kawtar.ahlamontada.net/t20-topic
301 Moved Permanently 0 B URL HTTP/1.1 kawtar.ahlamontada.net/t20-topic
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t20-topic HTTP/1.1
Host: kawtar.ahlamontada.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 24 Oct 2022 13:25:17 GMT
Content-Length: 0
Location: https://kawtar.ahlamontada.net/t20-topic
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 73c4166ca864f777db2cc1cd8658a7c2
c56b66b0b7c8516d4d5bfafe0c166711c78f3d25
310c633350812c064e159275b6dbbdba6d6a5991a54ccfcc23459320c6513572
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "310C633350812C064E159275B6DBBDBA6D6A5991A54CCFCC23459320C6513572"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9179
Expires: Mon, 24 Oct 2022 15:58:16 GMT
Date: Mon, 24 Oct 2022 13:25:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 24 Oct 2022 12:52:56 GMT
Expires: Mon, 24 Oct 2022 13:20:04 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b7ik9RKCPwJqCuNSpNyyDksAlQNTg5aWwsn3NYaQa5onNo3vf-SZcw==
Age: 1941
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9159
Expires: Mon, 24 Oct 2022 15:57:56 GMT
Date: Mon, 24 Oct 2022 13:25:17 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7DanGiapPrkW8flmyEh0xB/MPoBtFdC7Y42Cg3g0UeawpC6hUecIHMCxxLkSzVpkc5wA2B9Kn64=
x-amz-request-id: 1AW7M215XGEM7VM7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 13:08:31 GMT
age: 1006
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e161d930be64266b3c07d82c49af8d51
50a4deed8b418f546302b0f77f7296ff7a9c3d58
02ad9653c5f5fe175bef262a1da382f9792b01fcb2cac7c21d7ab15befbee05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02AD9653C5F5FE175BEF262A1DA382F9792B01FCB2CAC7C21D7AB15BEFBEE05D"
Last-Modified: Sat, 22 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17528
Expires: Mon, 24 Oct 2022 18:17:25 GMT
Date: Mon, 24 Oct 2022 13:25:17 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 5c41d54d3df22409653f80e041abb52d
0150f7e5c500b23254258f8de640b626607ebc2f
0a574432762ee0e4afbe93e2d930687b4f11af08d0baf89464f1200fcf214574
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1381
Cache-Control: max-age=142479
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Etag: "63561667-117"
Expires: Wed, 26 Oct 2022 04:59:56 GMT
Last-Modified: Mon, 24 Oct 2022 04:36:55 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 5c41d54d3df22409653f80e041abb52d
0150f7e5c500b23254258f8de640b626607ebc2f
0a574432762ee0e4afbe93e2d930687b4f11af08d0baf89464f1200fcf214574
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3761
Cache-Control: max-age=144859
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Etag: "63561667-117"
Expires: Wed, 26 Oct 2022 05:39:36 GMT
Last-Modified: Mon, 24 Oct 2022 04:36:55 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 23 Oct 2022 10:40:15 GMT
expires: Mon, 23 Oct 2023 10:40:15 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 96302
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=
200 OK 37 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP
File type ASCII text, with very long lines (1734)
Hash 66ce485c26732c5a17416b13785d0e9a
0961e5f3d8d78b2ad83c955164f01d9fdfbce853
41eb8d050defa09912fff7fac8e3c02c66b05ad09ac03e2382eaa9e598a4776d
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 13:25:17 GMT
expires: Mon, 24 Oct 2022 13:25:17 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37393
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 47d8e82ce4bda6bdc81608323bc75573
80143e781ef3f11d181c921f595e54c2e0f68820
e25d75f2078934947f8f3143dc88b0e55b7244652a4d4882f5f848f4c5073714
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5832
Cache-Control: max-age=105524
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Etag: "635574a9-139"
Expires: Tue, 25 Oct 2022 18:44:01 GMT
Last-Modified: Sun, 23 Oct 2022 17:06:49 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 313
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1588)
Hash 19ffb4205e12be9b448c903b40a6f287
0c9c764a79091239cd2c3c487680566c86a4e0fb
d35f9dd225cef1664ac17123e86b32efebd3d790f48b1dbf0328620c8dc96a82
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 24 Oct 2022 13:25:17 GMT
expires: Mon, 24 Oct 2022 13:25:17 GMT
cache-control: private, max-age=900
last-modified: Mon, 24 Oct 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43592
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 5c41d54d3df22409653f80e041abb52d
0150f7e5c500b23254258f8de640b626607ebc2f
0a574432762ee0e4afbe93e2d930687b4f11af08d0baf89464f1200fcf214574
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3761
Cache-Control: max-age=144859
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Etag: "63561667-117"
Expires: Wed, 26 Oct 2022 05:39:36 GMT
Last-Modified: Mon, 24 Oct 2022 04:36:55 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash caba00d2204189480773909a86a7edfe
8eaaf83826a8f57ad6b3a88c3c27dc55ff26b6fe
967f6f9d4447aa48417d5a5a9d5a453f20f71a8601f23f66a6450c35ca3a68ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 498
Cache-Control: max-age=101625
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Etag: "63557a44-1d7"
Expires: Tue, 25 Oct 2022 17:39:02 GMT
Last-Modified: Sun, 23 Oct 2022 17:30:44 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
illiweb.com/rs3/63/frm/embed/FA_Embed.js
200 OK 512 B URL HTTP/2 illiweb.com/rs3/63/frm/embed/FA_Embed.js
IP
File type ASCII text, with no line terminators
Hash 0a3fecfee7f4bc3a0faa04c4220aacfa
de0673d3445dac055cf865e0bf5d9b8ef06c798d
d73912ace9941496d71b1a03c36de7878a33d344482d28ea5701cbadcbcd38a9
GET /rs3/63/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Fri, 08 Sep 2023 08:06:07 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3993549
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sfhx7xbpZgTjehtE9Y89s4%2Bhc0eu1GretmJYGZqh5OTtbgCLBjWELQVvdEnPQMDNfvXg3CCiiQse3zC%2BXN6sy29Edgdb%2BoJyBcUEqmRe%2Bw%2Fv7HaB42y92XLwNWUKxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a22b2eb500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1ea30e37b7f86b7d0a7cb7341087fdc1
2e88a09e17356724c7e0f488d70be82ebc64f55c
bb85d7fbaf1d4c0dc0a7cd27aebc8f21f942bf703896186a765131c80c87f059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 7c6fdc8e76ef5875b5c965ade2df503e
45d548aa2a9d7ede163743274790700878eaea62
d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4347
Cache-Control: max-age=158035
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:17 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 09:19:12 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
kawtar.ahlamontada.net/0-rtl.css
200 OK 55 kB URL HTTP/2 kawtar.ahlamontada.net/0-rtl.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 07e0043cf42570e6031875b02f8725c5
7ff9ea1a285e32d358b4844360716b84939f9275
beab6e8bd13268e2a77861ebbcbec7547847fd1ce04a61c3e9a70468d906defc
GET /0-rtl.css HTTP/1.1
Host: kawtar.ahlamontada.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/t20-topic
Cookie: exadd=166663
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: text/css
content-length: 54702
last-modified: Mon, 24 Oct 2022 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: MISS
X-Firefox-Spdy: h2
2img.net/i/empty.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1490784
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2xzXmNgxrsJMdBNuCF%2B8l3kSLPP1gkBjDFXfRp7R3o%2FLqm%2FbUcQg7PYDgVekTbziFaGdK4zzhTf9RBeMGtggZ3bxrMKI5anhza%2BHluyqdfrtCMZclErM4vKmaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3c90b405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/icon_minitime.gif
200 OK 298 B URL HTTP/2 2img.net/i/fa/icon_minitime.gif
IP
File type GIF image data, version 89a, 12 x 9\012- data
Hash 71647c2ce78f706f8b4b0d84b3369cf5
18fe4a449c64acf98e9570486627f29d3884dff9
de0294a906e3fa470d188c8d596e3a5fc3efc59bab8080506015498db73c18e6
GET /i/fa/icon_minitime.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 298
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-12a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1490721
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a4JJBSWOKx4%2BSZH30xymMHB28jjLlnd6ZAFdMHP9KyEw5ULkFp2ayB0Dd60if00Fi4RRS0HmFTnVR748Q6wt23f4Prs8oItfd7nRyeXrUt%2B5QdRDFOkf5oQhew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3e937405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/11/52/28/i_icon_mini_portal.gif
200 OK 2.1 kB URL HTTP/2 2img.net/s/t/11/52/28/i_icon_mini_portal.gif
IP
File type GIF image data, version 89a, 82 x 28\012- data
Hash 7a4b57cd62c8869c19784d49995f5e15
3c51667d83330b2b9c861df774af6a1b4052d925
378184833486ec056df0a8f8845fe2b5626b56043d5eb2e2f2989257b6674427
GET /s/t/11/52/28/i_icon_mini_portal.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 2113
last-modified: Wed, 11 Jun 2008 07:28:56 GMT
etag: "484f7eb8-841"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NDF7jMZ27lvRtYWE93hpNtWIetEYhfjNXWzfD66IIXK%2BegjpcXBiWnlUHqcqp58ZN3jn3yrWkO4kjiEr5dkMXl3%2BLEHNpSPDyKfh8XtLh%2B%2FHBUISSgizfzDyVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3c90f405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/11/52/28/i_icon_mini_index.gif
200 OK 2.1 kB URL HTTP/2 2img.net/s/t/11/52/28/i_icon_mini_index.gif
IP
File type GIF image data, version 89a, 82 x 28\012- data
Hash f472435d33becb33021daa0083877d92
614c47577a8a9363c77f759aee46a4480ba86a39
bc8584c1a23a485130ac085f20a8100fbaaad66f91d26e520c13e0c1de89d61e
GET /s/t/11/52/28/i_icon_mini_index.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 2072
last-modified: Wed, 11 Jun 2008 07:28:55 GMT
etag: "484f7eb7-818"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pAv6JS%2F5hUy2BaX%2FSdx%2FcoJHgCA7QQThsIEC1dSYM6WBRmqnOUo7TFoTt3Rzv%2Bg97mWZAE221tVMaJQwCipccOD%2FG1J4udEsfNGnf4OY6SAiBex%2Fqvf4ZRiHsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3d917405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/11/52/28/i_icon_mini_register.gif
200 OK 2.1 kB URL HTTP/2 2img.net/s/t/11/52/28/i_icon_mini_register.gif
IP
File type GIF image data, version 89a, 82 x 28\012- data
Hash 9a4d1711387da5373b6418aeeb72ae25
4cc03cc4fed3b8b814fdc760ac4f09cd1bde0e27
26807f1156beb54eae95ba64a3b58d21dc0f5ad6a65a0d5f624d3712f8436a7e
GET /s/t/11/52/28/i_icon_mini_register.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 2124
last-modified: Wed, 11 Jun 2008 07:28:52 GMT
