400ffbdcd0bc6fce699b698a1aa9a274e
Sha256: 850c200649b50dc9f71a19c73f63a68455d644fe08f1026a5252f69e90206ec2
                                        
                                            GET /s/t/16/50/72/i_icon_mini_index.png HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 16895
last-modified: Sun, 14 Nov 2010 21:05:34 GMT
etag: "4ce04f1e-41ff"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FjCi1gIRwxECIbLx1dyp9Z%2FDyE2CQ7DSA1Pon8f0PMa6sqy4NpuRgMY52ilyk%2FI2Sn5a41elDN29FWbebcAX6f7FEQ%2F3WnR4OtSkSAWioJNwUlllnBNf58dqoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f4b5c72eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 148 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   16895
Md5:    80fa11f3daf5bb7cc7b871492252eb43
Sha1:   c0e972522ca5d7ba393c59ab121f02787aa9c692
Sha256: 21ada7b38a4e95d8b5652656ec360d5d05e1afe0bfc67a349bdc110fcc304b8a
                                        
                                            GET /s/t/16/50/72/i_vote_rcap.png HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
content-length: 509
last-modified: Sun, 14 Nov 2010 21:05:32 GMT
etag: "4ce04f1c-1fd"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qcTefQ1Q5rXqyMNJkUXX5s2TfG3M8ehjR66EPXEKQNOrgF1gdMq5y3rt3cD7248ZkyOrlnZCmh4bcCchm9FVAMf7cv3FrZpKFBy2vAxb9%2FVqXf2YZTVbMfAlYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f4b5b72eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 11 x 12, 8-bit/color RGBA, interlaced\012- data
Size:   509
Md5:    1b3875c6770f8cd16c37f4218e0977f8
Sha1:   86c3ca826629c4007b2d7ccb60c67b1d8a1760b4
Sha256: 18c14453840950c138d29d3f7feec11c1637db7ad1760101cd2f6f0f1bb14d0d
                                        
                                            GET /u/f14/13/64/37/51/158.png HTTP/1.1 
Host: i.servimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.31.159
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 152
last-modified: Wed, 20 Jan 2010 23:49:35 GMT
etag: "4b57968f-98"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Tue, 25 Apr 2023 08:17:21 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 592526
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=khUjS654bONSbCeMDbN2nn5b9sAbcv0CemUqEU0OAjvt5cDByV8Bb8dzIV4BMdMgQV7i34QegYeSx8GNVR5qA2y1iN7%2FYQWBcrb6VD9J5UbHa6QWTxpZuMbLyA5Z5ad6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7514f820c84ab509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 9 x 20, 8-bit/color RGB, non-interlaced\012- data
Size:   152
Md5:    59a9859104cf4ebba84589945a167b2a
Sha1:   755731b3f2528861adbf8775b4b0d671294fc911
Sha256: 9f53fcc02d46a9fb73290db1420146fa4b278fef5960d4b6dfcec6584b2e8abe
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NfQxjEuGY+G/M8qXiC1o1Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.38.227.80
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bd5s0x41K807yayBOivsd2rdbJA=

                                        
                                            GET /s/t/16/50/72/i_icon_mini_login.png HTTP/1.1 
Host: 2img.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.111.19
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 16033
last-modified: Sun, 14 Nov 2010 21:05:33 GMT
etag: "4ce04f1d-3ea1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m4Yg0tJzD6ECwfZW1%2FFDRVSksGk1A7UFHJYg7U6ZLcOcm93CY8KtyAEjCaeUwbX1ZR1uSdlR1m8Pb4VXsfNtk8m81eD1G8xaJZEdGkcrs1c3pMpJ2z4Y28mYQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f81f5b9472eb-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 148 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size:   16033
Md5:    aeb8afb6579ac8c3f0aa10a3c757c833
Sha1:   443f1df91b1a7a97717b082b9697b52c89402f40
Sha256: c308741dc9af3c76f21d36e034e05c2025b36b0d4d9e4d7c1643eaa30f0a3f35
                                        
                                            GET /u/f46/16/56/19/70/alshrq10.jpg HTTP/1.1 
Host: i.servimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.31.159
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XxDrmBpmwcpJT1Yx3fJinGCPgtkDzPVkNbY4LVI5bSv9qWfsdBlNXHeCDznVfVcpaA7lYeLbz837SShKPNzYtaIrJQmN4YXzOUInNAfmcRV7Gmr6PPjD%2FlEYZSEXmBIX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7514f820b83cb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /u/f35/14/55/01/07/11110.gif HTTP/1.1 
Host: i.servimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.31.159
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 781
last-modified: Sun, 08 Aug 2010 20:48:20 GMT
etag: "4c5f1814-30d"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Fri, 01 Sep 2023 17:39:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TLCTWpHb7u15RoAYt4NIUpU9T5a65Mvt2KOFUoKb6OCQzyku49aM0N3lQ7eoLLnZEcf1T8Sn0UThlwSD2e%2F4X0eGL9zpv%2BCbESDja6K6BuvP5%2FIE7fu1JdawnCpK8d6R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7514f8200f4bb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 137 x 30\012- data
Size:   781
Md5:    77672feacc34b92dd56092e738820033
Sha1:   fd32b40a79c4563267dd3e0bca31c6cb700538ac
Sha256: 459b5874ccc35eb66cf0d723e9adca4fca41fff5dd9966c47309d041f200be20
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "FD1836EA48256FBFE7C5E38F8F6F098B4F255A8C6F85F565993A1D836D0EF1AB"
Last-Modified: Mon, 26 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3820
Expires: Tue, 27 Sep 2022 15:39:42 GMT
Date: Tue, 27 Sep 2022 14:36:02 GMT
Connection: keep-alive

                                        
                                            GET /u/f28/15/98/57/20/adelti10.gif HTTP/1.1 
Host: i.servimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.31.159
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 15729
last-modified: Tue, 04 Nov 2014 13:13:36 GMT
etag: "5458d100-3d71"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sat, 23 Sep 2023 00:34:49 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tqauAhjuLvKKqbYqaFx29rq%2FQkX7A2puzBAUeaSBek89%2BBCFGgn6MdeNEDNhmKqsqN94HJyonAgg8LJecIAGrm%2FgD16XxdZVPI%2BjVZ%2FISXEJMkpUOfGHNlVT64ifd5pJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7514f820b821b509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 426 x 137\012- data
Size:   15729
Md5:    bf9f06e303cbb4ff099397c3c4bcf578
Sha1:   889f668b20d2ed13b6aeef6f7749fedd5b2c989c
Sha256: 8b2d3c535cd41f77c4fc281465d3e4816c9d0354dcf200efec6a1490eb9a169e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1056
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Last-Modified: Tue, 27 Sep 2022 14:18:26 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /u/f25/14/55/01/07/uuo10.jpg HTTP/1.1 
Host: i.servimg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.31.159
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 170685
last-modified: Fri, 01 Oct 2010 20:34:52 GMT
etag: "4ca645ec-29abd"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Fri, 01 Sep 2023 17:39:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KN%2F2OJwqet87mmFkh8x9jHxHSog1GB%2FYgivnqJridv2Ytjr6m0rJFscNJ3seAlOTzRHZgEiiZGw7bAkBH0zBC9npjkKmBQraeAgYMDYCTeJpLuCwxH3zYqAVxT3ISoNB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7514f820a80eb509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0 ME, datetime=2010:10:01 21:55:40], baseline, precision 8, 640x395, components 3\012- data
Size:   170685
Md5:    e62152cb410228b78ef9817c9229e13a
Sha1:   b7001fa1f7579ba593c591d51c9b17b16c817710
Sha256: 865f256e1b42bc3821bc9c25ab7121a62290796e9dc4706ce47d0c02aa75b7ea
                                        
