forms.uoh.sa/
301 Moved Permanently 162 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: forms.uoh.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 09 Dec 2022 10:06:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://forms.uoh.sa/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4730
Expires: Fri, 09 Dec 2022 11:25:07 GMT
Date: Fri, 09 Dec 2022 10:06:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2324
Expires: Fri, 09 Dec 2022 10:45:01 GMT
Date: Fri, 09 Dec 2022 10:06:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 09:08:18 GMT
content-type: application/json
age: 3480
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12542
Expires: Fri, 09 Dec 2022 13:35:20 GMT
Date: Fri, 09 Dec 2022 10:06:18 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VESoXBl4/Mi2zuXFjogSKYjNyWuXlNT+Ydb2dGQ14shOiAEgkIa3V06LcWo6FkRJ1kT3ApbE3A77ST8l3YFdLA==
x-amz-request-id: PYQAN1TFVT3PS3RB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 09:50:12 GMT
age: 966
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 10:06:18 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b28988d33921e535cfcf4533cc13312
583ffa420631b56165589e6e02350b2d18b021b8
b631f3204c8030b777a817235a019954eeafd2058d8ff24eab8d3db9b23330a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B631F3204C8030B777A817235A019954EEAFD2058D8FF24EAB8D3DB9B23330A7"
Last-Modified: Thu, 08 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 09 Dec 2022 16:06:18 GMT
Date: Fri, 09 Dec 2022 10:06:18 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 09:07:55 GMT
age: 3503
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6237
Cache-Control: max-age=89070
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:19 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:50:49 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DLnecSZDTy3n3tpMiThOqQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QNnqOXiyBdkZneXPUfYwz4ALsJQ=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6010
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 10:06:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6010
Expires: Fri, 09 Dec 2022 11:46:30 GMT
Date: Fri, 09 Dec 2022 10:06:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 23074
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: c5704c7a-60c4-402b-8018-5885a8dae971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F9BIAMF3ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-3e9573d900714e3250f43e17;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mLTL7L808-OguYGrl3FUvwmFmPQjBPRj7PVfgEheFHWg4g4skoBvOg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 00:33:39 GMT
age: 34361
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 17:01:04 GMT
age: 61516
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955c6ac69b89f6cbd497df53fcb2ae1b
2506152cdd1056533116feb9350124356e570e54
fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7217
x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUEDEWpIAMFqUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 08:30:07 GMT
age: 5773
etag: "2506152cdd1056533116feb9350124356e570e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8546542f00ea29ef4df6ab8d3c7c2164
5c8ffe91490006a9890188b53f875568c2b6bd8f
7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H067kZXU_djWxbWO34bYMqa0xZ-WF9ntEBhZ-kV_TDoJFXQL_J1hqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:34:27 GMT
age: 23513
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 730ba1a8edb79ba6f83b46d1ba5aed7b
55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 13:49:59 GMT
age: 72981
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6597735259dc18766708d5433502e2ab
3d05ba2250095b4b04b8701538b9640118768797
e86400986c930d554e7bdf7f3aad337526975cd4378f894cd00d311084321c94
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E86400986C930D554E7BDF7F3AAD337526975CD4378F894CD00D311084321C94"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21570
Expires: Fri, 09 Dec 2022 16:05:51 GMT
Date: Fri, 09 Dec 2022 10:06:21 GMT
Connection: keep-alive