etag: "484f7eb4-84c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MWUuw9qdkItE8NdEgdXSKA1Qa7s8VRMON1OQayv7BJi8S2Yp4Y1N%2BCpa8ysfXFKeGRdEyNGssN10QUHVTlPp%2BKdlGmjcuV3JVR5dBFCgidRe1EDjpOSJyCVShA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3e923405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/11/52/28/i_icon_gender_female.gif
200 OK 12 kB URL HTTP/2 2img.net/s/t/11/52/28/i_icon_gender_female.gif
IP
File type GIF image data, version 89a, 159 x 292\012- data
Hash d0732e527d346c08ea4dca1d89b0bcf3
bd7b06c9ce1ec7a68acae0811d97ad74bc7d1f2d
79f9d7b191814893cf973f6ff9fa9c827554d96e4f00a3a2eb86e7697debd232
GET /s/t/11/52/28/i_icon_gender_female.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 12002
last-modified: Wed, 11 Jun 2008 07:28:49 GMT
etag: "484f7eb1-2ee2"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xHXKZPPjR%2F9jbOSvqnE0NWtNNpDs05hfRtDkemSh0%2B4zbe2g2%2BFUNRyNXrbuwMGBVIevz7rUE32ZO4VkzV4V5NUEkEPE6P37chN%2B81I9Y1%2F0CXQ%2B4wFfgULWxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3e92e405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/11/52/28/i_icon_mini_login.gif
200 OK 2.2 kB URL HTTP/2 2img.net/s/t/11/52/28/i_icon_mini_login.gif
IP
File type GIF image data, version 89a, 82 x 28\012- data
Hash 1ef93c1bbe19b4d319984d23c9b740d2
b72659484e1de2fdc69d3134969b77c34326f68c
93064bf6749d19f90a2ea0828b0a11348fbd12232c006b163ac4fffcce9ef96a
GET /s/t/11/52/28/i_icon_mini_login.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/gif
content-length: 2152
last-modified: Wed, 11 Jun 2008 07:28:54 GMT
etag: "484f7eb6-868"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GSXLWtXcU424SxAwMDOtA%2B3e%2FP%2BMyA9orM58uY6HGP23nOOP8jkTAPmql0OaUnWpO47Rh8ySYhJ%2F1ntXo109JXaRfwUSi%2BXnHTB3odXhAYS4MEULo1fzyaFD7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a3e927405d-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 7f218d079162029280bb5582f6445b2c
997591485a85c3ba48e67ef9a873a0db3eb31e39
f80622dd25d2092bb6d1e43b741a687ff7d37dd1394982f7b37ba49edcae9925
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 879
Cache-Control: max-age=130453
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Etag: "6355e964-117"
Expires: Wed, 26 Oct 2022 01:39:31 GMT
Last-Modified: Mon, 24 Oct 2022 01:24:52 GMT
Server: ECS (amb/6B94)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdc9377de717c1344c257f544bb83906
8edb2adc1c53ed24272fee2087b023c2138240df
6099df828ce18db88b4737025fdc7c33703eb74511c8b535735c9362d6c03103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6099DF828CE18DB88B4737025FDC7C33703EB74511C8B535735C9362D6C03103"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6782
Expires: Mon, 24 Oct 2022 15:18:20 GMT
Date: Mon, 24 Oct 2022 13:25:18 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 314 B IP
Hash 4c94dbd386d435f37b0ecdf8b5d9887d
69a0100e7ae28c5af58751309392990cb0f4c0e2
0e70ebba3910080776f00d7fdb40fc587ecf8476a4571dc5fd848f5a52468605
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5370
Cache-Control: max-age=137857
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Etag: "6355f4c5-13a"
Expires: Wed, 26 Oct 2022 03:42:55 GMT
Last-Modified: Mon, 24 Oct 2022 02:13:25 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 279 B IP
Hash 7f218d079162029280bb5582f6445b2c
997591485a85c3ba48e67ef9a873a0db3eb31e39
f80622dd25d2092bb6d1e43b741a687ff7d37dd1394982f7b37ba49edcae9925
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 879
Cache-Control: max-age=130453
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Etag: "6355e964-117"
Expires: Wed, 26 Oct 2022 01:39:31 GMT
Last-Modified: Mon, 24 Oct 2022 01:24:52 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vcYkVNxu8eZBedWFF4lItQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MxUGsOfPkhQqLUlmwiwLd4ewDmw=
stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=kawtar.ahlamontada.net&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=kawtar.ahlamontada.net&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash ce099645f6d77f388eef306d53e6330d
73aa3684e3127bd4ef23804f713d0efa4e7401ce
c3553b1e49c750047ddf9580abc41a01134c7e45b00f99f85633ecae58cbb138
GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=kawtar.ahlamontada.net&var=&ymid=&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: 737444a237cff4b6777e2ab097795eaf
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 2.1 kB IP
Hash c79c0c800c7f251fb275b7dc6c25bbef
8564c5a09b793602ecffa6e48b906b9b57ef720c
df80b2e1ef09aa3959054b75822c973d565efd674781f2b8e1ce4661084421ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1590
Cache-Control: max-age=137275
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Etag: "63560143-139"
Expires: Wed, 26 Oct 2022 03:33:13 GMT
Last-Modified: Mon, 24 Oct 2022 03:06:43 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 313
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 24 Oct 2022 12:41:09 GMT
expires: Mon, 24 Oct 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 2649
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/forumotion-ar/loader.js
200 OK 25 kB URL HTTP/2 cdn.taboola.com/libtrc/forumotion-ar/loader.js
IP
File type Unicode text, UTF-8 text, with very long lines (65498)
Hash d3e02f4bfb86d631293a170c0f0a2bfd
86db8f3ab20d5e6f3ab27fd5bf4b924a54460e4a
9514b1c16e9f5425d461ce683aef59ed82e6b2dd1982a5858f2f0c1a83344ce4
GET /libtrc/forumotion-ar/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hCNCfxWG+E3ktIW+wzmRi/HLAswfQWq7O8YQFOPDpOXElphAlrATXm842UecOTIm77wfxRqTjhI=
x-amz-request-id: 4254C9VGJ84CPNST
last-modified: Mon, 24 Oct 2022 09:08:08 GMT
etag: "60a14305c99f303a98f3bcf0dfc566fb"
x-amz-version-id: HcOTaBBgVRfQAqYVynGZ7Ryn.qbqSOU2
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:18 GMT
via: 1.1 varnish
age: 15413
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1666617918.494618,VS0,VE0
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 85
content-length: 25125
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 71bf5d1750162b2d2102d42c69e65543
1f74f04628a37c6beb6a8611129809b315907cee
de88aa3a544f9a07536410ec3f861209e803b7315412bedfa9b6b1a5727aedc6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3701
Cache-Control: max-age=160634
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Etag: "63565443-139"
Expires: Wed, 26 Oct 2022 10:02:32 GMT
Last-Modified: Mon, 24 Oct 2022 09:00:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 71bf5d1750162b2d2102d42c69e65543
1f74f04628a37c6beb6a8611129809b315907cee
de88aa3a544f9a07536410ec3f861209e803b7315412bedfa9b6b1a5727aedc6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3703
Cache-Control: max-age=160636
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Etag: "63565443-139"
Expires: Wed, 26 Oct 2022 10:02:34 GMT
Last-Modified: Mon, 24 Oct 2022 09:00:51 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 313
cdn.taboola.com/libtrc/impl.20221024-5-RELEASE.js
200 OK 146 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221024-5-RELEASE.js
IP
File type ASCII text, with very long lines (65509)
Size 146 kB (145854 bytes)
Hash ed78e604067d136813f13d5547c86e19
65eebe45f1b1246503703b2af78c80d2fddd6d73
78e35a1bad98f8e026b12cf458d4e3b294593d72a6fbfb000b6a3b9ee661124e
GET /libtrc/impl.20221024-5-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: d/WGQJ44gf7XAuqQlGvQpnEcyxaAFMNnoyYnxx2rVbBbWVFPrClVvVzpvcCFnA58FDt62MFAVKs=
x-amz-request-id: FQPBZNTGNCAEASXF
last-modified: Mon, 24 Oct 2022 08:57:49 GMT
etag: "ed78e604067d136813f13d5547c86e19"
content-encoding: br
x-amz-version-id: C8KQ03dUEz1PaIGYIXaSU0Eb9_tykDyN
content-type: application/javascript
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:18 GMT
via: 1.1 varnish
age: 16032
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 8536
x-timer: S1666617919.570071,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 70
server: AmazonS3-br
content-length: 145854
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.399
200 OK 34 kB URL HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.399
IP
Hash 5ba66a59deefbdbd4ec6cd4eddf9acc1
b08023a40e2328e8f1c0b03d5b3a9581e78717ab
66dc5a601d4974fe576986ea0b7bcdd088fb0dcdc547241549ea932ab2a5a13b
GET /pfe/current/universal.min.js?v=3.1.399 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/javascript
last-modified: Thu, 20 Oct 2022 16:39:30 GMT
etag: W/"635179c2-17dc6"
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://kawtar.ahlamontada.net/
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: text/javascript
content-length: 28567
x-amz-id-2: kFPAC60DOwNQb4CdhqHG+tKjRF2TQjxpEdeKJyhLPdvjoiSwXPmNvXMEMMBRIwIu/QGXu5HJg1c=
x-amz-request-id: NTCW971RKN3GM3ZQ
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
etag: "072eaf64a771815874455704fca9301b"
cache-control: public, max-age=604800
content-encoding: gzip
cf-cache-status: HIT
age: 314371
expires: Mon, 31 Oct 2022 13:25:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a7be49b524-OSL
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/
Content-Type: application/json
Origin: https://kawtar.ahlamontada.net
Content-Length: 390
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f75096d9a3aec7b824668812fda634a9
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 629 B IP
Hash 6e9b317583304d843ef859db9d6cca3c
edc03220d08625210f97771f72dbe24294f1be6e
89281ccd98534015353a0f02f1021bfee040a127445fb19f68611e6b9e0283b6
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=ecUcOl80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGdpVm50JTJCYkZ3SklUUUtHa2JuTGtoVw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=JV2zvV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGh0d3BaT1lHYWlyQkxTUVhtMExqaFg; expires=Sat, 18 Nov 2023 13:25:18 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 248096
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
kawtar.ahlamontada.net/images/icons-180.png
200 OK 20 kB URL HTTP/2 kawtar.ahlamontada.net/images/icons-180.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash acd8dc169fdcf2f02978c7d5f296b836
427cd9c504c3884d88dbc252b1f4d66f8cecc43e
e89a1d3b26d699dfafd4a54c02ddb35c7102fac28498f0e87be1ad460be3d348
GET /images/icons-180.png HTTP/1.1
Host: kawtar.ahlamontada.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/t20-topic
Cookie: exadd=166663; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: image/png
content-length: 19818
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 24 Oct 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=kawtar.ahlamontada.net&info=JV2zvV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGh0d3BaT1lHYWlyQkxTUVhtMExqaFg&idsd=-657571544,1999665483&cw=1&lsw=1