                                            GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=wagna.ahlamontada.net&var=&ymid=&var_3= HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:02 GMT
content-length: 758
x-trace-id: 904003e996cf34efd0eae2b9dceee061
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (757)
Size:   758
Md5:    2bd549a6ba7b562bb956218974ed7e9d
Sha1:   287190cc79dec4420b53480f2c2dfff8e60d2a39
Sha256: d34e7d92a7f1566abdf5e9fc7fefcda469c286bf3019e4c211315eb6f07e06fc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 422
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Last-Modified: Tue, 27 Sep 2022 14:29:00 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /syncframe?origin=publishertag&topUrl=wagna.ahlamontada.net HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         178.250.2.146
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Tue, 27 Sep 2022 14:36:01 GMT
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=e2b4c49d-41cc-4caf-95ed-6d61cd91fe49; expires=Sun, 22 Oct 2023 14:36:02 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 723620
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Size:   5082
Md5:    34a6e01086616219680f16eed3737ad9
Sha1:   3cf3c687f443c35333b447b00c7ead84bdbc23cf
Sha256: 1f57aef3e44612c507607d48e746df4e859bad2a4f059389d6c7f68385cfaaf9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5728
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Last-Modified: Tue, 27 Sep 2022 13:00:34 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5728
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Last-Modified: Tue, 27 Sep 2022 13:00:34 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Server: ECS (amb/6B72)
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Server: ECS (amb/6B8C)
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Last-Modified: Tue, 27 Sep 2022 14:36:02 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279


--- Additional Info ---
Magic:  data
Size:   2571
Md5:    1243393ddd61259b4ce759ae045c0dcf
Sha1:   7f8e4bf69cc1a541cee39a876b14b37f3df6796f
Sha256: 810d5fae98493c950a0b6003429bafa456716cd62d453ae3881a366a7d39a3a9
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Tue, 27 Sep 2022 12:41:09 GMT
expires: Tue, 27 Sep 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 6893
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            GET /libtrc/forumotion-ar/loader.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
x-amz-id-2: V5R5kCGtcZa3kLO928RmC2ZVk/FRnQ7iEry3jNDGmCCUgComkBOkuY0IzgarTOKjaknqLTRIyLk=
x-amz-request-id: EP59X7F7N9PFBRKV
last-modified: Mon, 26 Sep 2022 15:50:24 GMT
etag: "f9392b94fb8ac5e1e3b864c036d12f21"
x-amz-version-id: XdlnKNONbuuqvAd_Z5xfnmh_N2seqtvg
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:02 GMT
via: 1.1 varnish
age: 116
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664289363.701091,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 64
content-length: 25113
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65497)
Size:   25113
Md5:    f56a49bf269ea0f903e984cdbed940c5
Sha1:   2dbd0f6ea9174e818b8c20206f20b947cfb0fc09
Sha256: 24a9dfceb774436382e9a3ce0a20d2dd30adb0efb4d2556fda1511dbab3c3add
                                        
                                            GET /ar_AR/all.js?hash=0d8788fda87785780b87bc0e10a7e4a9 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 780a26a078b99dc6a853e1e926946af7
etag: "70ac7b8b24f8615e89eebcbe42f01d7e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 27 Sep 2023 12:25:51 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: rjJlQuuDBrZgSL3UuvaNmw==
x-fb-debug: HPj4hb3dwM6BeEVBCEaqe7K3Z19V7TUjwFyBSwMbCzx92ws4t5+6QXt2+jnrvMw0uUwx8FqeK650qSTFVX2LfA==
content-length: 87547
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 14:36:02 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18790)
Size:   87547
Md5:    ae326542eb8306b66048bdd4baf68d9b
Sha1:   becaf47a9119c03e8fee1a91b132602895223076
Sha256: cd185058015086f95fc4f0989f2d0023476696d8fbffa865721a39533972e858
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:02 GMT
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 12:47:12 GMT
Expires: Tue, 04 Oct 2022 12:47:11 GMT
Etag: "afe53d3fc2cca8a14f12a79de63bf79cdb92fee5"
Cache-Control: max-age=597668,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7514f824db0bb4f7-OSL

                                        
                                            POST /j/collect?v=1&_v=j97&a=1586291617&t=pageview&_s=1&dl=https%3A%2F%2Fwagna.ahlamontada.net%2Ff60-montada&ul=en-us&de=UTF-8&dt=%D9%85%D9%86%D8%AA%D8%AF%D9%89%20%D8%A7%D9%84%D8%AD%D8%A7%D8%B3%D8%A8%20%D8%A7%D9%84%D8%A2%D9%84%D9%89&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAAC~&jid=616674451&gjid=897952878&cid=1459721648.1664289361&tid=UA-144347007-1&_gid=831366983.1664289361&_r=1&gtm=2ou9l0&z=1506895286 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://wagna.ahlamontada.net
date: Tue, 27 Sep 2022 14:36:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            POST /j/collect?v=1&_v=j97&aip=1&a=1586291617&t=pageview&_s=1&dl=https%3A%2F%2Fwagna.ahlamontada.net%2Ff60-montada&ul=en-us&de=UTF-8&dt=%D9%85%D9%86%D8%AA%D8%AF%D9%89%20%D8%A7%D9%84%D8%AD%D8%A7%D8%B3%D8%A8%20%D8%A7%D9%84%D8%A2%D9%84%D9%89&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEDAAUABAAAAIC~&jid=1904361041&gjid=1261026746&cid=1459721648.1664289361&tid=UA-12732876-1&_gid=831366983.1664289361&_r=1&gtm=2ou9l0&z=1900064319 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://wagna.ahlamontada.net
date: Tue, 27 Sep 2022 14:36:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            GET /?utm_source=pwa HTTP/1.1 
Host: wagna.ahlamontada.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/serviceworker.js
Connection: keep-alive
Cookie: exadd=166430; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; toolbar_state=fa_show
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.33.43.150
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Tue, 27 Sep 2022 00:00:00 GMT
last-modified: Tue, 27 Sep 2022 14:36:02 GMT
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   24085
Md5:    fa35c19ee48cc592ead7ef4a5fff639a
Sha1:   b23c5eab078d146089c2d734937993196044d504
Sha256: bae0a2af930ec7320c3f8d36c47a933c1ce7d93c367103b42fb51b7b32542d2a
                                        