forms.uoh.sa/?option=saml_user_login&redirect_to=https%3A%2F%2Fforms.uoh.sa%2Fen%2F
302 Found 1.4 kB URL HTTP/2 forms.uoh.sa/?option=saml_user_login&redirect_to=https%3A%2F%2Fforms.uoh.sa%2Fen%2F
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1328), with CRLF line terminators
Hash c636d90a89971535f04f2a833ff634b2
813a0a00869036e84ccb9eb0ac5eeeca12ef45d6
8fca8570b7c5ba012472111c7a7b93b50b71144197317a525f070a43b71ff00e
GET /?option=saml_user_login&redirect_to=https%3A%2F%2Fforms.uoh.sa%2Fen%2F HTTP/1.1
Host: forms.uoh.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://forms.uoh.sa/en/
Cookie: PHPSESSID=4i8mobnem3887b0fj0j3cbu47a; pll_language=en
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 09 Dec 2022 10:06:20 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: max-age=0, private, no-store, no-cache, must-revalidate
location: https://login.uoh.edu.sa/sso/go.ashx?SAMLRequest=jZJRa9swFIXfB%2FsPQu%2ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%2BfYC7TQlulNV%2BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%2FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%2Bst5U1dGp5XywRlfMDCyW7bUF%2FHXnTzLPFIs%2FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%2FlHiasiRl%2FFOZcMEzkfKflOz%2FoX3WMBl%2BD%2B04iVB8Kcs9238%2FlJRsLrjXFjB0yh2Ue9CVur%2B7LejJ%2Bx5FHDfWdRgFe4pQxpRsh%2FQ0SD%2BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%2BD%2FN8r1qySPPasseAU%2B7k0YxmPcadDWSWgVO%2F%2FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%2FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%3D%3D&RelayState=9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%3D&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=G3VYtQh5M5qj5%2FEULbT%2BwKVmRu%2B8x%2Blv%2BI%2FW3YS664yAToyxfflGNggzZWTR6XJD%2BhViWctJ2S7Qb0%2B7RwJ1FjKcDlsZZoXPOODcTobL%2BCffYrMMnifKMeeJywz%2FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%2FH7xtXdp%2FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%2BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%2BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%3D%3D
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/js-sha1/0.6.0/sha1.min.js
200 OK 1.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/js-sha1/0.6.0/sha1.min.js
IP
File type ASCII text, with very long lines (5611)
Hash 6b7e1847ab518a1d4b26fd8575ace844
b9c5c4db2e67a330b42de711392cd74a6f2f1360
9e302ba331b7b97e02a65d2630e40d7f3c869a8f510d15bd405372e9f47cfec0
GET /ajax/libs/js-sha1/0.6.0/sha1.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:06:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 1743
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec6-16a1"
last-modified: Mon, 04 May 2020 16:11:50 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1427666
expires: Wed, 29 Nov 2023 10:06:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Meh2zjEZMhOLjm56oiLG0pwW7LYqkJNipjMKdXJe6YDvWtmPkwlJ8JzjgDRU28wsXTa70a4dtA5PYB7ft8oy6rPwArpnQt7XgrIoGL2oJQlYEdkukqAEYYzoJO5YhENge25BYqTP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776ced7e6bd4b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f9aac3c48c36a018d080099eff89626a
6d339dc5831b5cca7e9596ce692f15e92162389d
05a756fec95a4bb5c2155c2f43368c9bce2024a9b9b6fb72a8659f4fea2d011c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4010
Cache-Control: max-age=97640
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:22 GMT
Etag: "6391d35d-1d7"
Expires: Sat, 10 Dec 2022 13:13:42 GMT
Last-Modified: Thu, 08 Dec 2022 12:06:53 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
200 OK 87 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1361), with CRLF line terminators
Hash 58d46725279d808b5e5fd760caa4fb47
4d39fb6230bd7dce7701ffc03f647a94db265d75
b427dbe5ba97048760539ea0672dea311190a8f7e9c6d49b0299644cb8e66190
GET /_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forms.uoh.sa/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Set-Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg; path=/; secure; HttpOnly; SameSite=None
Date: Fri, 09 Dec 2022 10:06:21 GMT
Content-Length: 86957
X-Frame-Options: DENY, SAMEORIGIN