200 OK 787 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=kawtar.ahlamontada.net&info=JV2zvV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGh0d3BaT1lHYWlyQkxTUVhtMExqaFg&idsd=-657571544,1999665483&cw=1&lsw=1
IP
Hash db691fa111517dcd90a9f8565c4a8136
c01c2585eed6ba31902bd5479e4c7d91659a1d0b
cc32800659c471548873affd96f09c167424cb920ac6332a6d982ee6a254f525
GET /sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=kawtar.ahlamontada.net&info=JV2zvV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGh0d3BaT1lHYWlyQkxTUVhtMExqaFg&idsd=-657571544,1999665483&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=kawtar.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1272103
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1996553249.1666617918&jid=504506229&gjid=1719291168&_gid=743287734.1666617918&_u=YEBAAUAAAAAAACAAI~&z=990699725
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1996553249.1666617918&jid=504506229&gjid=1719291168&_gid=743287734.1666617918&_u=YEBAAUAAAAAAACAAI~&z=990699725
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1996553249.1666617918&jid=504506229&gjid=1719291168&_gid=743287734.1666617918&_u=YEBAAUAAAAAAACAAI~&z=990699725 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://kawtar.ahlamontada.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 24 Oct 2022 13:25:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 318 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash 95bc8a3341fcb993b0bd21df6ae64661
c6ea83f4ee7f730e7c7815efbdb9e8317c16e2d9
7372c9d69e8d2f62c0fb3a5e4dcb24b3fad1bdf7edcb28aa68753a2774ec3c1e
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 105592
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.betgorebysson.club/apu.php?zoneid=3765907
200 OK 29 kB URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=3765907
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8a52317b0bb439d0c9bf8264c14e9578
9272559a424fa5b8c3964b12d8be660bd8448a25
f7b18c1352382458437764913f470e01a097cd6245a98e49906f6c5f8834c176
Analyzer Verdict Alert fortinet Malware
GET /apu.php?zoneid=3765907 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/javascript
x-trace-id: 4b02b749c1a019fd46ea13dbbc17bd91
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0358c5057d3545da88e248a899a22b7e; expires=Tue, 24 Oct 2023 13:25:18 GMT; path=/; secure; SameSite=None
oaidts=1666617918; expires=Tue, 24 Oct 2023 13:25:18 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03d42e3245268a9d8f602cacf5a4404e
59b42c91ab2ec67086f549de3d47d45560b91fc7
6e88b2d135f33b12b5c8e244ea0ba75dc6acef16aeb0069a87141e49dd4b7ec9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash b618b61b3056bd6f676344cc4524fdc4
0090a7785bf70c8e08d790b37401d680bfd4c49a
5273de63cc2a5ccbd9d2cff1d549d3f861dcf7122b70b764cc69952796a5b833
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4343
Cache-Control: max-age=155157
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Etag: "63563c5d-117"
Expires: Wed, 26 Oct 2022 08:31:16 GMT
Last-Modified: Mon, 24 Oct 2022 07:18:53 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/
Content-Type: application/json
Origin: https://kawtar.ahlamontada.net
Content-Length: 754
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f01d62cfa4b725c0e20eb78bbaa4664a
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash e4e9602f1062e692c3df5dc1eec489cb
ab47ab5548fed1ea1e145becb03a9885eacf7ddb
036e9d4e5c9e9bc75cbb78389fbcc4a5cdfa3463feddd5db8a11375b8c964af0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 13:25:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 06:25:20 GMT
Expires: Mon, 31 Oct 2022 06:25:19 GMT
Etag: "ab47ab5548fed1ea1e145becb03a9885eacf7ddb"
Cache-Control: max-age=578999,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f309a9ccc1b517-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 62995b4064863d855f6b7593b8996fd7
916e547b37ac32a86c7db23131770a9ab55d60bf
a747d30a07e2f946fb1c922d9e754fa0ef01ff76a53e5fd66b25d17ceede4848
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=155604
Date: Mon, 24 Oct 2022 13:25:19 GMT
Etag: "635636bb-1d7"
Expires: Wed, 26 Oct 2022 08:38:43 GMT
Last-Modified: Mon, 24 Oct 2022 06:54:51 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DjCocvdzIMG2S5Ws_ox5t3R0tNyAS_cI6oGXa78pbf9L9mXUt-3rEA==
Age: 6232
my.rtmark.net/gid.js?userId=0358c5057d3545da88e248a899a22b7e
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=0358c5057d3545da88e248a899a22b7e
IP
File type JSON data\012- , ASCII text
Hash 3cf61eb4721d8fcd2b1ec422dfee3d86
af5933f9e93ee870f75107764efa1b73ca5cd0eb
6a41f662bc49a75e97dc0b5f704c494c4a483b1a7b4d7f24b1f5b46ccd0e756d
GET /gid.js?userId=0358c5057d3545da88e248a899a22b7e HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0358c5057d3545da88e248a899a22b7e; expires=Tue, 24 Oct 2023 13:25:19 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
api.viglink.com/api/ping
200 OK 259 B IP
File type ASCII text, with no line terminators
Hash eeda2fc141fa5fb339c912ad3bbe4a94
92e16926ac29fae3ee00885aa71f88ff6d8c3669
ffdc880333f245cb9cd5f3f754ed2d6932e48f1d363b94089e1e64df909a35a7
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 140
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://kawtar.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Mon, 24 Oct 2022 13:25:18 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 259
Connection: keep-alive
dnacdn.net/dna
200 OK 126 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ef6aed24045231d0a0b3d9710bdf2c6
4b63e4a3f7a174de17fac9fcf9c7894f538213b1
f8bd9f1bcd9b2996f2193ee32d9f0173c675dcb3dd4cc6c9ed87a1c9de3c7e6f
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=JV2zvV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGh0d3BaT1lHYWlyQkxTUVhtMExqaFg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=kDIcE180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3ppOTFrVThjSW52YVBmRUZmazJ0MGdpeEJCN1VxUVM5RDBpZk02RG05YkI; expires=Sat, 18 Nov 2023 13:25:19 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 296629
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 82 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
Hash fbce34ba189d0e89b161021c54f0a509
3bc70111a977b972ef727d836f59828ea1df87fc
0305d50f04e6175ed02fd3cc69b51cf314c1eb8d5c41235dcc3efa762f22f130
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 68276
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
File type C source, ASCII text, with very long lines (29462)
Hash 2598c4f0320582371d71700994a152e7
452bf1590fa521850bdcb6c3a2db2110787c89d0
bf32e264e18e6d75cb4cc446aa6f526216fc9213017d705beadffc9c8b63e437
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 733589
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c560beed39cecb5417cb24d408e854bd
8128cbbdbb9357227cff89cf4a0825d62e1821cd
a116fd57470c119c471df4fa54525043cddf2cd4d1c91eaf450155a2293d26f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4db1e2a30c82c0ccc424718f6d5656e1
a7b34cd14cb1b934ebcfdcd635e0c09b36824331
5cd5426ef1b527f81e060510b8684313acf5aba276fe41a592011d86b8d92e05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 0c041832970c63da32155c9d3092d14a
c3b88b6d9568ef5b227eef19636b225e2dfad5d1
b0acbf23ee8ca27a0c01d270706f89c8467fca1eac3b8a90df29a2befdb22b33
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 13:25:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 21 Oct 2022 13:33:19 GMT
Expires: Fri, 28 Oct 2022 13:33:18 GMT
Etag: "c3b88b6d9568ef5b227eef19636b225e2dfad5d1"
Cache-Control: max-age=345478,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f309aa7d87b517-OSL
gem.gbc.criteo.com/newidsd
200 OK 397 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash 4a1d87df3f66edbf9cb152db50bba66f
89d640209dfbab848717f10b5ef34079dad3cc05
1968aeb0bb4c0ba195901a865d829cf8acfa88e386872a2d96c54096450be112
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 95074
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 890
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Mon, 24 Oct 2022 13:25:19 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://kawtar.ahlamontada.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1996553249.1666617918&jid=504506229&_u=YEBAAUAAAAAAACAAI~&z=1232794407
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1996553249.1666617918&jid=504506229&_u=YEBAAUAAAAAAACAAI~&z=1232794407
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1996553249.1666617918&jid=504506229&_u=YEBAAUAAAAAAACAAI~&z=1232794407 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 24 Oct 2022 13:25:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/userx.20221024-5-RELEASE.es6.js
200 OK 5.4 kB URL HTTP/2 cdn.taboola.com/libtrc/userx.20221024-5-RELEASE.es6.js
IP
File type ASCII text, with very long lines (17842)
Hash 4cbb8dd684b68e94d4e06dd299a5f71d
74605dac9df26556f9a38db44ef97c43eb37b772
c9098a8820fba5277a899bebe6e28e7610a062d890610f03c3d0f2ec5915e716
GET /libtrc/userx.20221024-5-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: XB+MZtQzcmc0dkeKagkV77pFey4SY3EwqllHE9lW8UUjwSiEZLQfiqGCSND09dzBDOi6W8Cfm5U=
x-amz-request-id: 04RH0NMW0BF7EDNR
x-amz-replication-status: PENDING
last-modified: Mon, 24 Oct 2022 12:29:16 GMT
etag: "370428268cb18b71c64b49e09b39c407"
x-amz-version-id: vkE.N4KKO8cRLOrf2Za2K0o2jUpUd2hp
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
age: 3363
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 506
x-timer: S1666617919.371366,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 70
content-length: 5398
X-Firefox-Spdy: h2
vidstat.taboola.com/lite-unit/3.9.5/UnitWidgetItemDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.5/UnitWidgetItemDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a7b72a082fc5e3bc4aabbb79f73fb604
31cc6cd9b3dfbd31d24cd47dd2fcb29f5522822f
bf20590ab0b6486faa1a22e447f2ae149aa76742fd65fa43993646031d90a1e1
GET /lite-unit/3.9.5/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 13 Sep 2022 09:04:05 GMT
etag: "8b1ffbd4f9c44c447f9a11e92fbb9112"
server: AmazonS3
via: 1.1 828a61ebc3af4e0465a5577a4c08af7a.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: AfyrLxGlKNoXsjSvShOJ1QFm2rrv76iJaqEsgbMoQU-1oTsr3wJz-Q==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
age: 2432601
x-served-by: cache-bma1648-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 30589