                                            GET /libtrc/impl.20220922-16-RELEASE.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: COg8lMA673OEz5PM+KFXiDXiosSVySM+TdixW+84HZwxLH8GtDt35DYHxlOgtiehZ9ZB4jLgaQI=
x-amz-request-id: W1R6REBMZ25HV30N
last-modified: Thu, 22 Sep 2022 14:15:17 GMT
etag: "b6247ec22fba797cf6f51ae4c86a6509"
content-encoding: br
x-amz-version-id: wNWqo8c3RDyWSxV8p_CKOzvKdfoSb_oq
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:02 GMT
via: 1.1 varnish
age: 1242
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 727
x-timer: S1664289363.795510,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 82
server: AmazonS3-br
content-length: 145469
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65508)
Size:   145469
Md5:    b6247ec22fba797cf6f51ae4c86a6509
Sha1:   1807f86f8b7146c10c986fd203d31de61ee67d8a
Sha256: 742c16a6b9e92d702d4e514560b0826268e676278e169e990c548d0bb6dd8a2f
                                        
                                            GET /x/oauth/status?client_id=119129194803390&input_token&origin=1&redirect_uri=https%3A%2F%2Fwagna.ahlamontada.net%2Ff60-montada&sdk=joey&wants_cookie_data=true HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-expose-headers: fb-s
access-control-allow-credentials: true
access-control-allow-origin: https://wagna.ahlamontada.net
fb-s: unknown
x-fb-rlafr: 0
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
document-policy: force-load-at-top
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
strict-transport-security: max-age=15552000; preload
x-fb-debug: Rs2DECYUhqEvEUdb4r1axBdFs69pKcURBe2+u7Fgt/7FdJ4mQ0PEMIKSPOXave4j4d5gbqxEUww8K5xuTbw26w==
content-length: 0
date: Tue, 27 Sep 2022 14:36:02 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:02 GMT
Last-Modified: Tue, 27 Sep 2022 13:42:55 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Yl2f7TScl-lGa2Sd73R_qEFAP0lD9N93OqyKr1lxYyqKUNR4yzQJ4g==
Age: 3187

                                        
                                            POST /api/ping HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 141
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.248.7.88
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wagna.ahlamontada.net
Cache-Control: no-cache, no-store
Date: Tue, 27 Sep 2022 14:36:02 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 260
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   260
Md5:    31e657ec918207b0da6494d97c45897a
Sha1:   f6d76e16ee19dcf67806568076f703a343716484
Sha256: a05a22dcb9f83080f4429702f88ed4202ab68481fb3c4635502b51fea3a4341f
                                        
                                            GET /images/icons-180.png HTTP/1.1 
Host: wagna.ahlamontada.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/f60-montada
Cookie: exadd=166430; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; toolbar_state=fa_show
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.33.43.150
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 19803
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 27 Sep 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   19803
Md5:    81c4582b3c05bb5172e535d4b368726d
Sha1:   beb264006c729d1d3520f1211cb44a79a3f29a5c
Sha256: 27c1e796f3a51cdf130ce4cde07d99ddd11431d2a4e6204b6325b32a7e7717f0
                                        
                                            POST /forumotion-ar/log/3/bulk-metrics?lti=deflated&bulkSize=1 HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 488
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /forumotion-ar/log/2/debug?tim=14%3A36%3A00.777&type=usage&msg=rtus&llvl=2&id=5669&cv=20220922-16-RELEASE&lt=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1 
Host: trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         141.226.228.48
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
x-fastly-to-nlb-rtt: 21153
access-control-allow-credentials: true
X-Firefox-Spdy: h2

                                        
                                            GET /api/sync.js?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.248.7.88
HTTP/1.1 200 OK
Content-Type: image/gif;charset=UTF-8
                                        
Cache-Control: no-cache, no-store
Date: Tue, 27 Sep 2022 14:36:02 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    221d8352905f2c38b3cb2bd191d630b0
Sha1:   d804b495cb9b84b9007a25b5d85f9ae674004cde
Sha256: 89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15975
Expires: Tue, 27 Sep 2022 19:02:18 GMT
Date: Tue, 27 Sep 2022 14:36:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15975
Expires: Tue, 27 Sep 2022 19:02:18 GMT
Date: Tue, 27 Sep 2022 14:36:03 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uploads/image/2012/01/21/0e3f474f64f4.jpg HTTP/1.1 
Host: img03.arabsh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.218.33
HTTP/2 301 Moved Permanently
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
location: https://arabsh.com
cache-control: max-age=3600
expires: Tue, 27 Sep 2022 15:36:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KVkXk4koQsbAyEARTz3z5r7eWzsjaGoXnZdsGG%2BlETHKosm4KIg6mExV9poFjsfyvP9dCZSQ2pqY4eE5G8C4%2FmK7s%2BL9aeKeloPlCpeyjC3KW8%2FGUfJFWis%2BKcvbCtyQwxRx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7514f8243d6b0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6390
Md5:    14218a43c5e5bbce546735a780c8ccce
Sha1:   61676358cdbb2373bc644e66f8a84fbc8cc5daf6
Sha256: 905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bd5ecd8-fafe-452d-ae17-9df7d4cb5682.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8931
x-amzn-requestid: 9255ee80-ae19-4b47-882b-01e663e857ed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG-EmZoAMFyWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-70cc0bc87ed2480879ba081a;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Md06h9jRAN491M1gOjvAXN4Zp2msjqH-dYNVxyH6xJ2G8pf50tyHeQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:23:21 GMT
age: 58362
etag: "6ff5d7ce0608a8c1b1f4c731a94295e7a56dfe50"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8931
Md5:    720fc80bd0ff9b71f20c8e0c13e1084e
Sha1:   6ff5d7ce0608a8c1b1f4c731a94295e7a56dfe50
Sha256: e84bcabd01425354050fe8ba5f4b29a97f05e6f5f15d26d0706c174136de30e6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bs6HOUmHOoYKDuzBoVHhcr8d4HP4bBmwUF3EtOmwKXo7ozhfaIYEvw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:39:07 GMT
age: 61016
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9163
Md5:    deb8d1e3b6d7fbc8c8ba478269621676
Sha1:   84f5a4c8b38acde814bc790e5b514347718d5bb9
Sha256: ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10211
x-amzn-requestid: 3ea4ac84-2465-4bd1-8ade-863de3c9576e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfSuGoQoAMF9oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145aa-7843b82728ead9a053c689d1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p1vYTqYjOmYHjVmJ8f6qyT_nLIsyXsr7ZI-DI7JBF9RJa0ZJNPiluA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:56:23 GMT
age: 59980
etag: "be60bbc96c832ae385cc9ae5828bd32703011b21"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10211
Md5:    347dca206e13a3b13953f0ab398310b4
Sha1:   be60bbc96c832ae385cc9ae5828bd32703011b21
Sha256: f6da888a54a0c6c73466f2c2a72dd875514a39d81b760a6b0116b4dd56ef31dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 61026
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13213
Md5:    62e68c3cd08dd94d910507512a67e85f
Sha1:   3d4fa8701f17e8818c25584ef5f04bfbee8440cd
Sha256: 058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
                                        