login.uoh.edu.sa/_layouts/images/pg/js/jquery-3.5.1.min.js
200 OK 90 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/js/jquery-3.5.1.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /_layouts/images/pg/js/jquery-3.5.1.min.js HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 30 Jul 2020 10:50:38 GMT
Accept-Ranges: bytes
ETag: "053a4425f66d61:0"
Content-Length: 89476
X-Frame-Options: DENY, SAMEORIGIN
Date: Fri, 09 Dec 2022 10:06:22 GMT
Age: 696903
login.uoh.edu.sa/_layouts/images/pg/js/pg_custom.en-US.js?r=202114234
200 OK 142 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/js/pg_custom.en-US.js?r=202114234
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with very long lines (414), with CRLF line terminators
Size 142 kB (141678 bytes)
Hash d607e0abae193c12f7fb4f02dc3cfb58
8459bacf93906601a1f6b8dc8189c7e186c19d67
aeafb9697a9c7b773927246d238fd52e75d73c7ee58751411d4f4bbb66487dfd
GET /_layouts/images/pg/js/pg_custom.en-US.js?r=202114234 HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 24 Feb 2022 10:45:20 GMT
Accept-Ranges: bytes
ETag: "a223879e6b29d81:0"
Date: Fri, 09 Dec 2022 10:06:22 GMT
Content-Length: 141678
X-Frame-Options: DENY, SAMEORIGIN
login.uoh.edu.sa/_layouts/images/pg/css/bootstrap.min.css
200 OK 121 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/css/bootstrap.min.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65371)
Size 121 kB (121200 bytes)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /_layouts/images/pg/css/bootstrap.min.css HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Mon, 25 Jul 2016 13:53:28 GMT
Accept-Ranges: bytes
ETag: "0fcafeb7be6d11:0"
Content-Length: 121200
X-Frame-Options: DENY, SAMEORIGIN
Date: Fri, 09 Dec 2022 10:06:22 GMT
Age: 696902
login.uoh.edu.sa/_layouts/images/pg/js/bootstrap.min.js
200 OK 37 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/js/bootstrap.min.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /_layouts/images/pg/js/bootstrap.min.js HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 25 Jul 2016 13:53:30 GMT
Accept-Ranges: bytes
ETag: "029e1ec7be6d11:0"
Content-Length: 37045
X-Frame-Options: DENY, SAMEORIGIN
Date: Fri, 09 Dec 2022 10:06:23 GMT
Age: 696911
login.uoh.edu.sa/_layouts/images/pg/css/style_custom.css?r=202114234
200 OK 9.6 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/css/style_custom.css?r=202114234
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash cb99ec60e12b195664622a69b3f94228
41e51f0275f3fe212e66bfdd0fe1ea51eb480b19
fdaec415eb1b675b7bc150cf9f47d49f0a53b415f816cca982c47b292135b58a
GET /_layouts/images/pg/css/style_custom.css?r=202114234 HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Sun, 07 Nov 2021 08:34:06 GMT
Accept-Ranges: bytes
ETag: "d9cc73ab2d3d71:0"
Date: Fri, 09 Dec 2022 10:06:22 GMT
Content-Length: 9574
X-Frame-Options: DENY, SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
login.uoh.edu.sa/exts/announcements/pub/announcements.css?r=202114234
200 OK 3.3 kB URL HTTP/1.1 login.uoh.edu.sa/exts/announcements/pub/announcements.css?r=202114234
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash c2685a410de90ac0576c8067a759524d
fc68ddb289de783b57a796facc8137336971f796
c7cde03e661e844e0ef203ef15a64d459b62c07779a6797451152ae9a8b17dc5
GET /exts/announcements/pub/announcements.css?r=202114234 HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 24 Jun 2021 23:06:38 GMT
Accept-Ranges: bytes
ETag: "176b4e964d69d71:0"
Date: Fri, 09 Dec 2022 10:06:22 GMT
Content-Length: 3283
X-Frame-Options: DENY, SAMEORIGIN
fonts.googleapis.com/css2?family=Tajawal:wght@200;300;400;500;700;800;900&display=swap
200 OK 930 B URL HTTP/2 fonts.googleapis.com/css2?family=Tajawal:wght@200;300;400;500;700;800;900&display=swap
IP
Hash 32e25b6327de355b24f8ce07f949eb0c
fb62cfdca312d3cbfa487b42a62afc8e6b6fc7b1
96c0f116557b84c248e9e87be687596d701d61c81122982279b9e648c53e4992
GET /css2?family=Tajawal:wght@200;300;400;500;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 10:06:23 GMT
date: Fri, 09 Dec 2022 10:06:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