x-timer: S1666617919.375266,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29884
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/cta-component.20221024-5-RELEASE.es6.js
200 OK 5.1 kB URL HTTP/2 cdn.taboola.com/libtrc/cta-component.20221024-5-RELEASE.es6.js
IP
File type ASCII text, with very long lines (18924)
Hash 001488ce1a3fdf246e40ecfcd5634d34
6424f516242a739ba4a50c327d73a9da87a68eab
e152c36f0fe80be6ff1ec2f19688bf8974036242efd2249652d73a5c9504e58b
GET /libtrc/cta-component.20221024-5-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 0p79++y8XaVndHHWz/83yr/uuB+/2KZO87WaBMkzk2WW6T2g6mLTOIEQzdzvEclFjZoxXGiuxqc=
x-amz-request-id: NA7FGZPVMME26B2V
x-amz-replication-status: PENDING
last-modified: Mon, 24 Oct 2022 12:28:23 GMT
etag: "cee48166a86a1a2612609d9bcfdd9fbf"
x-amz-version-id: ioJczesBJUFI3.wXBobyIP3RgordF60j
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
age: 3413
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 1148
x-timer: S1666617919.375488,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 70
content-length: 5107
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=kawtar.ahlamontada.net
200 OK 5.6 kB URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=kawtar.ahlamontada.net
IP
Hash 3a91f93561b41470d32f411721d928d6
9bd187a54172757c5764c70100678bdb03ea16fe
5eb0aa39c572f1931ab4fc9a1d3e2dee009286c7b4f80b2130a36834eb19a3c6
GET /syncframe?origin=publishertag&topUrl=kawtar.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=308c791d-1f79-49fe-9424-cbe4a3d4f876; expires=Sat, 18 Nov 2023 13:25:17 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 665553
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7dbe328751574db3465bc8c4f745a487
661ca1463bea33b14bec8f6669dacb2f1ffb78c1
95b3e76c084b00b1d5ca6e02551a48d645b0eae239313b46cfb3468d62b08193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/bc9c4a1984da6f64679cf7ca1fd05852.png
200 OK 7.9 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/bc9c4a1984da6f64679cf7ca1fd05852.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a0fbd74df5b08dab320d4e61236f2fbf
8264a4fd9c92dd0ea5d1ce77fa502fe29d89bea4
f1d24985d58c0621158c7a11cc4e533e3657577ffc4f1c505bfe663ee524d8a5
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/bc9c4a1984da6f64679cf7ca1fd05852.png HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 315980781244431158011238001093653977628,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 315980781244431158011238001093653977628,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
etag: "752ef908b3105f31d22eb235cf235041"
expiration: expiry-date="Fri, 14 Oct 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 13 Sep 2022 11:33:16 GMT
req-referer: https://kauno.diena.lt/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 142
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
age: 1222529
x-served-by: cache-iad-kcgs7200085-IAD, cache-iad-kcgs7200074-IAD, cache-lga21942-LGA, cache-iad-kcgs7200078-IAD, cache-bma1648-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 2, 1
x-timer: S1666617919.434568,VS0,VE4
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/bc9c4a1984da6f64679cf7ca1fd05852.png
x-vcl-time-ms: 4
content-length: 7944
X-Firefox-Spdy: h2
api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.js?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Mon, 24 Oct 2022 13:25:18 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ettxf.com/content/c38a43db-85fe-4a74-a406-6bd4409e2d20
200 OK 13 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ettxf.com/content/c38a43db-85fe-4a74-a406-6bd4409e2d20
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2ae56d079adba0bcc4977d33685fe749
5d38a0f50940eed2ba0fedc64137481ca4e664d5
dd1357fa748005d3707c9eb33eb4388c33b76e58d453311cfff0d0a2748ec03d
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ettxf.com/content/c38a43db-85fe-4a74-a406-6bd4409e2d20 HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 444593436489081238685764127687054956608,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 444593436489081238685764127687054956608,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
etag: "cf5492ce7c27089ecd2c0fc9ff256857"
last-modified: Wed, 28 Sep 2022 13:35:55 GMT
req-referer: https://www.primicias.ec/noticias/en-exclusiva/investigan-presuntos-vinculos-claudia-garzon/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 1cc712c39c6c1bf3c4fc12730c70e1a0
x-envoy-upstream-service-time: 1472
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb803
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
age: 985393
x-served-by: cache-iad-kiad7000095-IAD, cache-iad-kcgs7200179-IAD, cache-lga21925-LGA, cache-iad-kcgs7200021-IAD, cache-bma1648-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 2, 1
x-timer: S1666617919.447322,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//ettxf.com/content/c38a43db-85fe-4a74-a406-6bd4409e2d20
x-vcl-time-ms: 1
content-length: 13342
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 938aa0646f0fb78a9310aa3d019f94ce
6a2625e6f3d394bb8d5657dad163eae5a43e097a
8650b254d18084942f138e3d8c01132e9c16665b4f80eb354214f3346e0d8234
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 266
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://kawtar.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Mon, 24 Oct 2022 13:25:18 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//console.brax-cdn.com/creatives/44dd7285-cd6a-4a0f-9085-8137587509a3/images/32d653ef-7314-4ab1-9745-40830f205bee_1000x600.jpeg
200 OK 4.8 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//console.brax-cdn.com/creatives/44dd7285-cd6a-4a0f-9085-8137587509a3/images/32d653ef-7314-4ab1-9745-40830f205bee_1000x600.jpeg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09457c7a9a4f4cabf00adcfd12ebb5bb
2d40791e9346c71e0d2f4d2afc77e7d07effd2be
025b6f15cef6c447ee00f1aefac8ee59154d12ef30a8f6a52dc177db40113d47
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//console.brax-cdn.com/creatives/44dd7285-cd6a-4a0f-9085-8137587509a3/images/32d653ef-7314-4ab1-9745-40830f205bee_1000x600.jpeg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 341216291776931507350091950044075670521,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 341216291776931507350091950044075670521,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
etag: "92fb0f29477719e00a3d3c81baf0ffa7"
last-modified: Wed, 10 Aug 2022 09:31:24 GMT
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: ef4d51993ad070bdb27f6230d620d16e
x-envoy-upstream-service-time: 958
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb204
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
age: 4614818
x-served-by: cache-iad-kiad7000117-IAD, cache-iad-kcgs7200042-IAD, cache-bur-kbur8200053-BUR, cache-iad-kjyo7100156-IAD, cache-bma1648-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 1, 1
x-timer: S1666617919.451561,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//console.brax-cdn.com/creatives/44dd7285-cd6a-4a0f-9085-8137587509a3/images/32d653ef-7314-4ab1-9745-40830f205bee_1000x600.jpeg
x-vcl-time-ms: 1
content-length: 4824
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3afd4e88e658af134b18abda7a3ae2a.jpg
200 OK 5.6 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3afd4e88e658af134b18abda7a3ae2a.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 14ef5830474bac9e6e04c0e3b73b65e3
029d267f5844a9172f68489225c2c1875b466e22
e1804984858dae54b6e9face27dd70201be6ff48b32985a1959e54aa24e1f520
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3afd4e88e658af134b18abda7a3ae2a.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 540279164799566712583557572357803464924,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 540279164799566712583557572357803464924,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
etag: "a69ce782cfdf15dbe99dbb41640c61e9"
expiration: expiry-date="Fri, 30 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 30 Aug 2022 07:38:50 GMT
req-referer: https://www.radio-norge.org/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 89
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb202
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
age: 2940228
x-served-by: cache-iad-kcgs7200119-IAD, cache-iad-kjyo7100050-IAD, cache-bur-kbur8200101-BUR, cache-iad-kjyo7100171-IAD, cache-bma1648-BMA
x-cache: MISS, MISS, HIT, HIT, HIT
x-cache-hits: 0, 0, 1, 67, 1
x-timer: S1666617919.453634,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3afd4e88e658af134b18abda7a3ae2a.jpg
x-vcl-time-ms: 1
content-length: 5612
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/trc/3/json?tim=13%3A25%3A17.792<i=deflated&data=%7B%22id%22%3A836%2C%22ii%22%3A%22%2Ft20-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1666602472182%2C%22vi%22%3A1666617917789%2C%22cv%22%3A%2220221024-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic%22%2C%22vpi%22%3A%22%2Ft20-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A4549%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A363.3999938964844%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A4511.39990234375%2C%22mw%22%3A981.5999755859375%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft20-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 36 kB URL HTTP/2 trc.taboola.com/forumotion-ar/trc/3/json?tim=13%3A25%3A17.792<i=deflated&data=%7B%22id%22%3A836%2C%22ii%22%3A%22%2Ft20-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1666602472182%2C%22vi%22%3A1666617917789%2C%22cv%22%3A%2220221024-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic%22%2C%22vpi%22%3A%22%2Ft20-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A4549%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A363.3999938964844%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A4511.39990234375%2C%22mw%22%3A981.5999755859375%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft20-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
Hash 73bad8096435b0bec053d76f90135c59
768bce64edb4f40e9614c87fa1325159dd6f2e51
885bead1db16bd100a310fa4d3dcd63f3603c3f98575cd9b447addcdc58f1606
GET /forumotion-ar/trc/3/json?tim=13%3A25%3A17.792<i=deflated&data=%7B%22id%22%3A836%2C%22ii%22%3A%22%2Ft20-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1666602472182%2C%22vi%22%3A1666617917789%2C%22cv%22%3A%2220221024-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic%22%2C%22vpi%22%3A%22%2Ft20-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A4549%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A363.3999938964844%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A4511.39990234375%2C%22mw%22%3A981.5999755859375%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft20-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617919.873387,VS0,VE405