                                            POST /api/domains HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 239
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.248.7.88
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wagna.ahlamontada.net
Cache-Control: no-cache, no-store
Date: Tue, 27 Sep 2022 14:36:02 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   41
Md5:    eff65f0f098b5c376b6b9c521526c387
Sha1:   33b48a4fceebf9baa9f22508c51b918bd37180e4
Sha256: 1b9d72d05c66fdad190f58116fd97ce2ec595588ef55b8e1062dda74f03c6888
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IWzfDNFlgYdqYnbQ9uWfOvqb5zl3I3mgTZrT5pU5P3EvetMRDN5P7w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:06:47 GMT
age: 48556
etag: "1a26007f761e439db575fb80fb403031260aecf4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7455
Md5:    5274e770cb5a704916c8965659709f4a
Sha1:   1a26007f761e439db575fb80fb403031260aecf4
Sha256: e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-144347007-1&cid=1459721648.1664289361&jid=616674451&gjid=897952878&_gid=831366983.1664289361&_u=YEBAAUAAAAAAAC~&z=1774687797 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         64.233.162.155
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: https://wagna.ahlamontada.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 27 Sep 2022 14:36:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /api/sync.gif?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.248.7.88
HTTP/1.1 200 OK
Content-Type: image/gif;charset=UTF-8
                                        
Cache-Control: no-cache, no-store
Date: Tue, 27 Sep 2022 14:36:02 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    221d8352905f2c38b3cb2bd191d630b0
Sha1:   d804b495cb9b84b9007a25b5d85f9ae674004cde
Sha256: 89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C23204269E6EC9727B91DE24158F15B7BFB6159E95606089231DB82560513160"
Last-Modified: Mon, 26 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2274
Expires: Tue, 27 Sep 2022 15:13:57 GMT
Date: Tue, 27 Sep 2022 14:36:03 GMT
Connection: keep-alive

                                        
                                            OPTIONS /custom HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://wagna.ahlamontada.net/
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 0
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /custom HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://wagna.ahlamontada.net/
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 0
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /custom HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://wagna.ahlamontada.net/
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 0
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2

                                        
                                            POST /custom HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/
Content-Type: application/json
Origin: https://wagna.ahlamontada.net
Content-Length: 390
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 39
x-trace-id: b9e0f3128e9a99bfd5feda356173b5eb
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-144347007-1&cid=1459721648.1664289361&jid=616674451&_u=YEBAAUAAAAAAAC~&z=1925582375 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 14:36:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /custom HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/
Content-Type: application/json
Origin: https://wagna.ahlamontada.net
Content-Length: 774
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 39
x-trace-id: 1f233f66758dbb2f84ec6b26f27362b3
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-144347007-1&cid=1459721648.1664289361&jid=616674451&_u=YEBAAUAAAAAAAC~&z=1925582375 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 14:36:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /custom HTTP/1.1 
Host: stootsou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/
Content-Type: application/json
Origin: https://wagna.ahlamontada.net
Content-Length: 470
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:03 GMT
content-length: 39
x-trace-id: 6183a88b4169b2e038ed06b59310d91a
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            GET /libtrc/cta-component.20220922-16-RELEASE.es6.js HTTP/1.1 
Host: cdn.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
x-amz-id-2: Ct8IUrp3S3Y44U7aGR4AcpBJ3SgTt5hbGMS/pW9rqVCZPmm+JI59leFiPJM7VUYPaJJpoZZWcGo=
x-amz-request-id: BRA2RPPVQBCRW5VV
x-amz-replication-status: PENDING
last-modified: Sun, 25 Sep 2022 11:25:54 GMT
etag: "fac88d02a4ac159dfd6a97505363e724"
x-amz-version-id: 0mj3v0ylRZHoTnn0QAy2dPFAeeVnFZfs
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:03 GMT
via: 1.1 varnish
age: 96
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 27
x-timer: S1664289364.600307,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 82
content-length: 5108
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18924)
Size:   5108
Md5:    6edc0c60cbd321db86a583328bcc8e36
Sha1:   ac470f655afcce12484742602497b0ffeda681f6
Sha256: f5a6378eecece6fb97a79cdca11cd412c146ae73ef884773bd90a14632bdcaa7
                                        
                                            GET /sw.js HTTP/1.1 
Host: wagna.ahlamontada.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/f60-montada
Connection: keep-alive
Cookie: exadd=166430; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; toolbar_state=fa_show; _ga=GA1.2.1459721648.1664289361; _gid=GA1.2.831366983.1664289361; _gat_gtag_UA_144347007_1=1; _gat_gtag_UA_12732876_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.33.43.150
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Tue, 27 Sep 2022 14:36:03 GMT
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17842)
Size:   7544
Md5:    c19f2233c72674abe736e6d4610524e8
Sha1:   416dad3125267f671d54763e7ffeb1000493b7ec
Sha256: 56f79d10562199e17aa9137fcee365d799a748b639eb4e83216c8fe65dded497
                                        
                                            GET /lite-unit/3.9.5/UnitWidgetItemDesktop.min.js HTTP/1.1 
Host: vidstat.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Tue, 13 Sep 2022 09:04:05 GMT
etag: "8b1ffbd4f9c44c447f9a11e92fbb9112"
server: AmazonS3
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: AfyrLxGlKNoXsjSvShOJ1QFm2rrv76iJaqEsgbMoQU-1oTsr3wJz-Q==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:03 GMT
age: 1229475
x-served-by: cache-bma1648-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 37838
x-timer: S1664289364.602541,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29884
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29884
Md5:    a7b72a082fc5e3bc4aabbb79f73fb604
Sha1:   31cc6cd9b3dfbd31d24cd47dd2fcb29f5522822f
Sha256: bf20590ab0b6486faa1a22e447f2ae149aa76742fd65fa43993646031d90a1e1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /api/domains HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 303
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.248.7.88
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wagna.ahlamontada.net
Cache-Control: no-cache, no-store
Date: Tue, 27 Sep 2022 14:36:02 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   42
Md5:    d765c869a1695f4554003c6f45be3ed2
Sha1:   ba2549fd3a12809b72a1d86a41af19e615cba51c
Sha256: bf8e0a7c10e0fef9b4583223705a6399161a39a1947bfb21f9931feaad633968
                                        
                                            GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//wwflf.com/content/2ac38f5b-2bac-42d7-b324-08014cdeebe5 HTTP/1.1 
Host: images.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 401241550158072536425938832617979256915,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 401241550158072536425938832617979256915,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
etag: "59761698774acbb594928bceb49c7dc3"
last-modified: Wed, 10 Aug 2022 09:35:35 GMT
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: b61c20cbbd1f0b45d6e08ac13c898dbc
x-envoy-upstream-service-time: 2071
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb801
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:03 GMT
age: 1834361
x-served-by: cache-iad-kjyo7100076-IAD, cache-iad-kcgs7200166-IAD, cache-chi-kigq8000025-CHI, cache-iad-kcgs7200084-IAD, cache-bma1648-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 1, 1
x-timer: S1664289364.784490,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//wwflf.com/content/2ac38f5b-2bac-42d7-b324-08014cdeebe5
x-vcl-time-ms: 1
content-length: 20518
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   20518
Md5:    52443b278dfe73f7a0a6dcbcaa52cf58
Sha1:   751a584ff3a655e7ad2889c4b1480a4199e48010
Sha256: f6d0dc9fe14f6421db714e57407690e906bd73a15b79912d8648f152ed6e1e18
                                        
                                            POST /forumotion-ar/log/3/bulk-metrics?route=AM%3AIL%3AV&lti=deflated&bulkSize=4 HTTP/1.1 
Host: il-trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3167
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.106.33.48
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=wagna.ahlamontada.net&info=XnTJF180M0RITmhlJTJCZkMwOUJGQlhaMUN2czBGd2g3N0d3QVB0cVFmTGVXc0F5Z0p0Q1p6bHJjZ2c2eXpHVEpZYXdIZ3Q&idsd=-1875861338,1791960830&cw=1&lsw=1 HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.250.2.146
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Tue, 27 Sep 2022 14:36:02 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1180190
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (393), with no line terminators
Size:   319
Md5:    d5c4e39e3b270834548871c93395fb2e
Sha1:   0784732bb45d339c7bd5af68adc43ab1d1527e8f
Sha256: 0b686dc4c93ab60721366fdd9da105b55a0864880a41fa94202a0e454e0d8156
                                        
                                            GET /forumotion-ar/log/2/debug?tim=14%3A36%3A01.359&type=usage&msg=cta-_1664289361359&llvl=2&id=535&cv=20220922-16-RELEASE&lt=deflated&file=cta-manager&method=&position=&extraData=%7B%22v%22%3A%222%22%2C%22location%22%3A%22https%3A%2F%2Fwagna.ahlamontada.net%2Ff60-montada%22%2C%22itemId%22%3A%22~~V1~~-8002814633341078806~~W3QOX0mMeFsy%22%2C%22type%22%3A%22event%22%2C%22module%22%3A%22cta-lazy-module%22%2C%22event%22%3A%22CTA-event-has_cta_text%22%2C%22cardIndexOnPage%22%3A0%2C%22index%22%3A0%2C%22placement%22%3A%22728x90%20Thumbnails%22%2C%22innerText%22%3A%22Sykehjem%20-%20leiligheter%20p%C3%A5%20Oslo%20for%20eldre%20over%2060Sykehjem%20%7C%20S%C3%B8keannonser%22%2C%22config%22%3A%7B%22borderColor%22%3A%22black%22%2C%22fontWeight%22%3A%22bold%22%2C%22isInheritTitleColor%22%3A%22true%22%7D%7D HTTP/1.1 
Host: il-trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.106.33.48
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
x-fastly-to-nlb-rtt: 73174
access-control-allow-credentials: true
X-Firefox-Spdy: h2

                                        
                                            GET /forumotion-ar/trc/3/json?tim=14%3A36%3A00.782&lti=deflated&data=%7B%22id%22%3A213%2C%22ii%22%3A%22%2Ff60-montada%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1664207421812%2C%22vi%22%3A1664289360780%2C%22cv%22%3A%2220220922-16-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwagna.ahlamontada.net%2Ff60-montada%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fwagna.ahlamontada.net%2Ff60-montada%22%2C%22vpi%22%3A%22%2Ff60-montada%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3929%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A953.4000244140625%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A2959.39990234375%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ff60-montada%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:03 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664289363.984690,VS0,VE472
vary: Accept-Encoding
x-vcl-time-ms: 472
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (44226), with no line terminators
Size:   13558
Md5:    5e99dd76b1c01ccc4bc3d581b28a4a37
Sha1:   75d4a4407389acaa873db1d0abd229a9014617e0
Sha256: 377a46f2343beaf71608c61fbf8c22c04243d5803872c121c2dd40a7baa70c33
                                        
                                            GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//body-program.com.ua/wp-content/uploads/2017/06/img_14.jpg HTTP/1.1 
Host: images.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 509482437640071176570247054465799723663,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 509482437640071176570247054465799723663,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "f618996fcfebd0777c8262fe9ecef92f"
last-modified: Mon, 05 Sep 2022 20:39:26 GMT
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 972819d8092772402f9afe9954ce717d
x-envoy-upstream-service-time: 426
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb801
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
age: 1760692
x-served-by: cache-iad-kjyo7100178-IAD, cache-iad-kiad7000033-IAD, cache-chi-kigq8000117-CHI, cache-iad-kiad7000075-IAD, cache-bma1648-BMA
x-cache: MISS, HIT, HIT, HIT, HIT
x-cache-hits: 0, 1, 1, 1, 1
x-timer: S1664289364.117765,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//body-program.com.ua/wp-content/uploads/2017/06/img_14.jpg
x-vcl-time-ms: 1
content-length: 8422
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   8422
Md5:    906f7e705cd50e25882d6bf833a5c6a9
Sha1:   0cdd3b8c0fb9e168578f9839226de4d2cb389bc5
Sha256: d6f475207aac0e54046defe765a3efa3ac6db8eb130d525e2741783711dfd5e3
                                        
                                            GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/GETTY_IMAGES/SKP/1200520920__kum5Vqor.jpg HTTP/1.1 
Host: images.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 569300178912945866881505081382881578773,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 569300178912945866881505081382881578773,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "dfdd713bf672ce9d4efc019c9bb33d8e"
expiration: expiry-date="Thu, 15 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Mon, 15 Aug 2022 15:13:33 GMT
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 124
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb802
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
age: 2503774
x-served-by: cache-iad-kjyo7100156-IAD, cache-iad-kiad7000135-IAD, cache-lga21925-LGA, cache-iad-kcgs7200030-IAD, cache-bma1648-BMA
x-cache: HIT, MISS, MISS, HIT, HIT
x-cache-hits: 1, 0, 0, 1, 1
x-timer: S1664289364.117699,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/GETTY_IMAGES/SKP/1200520920__kum5Vqor.jpg
x-vcl-time-ms: 1
content-length: 7702
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   7702
Md5:    b215b2e58ab3f0b3c423e2196ff1d69c
Sha1:   5a2ba14d9050caef4854f69eeee3892b3771c50f
Sha256: 056a22488001d8b9ba9116e0768753077107fe984cb2d348d8245828cf0a875e
                                        