vary: Accept-Encoding
x-vcl-time-ms: 405
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3e1f6a799621cf9a8eca0aa1666bb71.jpg
200 OK 13 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3e1f6a799621cf9a8eca0aa1666bb71.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dffae6eedd641f3e20de2bcbfb080b7e
aada699d4828af1aa4583adfce6b41e726c23332
308295abf575799085020481350c4a6dc962f2dc29febcf2e458114e37687d93
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3e1f6a799621cf9a8eca0aa1666bb71.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 415729823255407404049982224673888587257,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 415729823255407404049982224673888587257,553231981581714319628150088830979202071,29ecf9b93bbf306179626feeda1fab70
etag: "bdf70166cf174dd7d46290c9ac597d61"
last-modified: Thu, 11 Aug 2022 00:11:13 GMT
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: c77be841417611cabfe3257d9029a280
x-envoy-upstream-service-time: 83
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb804
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
age: 4841796
x-served-by: cache-iad-kcgs7200160-IAD, cache-iad-kiad7000077-IAD, cache-lga21972-LGA, cache-iad-kcgs7200061-IAD, cache-bma1648-BMA
x-cache: MISS, MISS, HIT, HIT, HIT
x-cache-hits: 0, 0, 1, 1, 1
x-timer: S1666617919.451160,VS0,VE39
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_184%2Cw_220%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/d3e1f6a799621cf9a8eca0aa1666bb71.jpg
x-vcl-time-ms: 39
content-length: 12942
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 76b4b66b2a057f963f3547fd4f23b554
c5d2db0098ea461fc8c78ae25c184ba0379c2c54
f4c170104ec4dec35aa81d86c3c9809d1fe782ff01855ebe5e21b800ec2c2ae5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5458
Cache-Control: max-age=130661
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Etag: "6355d852-139"
Expires: Wed, 26 Oct 2022 01:43:00 GMT
Last-Modified: Mon, 24 Oct 2022 00:12:02 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 313
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:19 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9846
Expires: Mon, 24 Oct 2022 16:09:25 GMT
Date: Mon, 24 Oct 2022 13:25:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9846
Expires: Mon, 24 Oct 2022 16:09:25 GMT
Date: Mon, 24 Oct 2022 13:25:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9846
Expires: Mon, 24 Oct 2022 16:09:25 GMT
Date: Mon, 24 Oct 2022 13:25:19 GMT
Connection: keep-alive
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 550d4419c309d70b697b4f4ab13bed6b
46ff7173de11530e73d7ad049ad97bcc48c43b51
cf4f31a9ef27a5b5333b8676e3cff526bbcd9845cfe5bd4e19ab16a575fd042a
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 307
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://kawtar.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Mon, 24 Oct 2022 13:25:19 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9983bdfe8dbe8386970aae586bb57575
4c5ff521fec700a1cda73325eebbeb88f97baa39
775d510a8d82ed993085e3d828c33b75eee99db2911b90d6151faf5c2e25b5d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9894
x-amzn-requestid: 8d639b03-49d2-411b-b0ca-39c5dafe21f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelOtF6YIAMF-4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b591-230070a06848d4d90ea4f6ef;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mYzFAcyUErnaOlGBX0ygFYZ4608EanLq5V4xzX7qCHQRGzkKwwWvHw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:36:45 GMT
age: 53314
etag: "4c5ff521fec700a1cda73325eebbeb88f97baa39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9846
Expires: Mon, 24 Oct 2022 16:09:25 GMT
Date: Mon, 24 Oct 2022 13:25:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9846
Expires: Mon, 24 Oct 2022 16:09:25 GMT
Date: Mon, 24 Oct 2022 13:25:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F888df8db-5e36-4530-9f02-09268aefe1af.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F888df8db-5e36-4530-9f02-09268aefe1af.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9896b15d25725efe19642f3e70ec9103
9f030fdc38125b6b523b0d12571d666907a83f4d
88a74f5fd7e694aa473ff0b1a2cc7f2328738dc9acf5c61f2501877dc72ec9bb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F888df8db-5e36-4530-9f02-09268aefe1af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12770
x-amzn-requestid: c40e1251-15f4-486c-8744-af05d80ff14e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelkxERXoAMFdvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b61e-1bb648e9150a5cb95d69b3c5;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:46:06 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FS_whBKHlTourjDSpHj_fRbNs3r1zsTU97BpxqWyKHL4XLoc7IWGgw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:52:34 GMT
age: 55965
etag: "9f030fdc38125b6b523b0d12571d666907a83f4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f12f21779aa94b557db8037ceefd15b2
1698d8d0ff47fc4e6dd20d99ceae84cfcdd69e86
0d33ee5a721c2f940ff1e7d5fae9abba3781f6d37e458a36285718466ecdcd10
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8ac15f-1a51-4bfe-ab4a-570fc480a976.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4434
x-amzn-requestid: 41e95a27-2955-4224-8d2c-f12d1254cda7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0EQboAMFmMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-5cb99b700c84c99c2d9e52d7;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 49FYzrcMWfgHbe4smL20px9dbIcXIGCujJ6djuVRT3bEwCkBvgz7Iw==
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:46:57 GMT
age: 56302
etag: "1698d8d0ff47fc4e6dd20d99ceae84cfcdd69e86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0e8944f-330b-4c84-abef-bb7192d06408.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0e8944f-330b-4c84-abef-bb7192d06408.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 00bb08d0e8d45c0b0daf65ed676f35fa
0e189c28df7add54e092ea9cb101b0fab7d9024d
e2968bade1033fb2b73d28b8a04bcffa5262bd222bf9748bdcb923ef2b1b6416
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0e8944f-330b-4c84-abef-bb7192d06408.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5440
x-amzn-requestid: e05d1f8e-78e3-4eb6-bebd-3f7a07894e3b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYvLoGV3IAMFyPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63535f17-29fac13e0fec920c04885288;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 03:10:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -i4LZwYLF_YbucK9t-c1lCjqRsmocQ5k8ACjXIznTusOglpUsiT2vA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 03:40:02 GMT
age: 35117
etag: "0e189c28df7add54e092ea9cb101b0fab7d9024d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&cmcv=&pix=31589837&cb=1666617918785&uv=3233&tms=1666617918785&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1666617915962!ts:1666617918785&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&cmcv=&pix=31589837&cb=1666617918785&uv=3233&tms=1666617918785&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1666617915962!ts:1666617918785&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&cmcv=&pix=31589837&cb=1666617918785&uv=3233&tms=1666617918785&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1666617915962!ts:1666617918785&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
content-length: 0
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af3d4b4d16ad8b30805be96afa6472e3
bceb257123711c43994e5a03e9caf22eeee16423
30d7fea8d87522ce3ba2abf2c47e0025af1b7c05d6b4ea9f26aaa1f06aff4a67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F21cfb8fe-4b68-43f0-a196-17c9a1dd3acb.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10072
x-amzn-requestid: 2f26fcdb-0540-49ea-be46-83c00182fcc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelB0FKvoAMFVFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b53e-1be524647e3db4a211e4c4ff;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:22 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sNu31Qx0p_Ikus0GsGKRNGVxOGnIRSewAXfkXyzOCmT6bJ1D1Qz-0w==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:10:20 GMT
etag: "bceb257123711c43994e5a03e9caf22eeee16423"
content-type: image/jpeg
age: 54899
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=13%3A25%3A18.492&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=1643&cv=20221024-5-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=13%3A25%3A18.492&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=1643&cv=20221024-5-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=13%3A25%3A18.492&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=1643&cv=20221024-5-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
x-fastly-to-nlb-rtt: 83598
access-control-allow-credentials: true
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff75bf2c3-b1dc-465c-ba9a-30b41f6f5cac.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff75bf2c3-b1dc-465c-ba9a-30b41f6f5cac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9b1a13676d3fac304595806959135a2
9c16b23d37594b041cf8678399e6eaeb690346a9
7bc8f67670709caae6b39435fdaa3e5c71b9b30db76c006cc2c841300291a246
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff75bf2c3-b1dc-465c-ba9a-30b41f6f5cac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9568
x-amzn-requestid: 0a162a3c-1723-4926-8651-7d22ecade080
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelN4EVKoAMFWnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b58b-10dae6262d730d1f12c50a20;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dQhcd1Ip1LFxzOlFCnVRBsX4nIAvOuKjONC0HKysRDmR-Y8G_x4sTg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:52:34 GMT
age: 55965
etag: "9c16b23d37594b041cf8678399e6eaeb690346a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=31589837&cb=1666617918880&uv=3233&tms=1666617918880&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1666617915962!ts:1666617918880&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=31589837&cb=1666617918880&uv=3233&tms=1666617918880&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1666617915962!ts:1666617918880&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=31589837&cb=1666617918880&uv=3233&tms=1666617918880&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1666617915962!ts:1666617918880&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
content-length: 0
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=undefined&cb=1666617918882&uv=3233&tms=1666617918882&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=4f8475c2-cbea-4240-a2a0-fe420e64286a&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 8.7 kB URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=undefined&cb=1666617918882&uv=3233&tms=1666617918882&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=4f8475c2-cbea-4240-a2a0-fe420e64286a&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
Hash 942ee9814be644388aba19fd7c62a6a2
773c11c00e192527efc32527799234947a1defdd
18903c7fc9f5bc0500a1a62b769c5432126f2c8aacd8cf8459bc8325cb9f76bb
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=undefined&cb=1666617918882&uv=3233&tms=1666617918882&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=4f8475c2-cbea-4240-a2a0-fe420e64286a&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617920.866656,VS0,VE22
vary: Accept-Encoding
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1666617918807&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1485&pt=1502897376&tz=0&viewable=true&ddast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
200 OK 128 kB URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1666617918807&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1485&pt=1502897376&tz=0&viewable=true&ddast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
IP
Size 128 kB (127878 bytes)
Hash 0ee7325bdba310d5c1b3da8a0d02ec12
ccc4c3c83dc001666593e86a321d482873f6db37
e6d059cf506d38d34eff901708339b3b035dd68ae1598ec24c89c3e4f1388374
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1666617918807&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1485&pt=1502897376&tz=0&viewable=true&ddast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1421
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617920.817281,VS0,VE78
vary: Accept-Encoding
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 5eecab30cad6a645a30fdd2755b79711
332f5a5a73fea996b442d479b07f4410286fdd2b
d9874a589fcb7b679918221c62e86e0258484d1f3b752e113b5672c0e81322d4
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1958
Cache-Control: max-age=123616
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Etag: "6355ca79-1d7"
Expires: Tue, 25 Oct 2022 23:45:35 GMT
Last-Modified: Sun, 23 Oct 2022 23:12:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 5eecab30cad6a645a30fdd2755b79711
332f5a5a73fea996b442d479b07f4410286fdd2b
d9874a589fcb7b679918221c62e86e0258484d1f3b752e113b5672c0e81322d4
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1958
Cache-Control: max-age=123616
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Etag: "6355ca79-1d7"
Expires: Tue, 25 Oct 2022 23:45:35 GMT
Last-Modified: Sun, 23 Oct 2022 23:12:57 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 5eecab30cad6a645a30fdd2755b79711
332f5a5a73fea996b442d479b07f4410286fdd2b
d9874a589fcb7b679918221c62e86e0258484d1f3b752e113b5672c0e81322d4
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6211
Cache-Control: max-age=127869
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:19 GMT
Etag: "6355ca79-1d7"
Expires: Wed, 26 Oct 2022 00:56:28 GMT
Last-Modified: Sun, 23 Oct 2022 23:12:57 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4e7e218a-539f-11ed-b99f-194044dd0406; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e7e21e8-539f-11ed-b99f-194044dd0406
X-fe: 88
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4e8b34de-539f-11ed-b4de-153cf9b00106; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b3522-539f-11ed-b4de-153cf9b00106
X-fe: 122
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
am-match.taboola.com/sync?dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&excid=22&docw=0&cijs=1&nlb=true
200 OK 928 B URL HTTP/2 am-match.taboola.com/sync?dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (928), with no line terminators
Hash 17403b41f415b7b0edb59f52e33e8fb2
ba381a8361ae5b781f0c6c318c714083f03335a5
cee951f16e0c0a2483c94e07da6adfd3b4549ce3279979a6c9c054b4f4d7c1cf
GET /sync?dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3406
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4e8b2291-539f-11ed-9f34-1348667f0306; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b22ef-539f-11ed-9f34-1348667f0306
X-fe: 141
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e7e21e8-539f-11ed-b99f-194044dd0406
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e7e21e8-539f-11ed-b99f-194044dd0406
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e7e21e8-539f-11ed-b99f-194044dd0406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4e8d9bb8-539f-11ed-818a-1860f0710106; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 110
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
vidstat.taboola.com/vpaid/vPlayer/player/v14.8.5/OvaMediaPlayer.js
200 OK 87 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v14.8.5/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 37f1d29f3f340126a8d87de26020b990
157ccc63f7608ed316e3e0d003379b56c213e917
fd033725fa5c7f08e4920ccc00497481766349c9362a2b072722a3eb71fece9b
GET /vpaid/vPlayer/player/v14.8.5/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: pOAFugC7p8wsmuUo+i7YuDs6kkU0vhnIGQk1LVczAl9AHRD6gKvohsLUz/rP8jDEvocbdIB437Q=
x-amz-request-id: XWMC8N7PPY5CKERA
last-modified: Mon, 03 Oct 2022 10:56:43 GMT
etag: "37f1d29f3f340126a8d87de26020b990"
x-amz-meta-ctime: 1664794602
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1664794590
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:20 GMT
via: 1.1 varnish
age: 1823217
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 373120
x-timer: S1666617920.262626,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 87174
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=bb69d92c19741b0c7b82404066d1e076&sd=v2_51d89eca7631a4bb7b4823bcd150d251_1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be_1666617918_1666617918_CNawjgYQ3pxDGN2CrdHAMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABo_9iV8p6d99_dAXAA&ui=1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be&pi=/t20-topic&wi=-2738045953797954274&pt=text&vi=1666617917789&li=rbox-t2m<=deflated&tim=13%3A25%3A19.339&id=784&llvl=2&cv=20221024-5-RELEASE&
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=bb69d92c19741b0c7b82404066d1e076&sd=v2_51d89eca7631a4bb7b4823bcd150d251_1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be_1666617918_1666617918_CNawjgYQ3pxDGN2CrdHAMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABo_9iV8p6d99_dAXAA&ui=1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be&pi=/t20-topic&wi=-2738045953797954274&pt=text&vi=1666617917789&li=rbox-t2m<=deflated&tim=13%3A25%3A19.339&id=784&llvl=2&cv=20221024-5-RELEASE&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=bb69d92c19741b0c7b82404066d1e076&sd=v2_51d89eca7631a4bb7b4823bcd150d251_1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be_1666617918_1666617918_CNawjgYQ3pxDGN2CrdHAMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABo_9iV8p6d99_dAXAA&ui=1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be&pi=/t20-topic&wi=-2738045953797954274&pt=text&vi=1666617917789&li=rbox-t2m<=deflated&tim=13%3A25%3A19.339&id=784&llvl=2&cv=20221024-5-RELEASE& HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:20 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617920.302001,VS0,VE86
x-vcl-time-ms: 86
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=120&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=&cb=1666617919448&uv=3233&tms=1666617919448&su=&abt=Noappq22_vD!mprdctdt6_vA!smbs!t120!t45!ufm_vA!vfdc1_vA&ft=0&unm=WIDGET_ITEM&mntl=1&
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=120&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=&cb=1666617919448&uv=3233&tms=1666617919448&su=&abt=Noappq22_vD!mprdctdt6_vA!smbs!t120!t45!ufm_vA!vfdc1_vA&ft=0&unm=WIDGET_ITEM&mntl=1&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=120&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&cmcv=&pix=&cb=1666617919448&uv=3233&tms=1666617919448&su=&abt=Noappq22_vD!mprdctdt6_vA!smbs!t120!t45!ufm_vA!vfdc1_vA&ft=0&unm=WIDGET_ITEM&mntl=1& HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:20 GMT
content-length: 0
X-Firefox-Spdy: h2
vidstatb.taboola.com/vid/blackScreen5.mp4
206 Partial Content 91 kB URL HTTP/2 vidstatb.taboola.com/vid/blackScreen5.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash b2b087fe4ae638c533731c347fcd4df8
62851c888c21bb51cc04f13b6fc0451279fe0425
0407dafc112212a135d1aa4dd9b40ba0208c6bb6b1959f5535af093254189d66
GET /vid/blackScreen5.mp4 HTTP/1.1
Host: vidstatb.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Sun, 02 Jul 2017 20:40:57 GMT
etag: "b2b087fe4ae638c533731c347fcd4df8"
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1497790207
server: AmazonS3
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: gopM2XYfUoVUFmJXQ0440-QEF6IoAyvdLK0EUOquu3M35zK6ZGLwLg==
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:20 GMT
age: 2444204
x-served-by: cache-bma1648-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 571780
x-timer: S1666617921.521623,VS0,VE0
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-range: bytes 0-90783/90784
content-length: 90784
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&excid=22&docw=0&cijs=1&nlb=false
200 OK 996 B URL HTTP/2 am-match.taboola.com/sync?dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
Hash 0f3ac3e105b4bd0c13134864cb03dc8d
cc871782648f0099e476f50833f16e2cede541e4
77ab350d65ae2583e51bd10489ffba997b9e4f625c3c9fef7a99405b9fdcc41b
GET /sync?dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:20 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3407
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b3522-539f-11ed-b4de-153cf9b00106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b3522-539f-11ed-b4de-153cf9b00106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b3522-539f-11ed-b4de-153cf9b00106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4ecfb628-539f-11ed-a632-11482f420206; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 102
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b1bd9-539f-11ed-8dc2-1586fee60306