                                            GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg HTTP/1.1 
Host: images.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 352690306229506137798207407469809578240,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 352690306229506137798207407469809578240,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "b3c9505a19038b4db67c1b73ca53d270"
expiration: expiry-date="Fri, 23 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 23 Aug 2022 09:17:42 GMT
req-referer: https://elmostfa.yoo7.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 37
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
age: 622582
x-served-by: cache-iad-kcgs7200020-IAD, cache-iad-kiad7000022-IAD, cache-sna10724-LGB, cache-iad-kjyo7100129-IAD, cache-bma1648-BMA
x-cache: MISS, HIT, HIT, HIT, HIT
x-cache-hits: 0, 1, 1, 1, 1
x-timer: S1664289364.117949,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
x-vcl-time-ms: 1
content-length: 12202
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   12202
Md5:    7e2823d12a0e69784dd9f2ccaef4af99
Sha1:   aa947ae91377e23dea893475dba70c3be8ef1ede
Sha256: 61d9bf4438034b826c366ab50bfb546989ed5c3cddd19f6569705d6030ec4abf
                                        
                                            GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg HTTP/1.1 
Host: images.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 549930644253185078118877309127813515040,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 549930644253185078118877309127813515040,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "9f4fd3f25295fc11b6ab3597fc8b7691"
expiration: expiry-date="Fri, 23 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 23 Aug 2022 20:12:12 GMT
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 1068
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
age: 1797391
x-served-by: cache-iad-kiad7000142-IAD, cache-iad-kcgs7200060-IAD, cache-bur-kbur8200081-BUR, cache-iad-kjyo7100045-IAD, cache-bma1648-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 1, 1
x-timer: S1664289364.119491,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
x-vcl-time-ms: 1
content-length: 8588
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   8588
Md5:    0d730728cd19c8bb7337ab619d412568
Sha1:   050455bf29bd27121b0151d9f82c3739f173dd48
Sha256: c737b8c625f0881771f52bfd92a45407ae550b515b1e5212c1cfbc63c9c0a653
                                        
                                            GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f18/18/76/87/71/10441110.jpg HTTP/1.1 
Host: images.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: image/webp
                                        
server: nginx
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 409007793272519477888960907609700542045,440009874943970692176080915478359259825,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 409007793272519477888960907609700542045,440009874943970692176080915478359259825,29ecf9b93bbf306179626feeda1fab70
etag: "bb76fc9979910c2e224c4922a82e49ce"
expiration: expiry-date="Mon, 12 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Fri, 12 Aug 2022 20:35:12 GMT
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 785
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb202
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
age: 2959616
x-served-by: cache-iad-kjyo7100080-IAD, cache-iad-kjyo7100134-IAD, cache-sna10736-LGB, cache-iad-kjyo7100087-IAD, cache-bma1648-BMA
x-cache: HIT, MISS, MISS, HIT, HIT
x-cache-hits: 1, 0, 0, 1, 1
x-timer: S1664289364.119524,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f18/18/76/87/71/10441110.jpg
x-vcl-time-ms: 1
content-length: 6598
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   6598
Md5:    895a214bddd88917cf24a7a5a1134ecc
Sha1:   bbece246b3c2d67d1ade903ed89ba64b42beb0cf
Sha256: 65cd0defed038c783a224fa3d2a85d9542d2d550852b5045cf835dd3973b7070
                                        
                                            GET /forumotion-ar/log/2/debug?tim=14%3A36%3A01.674&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=1056&cv=20220922-16-RELEASE&lt=deflated&pct=1 HTTP/1.1 
Host: il-trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.106.33.48
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
x-fastly-to-nlb-rtt: 73535
access-control-allow-credentials: true
X-Firefox-Spdy: h2

                                        
                                            POST /api/domains HTTP/1.1 
Host: api.viglink.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.248.7.88
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://wagna.ahlamontada.net
Cache-Control: no-cache, no-store
Date: Tue, 27 Sep 2022 14:36:03 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   42
Md5:    44dd82512488a74bf91a63b4e89d95e8
Sha1:   e9b8f36212a6b0f18ce67fca33b136bcd6fd8143
Sha256: c01176794f23ce91b3a4022d96e26c101246cafb76607cca514751dfe33d8b4c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:25:19 GMT
Expires: Mon, 03 Oct 2022 06:25:18 GMT
Etag: "f2ec69fdaca2a0327cd3599ac05d0051df3dee41"
Cache-Control: max-age=488353,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7514f82cdcb61c0e-OSL

                                        
                                            GET /gid.js?userId=7b808fa6323449b5aec4e823744f2b2e HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.195.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
content-length: 65
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7b808fa6323449b5aec4e823744f2b2e; expires=Wed, 27 Sep 2023 14:36:04 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   65
Md5:    35201bba3c868f89b153f768da15f348
Sha1:   6b0e3fe2164bded7e8de37060585f245718d8bed
Sha256: 28afe62bfc191cb84a055b3d39481534970349f6f73528ccc9401ee2b8d5f893
                                        
                                            POST /forumotion-ar/log/3/bulk-metrics?route=AM%3AIL%3AV&lti=deflated&bulkSize=1 HTTP/1.1 
Host: il-trc-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 976
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         185.106.33.48
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2