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b1bd9-539f-11ed-8dc2-1586fee60306
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b1bd9-539f-11ed-8dc2-1586fee60306 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4ed045e2-539f-11ed-aba1-1342c0320406; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 90
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b22ef-539f-11ed-9f34-1348667f0306
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b22ef-539f-11ed-9f34-1348667f0306
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4e8b22ef-539f-11ed-9f34-1348667f0306 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4ed05ac3-539f-11ed-a239-107c10e90406; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 85
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4997
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:20 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617921.508467,VS0,VE86
x-vcl-time-ms: 86
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2542
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:20 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617921.512641,VS0,VE80
x-vcl-time-ms: 80
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4ed6a82a-539f-11ed-b444-1bce7de30306; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4ed6a879-539f-11ed-b444-1bce7de30306
X-fe: 95
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4ed6d16a-539f-11ed-b636-194044dd0106; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4ed6d1a2-539f-11ed-b636-194044dd0106
X-fe: 88
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 0da891f54af8a8cb593dfaca9a333ec4
4472c69e27afbb1d2d18566e674c37c020aee820
de27b37e511f40eb1563682dc1cdc944b07eb307bf2a3c941e88aa8e2422d31f
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 28 Oct 2022 11:01:38 GMT
ETag: "4472c69e27afbb1d2d18566e674c37c020aee820"
Last-Modified: Mon, 24 Oct 2022 11:01:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2410
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75f309b40e5ab4f3-OSL
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:20 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=381&height=214&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1666617918889&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1485&pt=1502897376&tz=0&viewable=true&ddast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
200 OK 513 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=381&height=214&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1666617918889&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1485&pt=1502897376&tz=0&viewable=true&ddast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
IP
File type ASCII text, with very long lines (1424), with no line terminators
Hash ffaa06c41ad3e352f72dbc43919494bf
c974774d75718e14a03dd9e7319ecb5978bbf591
1e1087268a4517bc0a27eb6baa80bec9ac82bc881c81f9f81f87836c398a0964
POST /VideoBidRequestHandlerServlet?oid=15&width=381&height=214&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1666617918889&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1485&pt=1502897376&tz=0&viewable=true&ddast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1433
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617920.878662,VS0,VE88
vary: Accept-Encoding
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4ed6d1a2-539f-11ed-b636-194044dd0106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4ed6d1a2-539f-11ed-b636-194044dd0106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=4ed6d1a2-539f-11ed-b636-194044dd0106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 24 Oct 2022 13:25:20 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=4ef2a5e4-539f-11ed-9183-19b4ac340406; expires=Mon, 21-Nov-2022 13:25:20 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 89
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c56643e11b7df153e8718e2d0068665
0a0f409abc042661876da83e72be7229ffea6446
7451175a3ebde03d72b6f46a7061699715efc12fca808901a94e7154b8228c2d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1780
Cache-Control: max-age=91004
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 13:25:20 GMT
Etag: "63554bc8-1d7"
Expires: Tue, 25 Oct 2022 14:42:04 GMT
Last-Modified: Sun, 23 Oct 2022 14:12:24 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 82ae0399e33b211531dbe59f82967b91
d4c987c9109a41dc369547aa7a4915ff0e7271ef
87379755dbfab0b90a98983253800bb6f027468ae36ad9e057d59aa380a8b76f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=101301
Date: Mon, 24 Oct 2022 13:25:20 GMT
Etag: "6355681e-1d7"
Expires: Tue, 25 Oct 2022 17:33:41 GMT
Last-Modified: Sun, 23 Oct 2022 16:13:18 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dUBZ2YaH2HNRXkppQDvQsR28jUtM5nInxWwQxXzC-dtyIINCisL_sA==
Age: 4823
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 24 Oct 2022 13:25:20 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBECSVmMCEDETa3H6DsrqlvARLTSq9K8FEgEBAQHjV2NgYwAAAAAA_eMAAA&S=AQAAAi9lSqoUc_i0jvZFFzgQHhM; Expires=Tue, 24 Oct 2023 19:25:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 24 Oct 2022 13:25:20 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBECSVmMCEIO2NPmqkXHZrf_b0t8dL4gFEgEBAQHjV2NgYwAAAAAA_eMAAA&S=AQAAAkhyceFHHa-nz-Gaw_gMHhQ; Expires=Tue, 24 Oct 2023 19:25:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
cdn.taboola.com/scripts/cds-pips.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/scripts/cds-pips.js
IP
File type ASCII text, with very long lines (3545), with no line terminators
Hash 780c5c514014519ce276709f515905a0
04fe86d00b9c9077effe05171d066d243ecab221
015db06150b62ad2ad533883652174ebb6f07e24a7147fdac01a0ccd266e3f30
GET /scripts/cds-pips.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2KBeU0d7OyPXtZDYUoIqlTBmhGhsve90tjYoemCxISjKQrNgcxT28sPXVt5KfJt+6r7dFoJgA8g=
x-amz-request-id: NFWGDQGY1WQ95XHE
x-amz-replication-status: COMPLETED
last-modified: Wed, 12 Oct 2022 13:57:57 GMT
etag: "383fa66d2a0a09f4a6e64a9593ad43bb"
x-amz-version-id: z5FoayaLm_Bvew3pbkytkoHczFCvkPwT
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:21 GMT
via: 1.1 varnish
age: 1669
x-served-by: cache-bma1648-BMA
x-cache: HIT
x-cache-hits: 1884
x-timer: S1666617921.339244,VS0,VE0
vary: Accept-Encoding
abp: 70
cache-control: private, max-age=3600
content-length: 1340
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7cb8fb281acff04e7ef926a4f755ebd6
a40e31c40ff6cf530d8810702b4a6b43ca6b230f
aa5571a36c4547ff1e43ddb3fab87599333d6cfa33be0218f0c0625a1d8c7381
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 13:25:21 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 01:56:48 GMT
Expires: Sat, 29 Oct 2022 01:56:47 GMT
Etag: "a40e31c40ff6cf530d8810702b4a6b43ca6b230f"
Cache-Control: max-age=390085,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f309b54d43b517-OSL
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://kawtar.ahlamontada.net
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:21 GMT
via: 1.1 varnish
x-served-by: cache-bma1621-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Mon, 24 Oct 2022 13:25:21 GMT
Content-Length: 43
Connection: keep-alive
my.rtmark.net/gid.js?pub=0&userId=e25c86b264bc49ebae637c591cd1aa46&zoneId=2308013&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=e25c86b264bc49ebae637c591cd1aa46&zoneId=2308013&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 3cf61eb4721d8fcd2b1ec422dfee3d86
af5933f9e93ee870f75107764efa1b73ca5cd0eb
6a41f662bc49a75e97dc0b5f704c494c4a483b1a7b4d7f24b1f5b46ccd0e756d
GET /gid.js?pub=0&userId=e25c86b264bc49ebae637c591cd1aa46&zoneId=2308013&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Cookie: ID=0358c5057d3545da88e248a899a22b7e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0358c5057d3545da88e248a899a22b7e; expires=Tue, 24 Oct 2023 13:25:26 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1666617923873&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1485&pt=-599849940&tz=0&viewable=true&ddast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!smbs!t45!ufm_vA!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1666617923873&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1485&pt=-599849940&tz=0&viewable=true&ddast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!smbs!t45!ufm_vA!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1666617923873&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1485&pt=-599849940&tz=0&viewable=true&ddast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!smbs!t45!ufm_vA!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1463
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:24 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617925.835613,VS0,VE53
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:19 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3401
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
200 OK 0 B URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Wed, 23 Nov 2022 13:25:17 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: 0809:8EE4:293A3AE:2A957F0:634EFA09
vary: Accept-Encoding
x-fastly-request-id: a2f69c826e7a84f9bfd2ce98bf21fcd8d487b294
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic&encoded=1&uid=1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1666617918442&tagid=&cntry=NO&platform=1&sesid=51d89eca7631a4bb7b4823bcd150d251&itemid=/t20-topic&viewid=1666617917789&geolat=&geoing=&deviceifa=&appid=&sd=v2_51d89eca7631a4bb7b4823bcd150d251_1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be_1666617918_1666617918_CNawjgYQ3pxDGN2CrdHAMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABo_9iV8p6d99_dAXAA&ri=67addf2d91b07ab6829a952fc60fb60d&appname=&cdb=&gdprApplies=true&rid=&sii=-2738045953797954274&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=8776
200 OK 0 B URL HTTP/2 15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic&encoded=1&uid=1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1666617918442&tagid=&cntry=NO&platform=1&sesid=51d89eca7631a4bb7b4823bcd150d251&itemid=/t20-topic&viewid=1666617917789&geolat=&geoing=&deviceifa=&appid=&sd=v2_51d89eca7631a4bb7b4823bcd150d251_1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be_1666617918_1666617918_CNawjgYQ3pxDGN2CrdHAMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABo_9iV8p6d99_dAXAA&ri=67addf2d91b07ab6829a952fc60fb60d&appname=&cdb=&gdprApplies=true&rid=&sii=-2738045953797954274&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=8776