                                        
                                            GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7P5QCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJDKcOBbGzcgt2k0Ga9HEuHErJ56ZWzibWUyr4W65WYyMQCLDiWNh3Izcot1ksBZNjBu3cuKZuYWzmcW0Gu6Wm8XIChE3GQ6fg4Go6Hpb7A6n2fOGFDSdDp_rXq97-OwOu8Jodrj9dtPD5LDLXaa_zDZYq_1208PksAMAAADAw____z8EAAAAQAQAAACABAAAAABFQMW_hcAFAAAAAMb___-_BsAnB8F7zn5_AAAAAIAAAAAAkAAMrAaUAHycr5z8_________8cM0GfeyPz____fGPQAPPgAPAgBAABcDLkjF5NjwoXkExVwFjECAAAA2NJS0Tya1AmVRdX__3-_FcAVAEDA4B8YFWGW7qDEWxgAAEDA2AI9LH6_2WHX-N0u-_________83-z_7RxN6G71OC2IZvVb7BQQAWPsFBABgUzcAgLcAuKAjaMVgsDqF2A1ni91othnNDgAAAODu____Xw9EnJPZcjazGAablWWwsMxmC8tqYzMsRhuLwzPxeM8-1FqBjF7BvS_iJsPhczAQFV1vi93hNHvuR9GS5W65W40mi9FoudzshpvRYH8CORsgRUsWq-VwtZssRpvFYrLcDUeTCVK0ZLVcLlebzWq1Gy1mg81yuNkgRatWs9FmMFzNJrPdbjUcDJejEVK0ZLlb7lajyWI0Wi43u-FmNBgijDl2C4fLMlkLV6PRWrTZTdzCmW20Vq2Gu5Vx4fFNdgu36PUxPSwb48zk2aJgAMdeJE-LdKKbzCab4Wq2WGwso4lhtFi5Zq6Za7AxLGcWw2I5EUs0J4t0IrvsK87JbDmbWQyDzcoyWFhms4VltbEZFqONxeGZePw1x27hcFkma-FqNFqLNruJWzizjdaq1XC3Mi48vslu4Ra9PqaHZWOcmTz7xmw2mgyXm9lm35jNRpPhcjPb7Dt0hu_qczY6g-OJx2QeezbXZ81hULgMFu_vc5E2o42bUaUNWyyqa3Hnmlh12tjJ2DmYDQrf31zaioPbyLnclxzEBoMilggu0onMb3m9_aan3-5WWC5iidJ0kU70MttgrfbbTQ-TwyKWCE4X6UT0Mp4u6j8y5GKuHMxFk7liNVolAAAAAAAAAIAlzJk3AQAAADgNZDTYDFfrPJDBcrBbrpYLAOHspfvzNnwLgVz1v3s6auXmug0JX9z4cYP5La-33_T0290Ky5UBHqjJmTd_Joi1Wi1rAAAAAWwAAIAAbt28BWAz8f____9xAAAAMnL0AAAA4vtAUSAAAAAAAPwDrRoM!&cmcv=&pix=31589837&cb=1664289362020&uv=3230&tms=1664289362020&abt=id5mc_vB!mprdctdt6_vA!Noappq22_vC!smbs!spa2_vA!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1664289358505!ts:1664289362020&mntl=1 HTTP/1.1 
Host: am-vid-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         141.226.228.48
HTTP/2 200 OK
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7JSUCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJGWZ-WajzcytWU42a9FwZXJLHIbRWmSc2Rwrl2-32EyGQFIz52K22CzXusXM5RZtXLa1wjByuYUbx2jlsjg2luFyCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjekoOl0-Fz3et3DZ3fYFUazw-23mx4mh13uMv1ltsFa7bebHiaHHQAAAAAeAKzeMiF-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAMSC40AD45CN5z9vsDAKBBCwQAIECABGBgNaAE4ON85QQAAAAAAAAAgOX___8_BmAPa0wGYGR_pwfgwQfggahAtIgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACBv_ArFrDAAAAAsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0NvodVoQy-i12i8gAMDaLyAAAJu6AQC8BcAFHUErBoPVKcRuOFvsRrPNaHYAAAAAd_____96IOKczJazmcUw2Kwsg4VlNltYVhubYTHaWByeicd79qHWCmT0Cu59HsIy-30HEcvzNf0NBxnf8nobREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNifQM4GSNGSxWo5XO0mi9FmsZgsd8PRZIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCGOO3cLhskzWwtVotBZtdhO3cGYbrVWr4W5lXHh8k93CLXp9TA_LxjgzebYoGMCxF8FFOpH5La-33_T0290Ky0Us0Zws0onssq84J7PlbGYxDDYry2Bhmc0WltXGZliMNhaHZ-Lx1xy7hcNlmayFq9FoLdrsJm7hzDZaq1bD3cq48Pgmu4Vb9PqYHpaNcWby7Buz2WgyXG5mm31jNhtNhsvNbLPv0Bm-q8_Z6AyOJx6TeezZXJ81h0HhMli8v89F2ow2bkaVNmyxqK7FnWti1WljJ2PnYDYofH9zaSsObiPncl9yEBsMilgiOF2kE9HLeLqIJZKnRToRLAwTx8zjHC1MFudsstusnDPnyDYc7TY258y0m4glStNFOtHLbIO12m83PUwOi_qPDLmYKwdz0WSuWI1WCQAAAAAAAABgCXPmTQAAAABOAxkNNsPVcgEgnL10f96GbyGQq_53T0et3Fy3IeGLGz9uML_l9fabnn67W2G5MsADNTnzZs8EsVarZQ0AACCADQAAEMCtm7cAbEZuHwiKi5mZmbmZf6BVgwE!&cmcv=&pix=31589837&cb=1664289362113&uv=3230&tms=1664289362113&abt=id5mc_vB!mprdctdt6_vA!Noappq22_vC!smbs!spa2_vA!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1664289358505!ts:1664289362113&mntl=1 HTTP/1.1 
Host: am-vid-events.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         141.226.228.48
HTTP/2 200 OK
                                        
server: nginx
date: Tue, 27 Sep 2022 14:36:04 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://wagna.ahlamontada.net/
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                         
                                         178.250.2.146
HTTP/2 200 OK
                                        
date: Tue, 27 Sep 2022 14:36:04 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://wagna.ahlamontada.net
server-processing-duration-in-ticks: 499860
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2

                                        
                                            GET /dna HTTP/1.1 
Host: dnacdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=XnTJF180M0RITmhlJTJCZkMwOUJGQlhaMUN2czBGd2g3N0d3QVB0cVFmTGVXc0F5Z0p0Q1p6bHJjZ2c2eXpHVEpZYXdIZ3Q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         178.250.0.157
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Tue, 27 Sep 2022 14:36:03 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=kklnGF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czBGd2g3N0d3QVB0cVFmTGVXc0F5Z0tYSGJycGFOTERJejhrSklRNDBMVTc; expires=Sun, 22 Oct 2023 14:36:04 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 331620
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   8423
Md5:    277162aa97f30939dba1d7b1645cd2c8
Sha1:   b573bcaede90fee1065180efb9da7a88ffe138e1
Sha256: 574bb801351f8cbf3008870fef2cea570138e507630c811651b494a618b17507
                                        
                                            POST /VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1664289362119&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1483&pt=1230176939&tz=0&viewable=true&ddast=V7JSUCFgPmgun6DmEruQTmgun6DmEruQUAAAAGBuIHJGWZ-WajzcytWU42a9FwZXJLHIbRWmSc2Rwrl2-32EyGQFIz52K22CzXusXM5RZtXLa1wjByuYUbx2jlsjg2luFyCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjekoOl0-Fz3et3DZ3fYFUazw-23mx4mh13uMv1ltsFa7bebHiaHHQAAAAAeAKzeMiF-AAEAIgAAAAAkAAAAACgCKv4tBC4AAAAAMAAMSC40AD45CN5z9vsDAKBBCwQAIECABGBgNaAE4ON85QQAAAAAAAAAgOX___8_BmAPa0wGYGR_pwfgwQfggahAtIgRAAAAwJaWiubRpE6oLKoAAAjSrQCuAAACBv_ArFrDAAAAAsYW6GHx-80Ou8bvdhkAAAAAAAAAgNn_2T-a0NvodVoQy-i12i8gAMDaLyAAAJu6AQC8BcAFHUErBoPVKcRuOFvsRrPNaHYAAAAAd_____96IOKczJazmcUw2Kwsg4VlNltYVhubYTHaWByeicd79qHWCmT0Cu59HsIy-30HEcvzNf0NBxnf8nobREXX22J3OM2e-1G0ZLlb7lajyWI0Wi43u-FmNNifQM4GSNGSxWo5XO0mi9FmsZgsd8PRZIIULVktl8vVZrNa7UaL2WCzHG42SNGq1Wy0GQxXs8lst1sNB8PlaIQULVnulrvVaLIYjZbLzW64GQ2GCGOO3cLhskzWwtVotBZtdhO3cGYbrVWr4W5lXHh8k93CLXp9TA_LxjgzebYoGMCxF8FFOpH5La-33_T0290Ky0Us0Zws0onssq84J7PlbGYxDDYry2Bhmc0WltXGZliMNhaHZ-Lx1xy7hcNlmayFq9FoLdrsJm7hzDZaq1bD3cq48Pgmu4Vb9PqYHpaNcWby7Buz2WgyXG5mm31jNhtNhsvNbLPv0Bm-q8_Z6AyOJx6TeezZXJ81h0HhMli8v89F2ow2bkaVNmyxqK7FnWti1WljJ2PnYDYofH9zaSsObiPncl9yEBsMilgiOF2kE9HLeLqIJZKnRToRLAwTx8zjHC1MFudsstusnDPnyDYc7TY258y0m4glStNFOtHLbIO12m83PUwOi_qPDLmYKwdz0WSuWI1WCQAAAAAAAABgCXPmTQAAAABOAxkNNsPVcgEgnL10f96GbyGQq_53T0et3Fy3IeGLGz9uML_l9fabnn67W2G5MsADNTnzZs8EsVarZQ0AACCADQAAEMCtm7cAbEZuHwiKi5mZmbmZf6BVgwE!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&amp=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=id5mc_vB!mprdctdt6_vA!Noappq22_vC!smbs!spa2_vA!ufm&mPre=0.025&cirf=https%3A%2F%2Fwagna.ahlamontada.net&en=1 HTTP/1.1 
Host: wf.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
server: nginx
machineid: 1465
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664289364.345589,VS0,VE50
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   127369
Md5:    068030303439fc1ac15f5161b0a8f5b4
Sha1:   45f68258da293415a362c8b2e884a82fc8c75ab9
Sha256: ff9f8580e8f67fab9a33f218aab305c3ec45bf9985031d91b668d081cc2c1ec5
                                        