IP
GET /tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fkawtar.ahlamontada.net%2Ft20-topic&encoded=1&uid=1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1666617918442&tagid=&cntry=NO&platform=1&sesid=51d89eca7631a4bb7b4823bcd150d251&itemid=/t20-topic&viewid=1666617917789&geolat=&geoing=&deviceifa=&appid=&sd=v2_51d89eca7631a4bb7b4823bcd150d251_1f658109-824c-4548-a1d3-1da82684f7d0-tucta5017be_1666617918_1666617918_CNawjgYQ3pxDGN2CrdHAMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABo_9iV8p6d99_dAXAA&ri=67addf2d91b07ab6829a952fc60fb60d&appname=&cdb=&gdprApplies=true&rid=&sii=-2738045953797954274&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=8776 HTTP/1.1
Host: 15.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
machineid: 1449
link: <https://am-wf.taboola.com>; rel=preconnect
xvid-debug: mrmr - :
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617919.442505,VS0,VE30
vary: Accept-Encoding
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&cmcv=&pix=undefined&cb=1666617918787&uv=3233&tms=1666617918787&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0b1e3830-712f-4549-b179-011f6bf5a93f&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&cmcv=&pix=undefined&cb=1666617918787&uv=3233&tms=1666617918787&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0b1e3830-712f-4549-b179-011f6bf5a93f&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7TEACFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDBxrDzDzWCtW0xmbtFqtFxLHLvlWrBYzGwTm2vh3MyMQAITx8oz3AzWusVk5hatRsu1xLFbrgWLxcw2sbkWzs3MChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq91-E4Py11hNDvcfrvpYXLY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYcubZnKD1XgAjKvAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgABChZUi_CzdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_HkgtRsblyuPwzTaLhWli8U1Mw8lm4jE5VoORZbXYXqbQrt1I80pCX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gRyNkCKlixWy-FqN1mMNovFZLkbjiYTpGjJarlcrjab1Wo3WswGm-Vws0GKVq1mo81guJpNZrvdajgYLkcjpGjJcrfcrUaTxWi0XG52w81oMESYmNlWw8VguRZORhu3aDUarhWOkWetGDmMk9lwNPONDGvR62N6uAaL3cTlRcEAjb1InhbpRGKxLUfOycax3I0WE8PGNzFORoPRYDYbOVaG3WwilmhOFulEdtm3FiPjcuVx-GabxcI0sfgmpuFkM_GYHKvByLJa7Bsz22q4GCzXwslo4xatRsO1wjHyrBUjh3EyG45mvpFhLXp9TA_XYLGbuPyN2Ww2W-yWi-G-MZvNZovdcjHcd-gM39XnbHQGxxOPTtlQTkYGm8OgcBks3t_nIm1GGzejShu2WFTX4s41seq0sZOxczAbFL6_ubQVB7eRc7kvOYgNBkUsEVykE5nf8nr7TU-_3a2wXMQSpekinehFl8Fa9Dc8PRaxRHC6SCeil_F0Uf-RIRdz5WAumswVq9EqAQAAAAAAAAAsYc68CQAAAMBpIKPBZrha54EMloPdcrVcAAhnL90fMgCAJzRViF1tgEDbnJYyj-LGjxvMb3m9_aan3-5WWK4M8EBNzrz5M0Gs1WpZAwAACGADAAAEcOvmLQCbif____-PAwAAkJGjBwAAEN8HglLrgRu9VuAnwN1uNg!&cmcv=&pix=undefined&cb=1666617918787&uv=3233&tms=1666617918787&abt=mprdctdt6_vA!Noappq22_vD!smbs!t45!ufm!vfdc1_vA&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0b1e3830-712f-4549-b179-011f6bf5a93f&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:19 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617920.764800,VS0,VE22
vary: Accept-Encoding
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:20 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=381&height=214&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1666617923930&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1485&pt=2007792299&tz=0&viewable=true&ddast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!smbs!t120!t45!ufm_vA!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=381&height=214&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1666617923930&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1485&pt=2007792299&tz=0&viewable=true&ddast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!smbs!t120!t45!ufm_vA!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=381&height=214&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1666617923930&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1485&pt=2007792299&tz=0&viewable=true&ddast=V7CKMCFgPbIkRj-Z9CZwTbIkRj-Z9CZwUAAAAGBuIHJDQzjnarjWWtsbgcbtFkNFgrLAvDWuYyTQYr22gynC2MQBK-2cxl26zWgoVh5BaNbBa3cLewuSWWxcjjMe4Gq-XICh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3eq3Dd3pY7gqj2eH2200Pk8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQIMWCABAgAAJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUUFqESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQKqwcaYcBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAajEyLlceh2-2WSxME4tvYhpONhOPybEajCyrxfYyhXbtRppXEvo8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osD-BnA2QoiWL1XK42k0Wo81iMVnuhqPJBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRJma21XAxWK6Fk9HGLVqNhmuFY-RZK0YO42Q2HM18I8Na9PqYHq7BYjdxeVEwQGMvgot0IvNbXm-_6em3uxWWi1iiOVmkE9ll31qMjMuVx-GbbRYL08Tim5iGk83EY3KsBiPLarFvzGyr4WKwXAsno41btBoN1wrHyLNWjBzGyWw4mvlGhrXo9TE9XIPFbuLyN2az2WyxWy6G-8ZsNpstdsvFcN-hM3xXn7PRGRxPPDplQzkZGWwOg8JlsHh_n4u0GW3cjCpt2GJRXYs718Sq08ZOxs7BbFD4_ubSVhzcRs7lvuQgNhgUsURwukgnopfxdBFLJE-LdCLbLUwmm2XkXEwMu4XFNpwsF87VZOaxDWYW22BkEUuUpot0ohddBmvR3_D0WNR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmulgsA4eyl-0MGAPCEpgqxqw0QaJvTUuZR3Phxg_ktr7ff9PTb3QrLlQEeqMmZN3smiLVaLWsAAAABbAAAgABu3bwFYDNy-0BPKj1wo9cK_AS4280G!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!smbs!t120!t45!ufm_vA!vfdc1_vA&mPre=0.025&cirf=https%3A%2F%2Fkawtar.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1417
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://kawtar.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Mon, 24 Oct 2022 13:25:24 GMT
via: 1.1 varnish
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1666617925.892140,VS0,VE67
vary: Accept-Encoding
X-Firefox-Spdy: h2
illiweb.com/rs3/63/frm/lang/notutf8-ar.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/63/frm/lang/notutf8-ar.js
IP
GET /rs3/63/frm/lang/notutf8-ar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=73321
access-control-allow-origin: *
expires: Fri, 08 Sep 2023 09:02:12 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3990185
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E48G1f5lMtolaR8A1BnaC7S5%2FcDPHoO5fgccBoCO4kUQ2v4QHvHB7qoxqimIsLBwxSqz3t8cEV%2FaeWMZtxEValxA70p3d8IvTTvdlYxFfXPXFi3GP69qQ%2BSD7IdA5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a21b20b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
200 OK 0 B URL HTTP/2 connect.topicit.net/scripts/connect.js
IP
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 2411
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7jUbzhMA6npk6CMlwpkYNa5tZuS8QcSJFjX%2BOsnpWDO%2BHoVpexrVBnBgh0RyU%2FK6Hp2x%2Bz1Tn7Vk%2BsBzKwKz5oftVE%2FXAz0PfkQ0P5rCBTqAkYsFy4%2FirecRhdZs6V%2BmYfv5lKmQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a54e59b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/pfe/current/tag.min.js?z=2308013
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/tag.min.js?z=2308013
IP
GET /pfe/current/tag.min.js?z=2308013 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/javascript
last-modified: Thu, 20 Oct 2022 16:39:30 GMT
etag: W/"635179c2-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=kawtar.ahlamontada.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=kawtar.ahlamontada.net
IP
GET /syncframe?origin=rtus&topUrl=kawtar.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=5eb50239-4e40-4bc1-beea-ae97bbfbd611; expires=Sat, 18 Nov 2023 13:25:18 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 506855
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/
x-crto-bundle: cE_WTF9nUm1XUlRVR0xCUk9YSllaQ05SZ1ZoZXpyRWZ5RGh2aUZzaHJaT2VFNHlzVHNKVktoUnhtWHZpYW01alZPZmxMellLWTN3clFGVlN1ZE4lMkJ2YnNISVpFUkVDQ1clMkZZVnpGZ0hJUHpIZkFUQU4zVWM4dU1uWEFzQlMxcUZSNE51ZWZINm1uaiUyQndGVGlhMThQeGZIJTJCM29PQSUzRCUzRA
Origin: https://kawtar.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:19 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://kawtar.ahlamontada.net
server-processing-duration-in-ticks: 1799476
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: text/javascript
last-modified: Sat, 01 Oct 2022 02:55:29 GMT
etag: W/"6337ac21-1e358"
expires: Tue, 25 Oct 2022 13:25:17 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
illiweb.com/rs3/63/frm/jquery/cookie/jquery.cookie.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/63/frm/jquery/cookie/jquery.cookie.js
IP
GET /rs3/63/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Fri, 08 Sep 2023 08:06:37 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 3993520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MAfLZANIp%2Bz1cKzZBVSHj8JAglH7FvTQ%2FuOELukfgwX0EKxkA%2B1GZySqoINT%2FFitK%2B3T5SYC6Lg8eGyAHVrlX7nksPIwS8LajqVDILPhjCeQ4QHZyuyIXnuPEZcurA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a22b32b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 108340
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
kawtar.ahlamontada.net/sw.js
200 OK 0 B URL HTTP/2 kawtar.ahlamontada.net/sw.js
IP
GET /sw.js HTTP/1.1
Host: kawtar.ahlamontada.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kawtar.ahlamontada.net/t20-topic
Connection: keep-alive
Cookie: exadd=166663; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; _ga=GA1.2.1996553249.1666617918; _gid=GA1.2.743287734.1666617918; _gat_gtag_UA_144347007_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/javascript
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kawtar.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:18 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1723
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wx9r7dce5SeWnzRMlXr9rZBues9vB%2B1TKdNSOxoCabsIpRFPXmjXGbYqYTfV0NvFsqj6IvqejKr1rplKxVRygkJrDXC8nxoeI%2BN%2FGuGqsDo9rfa%2B1uq2JvgmQmJgYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f309a989000b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kawtar.ahlamontada.net/t20-topic
200 OK 0 B URL HTTP/2 kawtar.ahlamontada.net/t20-topic
IP
GET /t20-topic HTTP/1.1
Host: kawtar.ahlamontada.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 24 Oct 2022 13:25:17 GMT
content-type: text/html; charset=windows-1256
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache
pragma: no-cache
expires: Mon, 24 Oct 2022 00:00:00 GMT
last-modified: Mon, 24 Oct 2022 13:25:17 GMT
vary: User-Agent
set-cookie: exadd=166663; expires=Mon, 24-Oct-2022 17:25:17 GMT; Max-Age=14400
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
94.23.76.111
178.33.43.150
52.35.167.249
151.101.85.44
93.184.220.29
23.36.77.32
185.94.180.125
104.21.63.213
3.124.240.3
52.214.137.185
185.106.33.48
178.33.115.32