                                            GET /sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=wagna.ahlamontada.net&bundle=cV4Azl9Eckk0JTJGWW1Ud2MyVzFKcFdEVERlMGV6NiUyRlVMblVqMURLTSUyRmRMc2Zta01KMlJrTVNjQVdzNnlSRnBDJTJCSnhRVER1c2Z6QXpycDFPZHRCbGFhZE8zZzFYZmd4aXUlMkZ2Qng2TDZaYmViYm82TkFHSE9seFBON1ZRNzVCVDB3T3B3RTJkc0ZNMXhXVFFXc1VBWDhUdDVQbmNnJTNEJTNE&info=kklnGF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czBGd2g3N0d3QVB0cVFmTGVXc0F5Z0tYSGJycGFOTERJejhrSklRNDBMVTc&idsd=-1875861338,1791960830&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         178.250.2.146
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Tue, 27 Sep 2022 14:36:03 GMT
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 923546
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5001
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:04 GMT
Last-Modified: Tue, 27 Sep 2022 13:12:43 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5001
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:04 GMT
Last-Modified: Tue, 27 Sep 2022 13:12:43 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.94.180.126
HTTP/1.1 302 Found
Content-Type: text/plain
                                        
Server: nginx
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b744a06f-3e71-11ed-823f-10b91cd50306; expires=Tue, 25-Oct-2022 14:36:04 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=b744a0a8-3e71-11ed-823f-10b91cd50306
X-fe: 144
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1 
Host: gum.criteo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wagna.ahlamontada.net/
x-crto-bundle: 0pTsnF9Cb2VaJTJCRGgxMVZqNlNxMTh0OVV2U0tjeUZoYkJocTRLdFB3NVczUjNXUDZwTXVzR3JPbXNibnA2Wm5naGRSdGREQ1hqcXo3eTIxdEc5dGtlek53TExTWXdCWTEwbVRSYTdERHZHNlBnViUyRkZSSnIzQ1FkRmNOaXlGUEJkTVpWRzU3VkVvU25LbXY3VnlkWjViMDVoRURRJTNEJTNE
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                         
                                         178.250.2.146
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Tue, 27 Sep 2022 14:36:04 GMT
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://wagna.ahlamontada.net
server-processing-duration-in-ticks: 4131119
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (29462)
Size:   8802
Md5:    9c28762bfebb47d9ba3a871196204654
Sha1:   4d2391a5e4a9b965a1511dfe94cee183da3870e3
Sha256: 21eb8d7324aad9e6aec65cec66722f3c267cd7099bb3364da1ce69d1002cc9ea
                                        
                                            GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.94.180.126
HTTP/1.1 302 Found
Content-Type: text/plain
                                        
Server: nginx
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b7447c30-3e71-11ed-beeb-156973b60206; expires=Tue, 25-Oct-2022 14:36:04 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=b7447c68-3e71-11ed-beeb-156973b60206
X-fe: 5
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=b7383ecf-3e71-11ed-8ab4-1be234f70306 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.94.180.126
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
Server: nginx
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b74515ef-3e71-11ed-9106-1131174c0206; expires=Tue, 25-Oct-2022 14:36:04 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 86
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2535
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 14:36:04 GMT
Last-Modified: Tue, 27 Sep 2022 13:53:49 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 314

                                        
                                            GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=b744a0a8-3e71-11ed-823f-10b91cd50306 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.94.180.126
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
Server: nginx
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b74c4796-3e71-11ed-a909-143d56a10206; expires=Tue, 25-Oct-2022 14:36:04 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 112
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=b7448363-3e71-11ed-8ca4-182a6e990306 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.94.180.126
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
Server: nginx
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b74c3f8a-3e71-11ed-a9af-169e7f670206; expires=Tue, 25-Oct-2022 14:36:04 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 38
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=b7447c68-3e71-11ed-beeb-156973b60206 HTTP/1.1 
Host: sync.search.spotxchange.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.94.180.126
HTTP/1.1 204 No Content
Content-Type: text/plain
                                        
Server: nginx
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=b74d6b3c-3e71-11ed-9ee9-107c10e90506; expires=Tue, 25-Oct-2022 14:36:04 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 85
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0

                                        
                                            GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1 
Host: csm.nl.eu.criteo.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         178.250.2.150
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 27 Sep 2022 14:36:04 GMT
pragma: no-cache
server: Finatra
expires: 0
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 14:36:04 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 01 Oct 2022 12:45:46 GMT
ETag: "5666b6b8df0f47c10ab506e916203f016cbef364"
Last-Modified: Tue, 27 Sep 2022 12:45:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2958
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7514f8312a330b69-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    82cf5c485831182b482ea88baa475687
Sha1:   5666b6b8df0f47c10ab506e916203f016cbef364
Sha256: 986937a410fa6ac5e85342e255b674718298ce3887c5daa1e8a6e454705f5499
                                        
                                            POST /forumotion-ar/log/3/bulk?route=AM%3AIL%3AV&lti=deflated&bulkSize=2 HTTP/1.1 
Host: trc.taboola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4065
Origin: https://wagna.ahlamontada.net
Connection: keep-alive
Referer: https://wagna.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.85.44
HTTP/2 204 No Content
content-type: image/gif
                                        
server: nginx
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://wagna.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Tue, 27 Sep 2022 14:36:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664289365.606468,VS0,VE85
x-vcl-time-ms: 85
X-Firefox-Spdy: h2