login.uoh.edu.sa/_layouts/images/pg/css/style.css?r=202114234
200 OK 23 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/css/style.css?r=202114234
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 588dac93d11bdfab6a70b1994d917b67
3c41ee0345fb49a8b8a0eb065802fbcdb2e1ee1e
ac06ef6dd50696925d24456c1573ca115f33736d23be25052eddf6e26cbed57a
GET /_layouts/images/pg/css/style.css?r=202114234 HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Mon, 22 Feb 2021 12:16:06 GMT
Accept-Ranges: bytes
ETag: "047ad7e149d71:0"
Date: Fri, 09 Dec 2022 10:06:22 GMT
Content-Length: 23096
X-Frame-Options: DENY, SAMEORIGIN
login.uoh.edu.sa/exts/announcements/pub/announcements.js?r=202114234
200 OK 27 kB URL HTTP/1.1 login.uoh.edu.sa/exts/announcements/pub/announcements.js?r=202114234
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 3fd8163b977cffb72e18719b7584d363
2accdd525ca3154069792f33cf673fcd5f364ebd
cea4d43986b631dbdb097564cfc24283a37cdd12ba7ce2a38424f47c082e0571
GET /exts/announcements/pub/announcements.js?r=202114234 HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 24 Jun 2021 21:51:13 GMT
Accept-Ranges: bytes
ETag: "b3dcffc4369d71:0"
Date: Fri, 09 Dec 2022 10:06:23 GMT
Content-Length: 27078
X-Frame-Options: DENY, SAMEORIGIN
login.uoh.edu.sa/_layouts/images/pg/js/pg.js?r=202114234
200 OK 289 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/pg/js/pg.js?r=202114234
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Size 289 kB (288594 bytes)
Hash deb1aa1a61f4675d4a97e2c179ce2fbf
689a027855bfbb614328271bf72d0f5f0360cc32
86ff581dc612cf7c5bc6cbf5191baa4c6f971b798b7c7af550c73691f9af6de5
GET /_layouts/images/pg/js/pg.js?r=202114234 HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 04 Feb 2021 05:51:10 GMT
Accept-Ranges: bytes
ETag: "0dbf3bcb9fad61:0"
Date: Fri, 09 Dec 2022 10:06:22 GMT
Content-Length: 288594
X-Frame-Options: DENY, SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unpkg.com/tippy.js@6.3.7
302 Found 9.8 kB IP
Hash 4d4e94dc307af7454a60de2cc6a23b1f
72d2ba117e6d9a0826bb9a218faf18d4370201a7
71a2276407ed16a0eece04cce9cf45894b97e74b74f0b39a7ff85387eb70def6
GET /tippy.js@6.3.7 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.uoh.edu.sa/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 09 Dec 2022 10:06:22 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
location: /tippy.js@6.3.7/dist/tippy-bundle.umd.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GHG5FH2BF1317CEZQP5SZQAM-ams
cf-cache-status: HIT
age: 2516707
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 776ced7ecb2fb505-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/tajawal/v9/Iura6YBj_oCad4k1nzGBCw.woff2
200 OK 10 kB URL HTTP/2 fonts.gstatic.com/s/tajawal/v9/Iura6YBj_oCad4k1nzGBCw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10256, version 1.0\012- data
Hash f18eb7346bae415c6367ed0907125227
a9e8e937c5afc2f9feb46bfcb8fa854728a494a8
b081f7bf790678b56a2c0502651d6873cbabc09e78fe40655df15f918b1e369b
GET /s/tajawal/v9/Iura6YBj_oCad4k1nzGBCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10256
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 00:21:26 GMT
expires: Fri, 08 Dec 2023 00:21:26 GMT
cache-control: public, max-age=31536000
age: 121498
last-modified: Wed, 27 Apr 2022 16:06:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/tajawal/v9/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2
200 OK 9.9 kB URL HTTP/2 fonts.gstatic.com/s/tajawal/v9/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9900, version 1.0\012- data
Hash 7256be46335261573e1ab1dc7f6539f0
abeac1b7890a903ac951c522bc9b3039ec6fa1f8
9986de5db80ec050300f1cea25d651a5779ae62b91a39b5667ac23d0c7668cbb
GET /s/tajawal/v9/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 16:05:23 GMT
expires: Wed, 06 Dec 2023 16:05:23 GMT
cache-control: public, max-age=31536000
age: 237661
last-modified: Wed, 27 Apr 2022 16:01:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/tippy.js@6
302 Found 10 kB IP
Hash d0e53f64bc484c550ae16ef5737b5fe9
2758ed1c08fa2a2036bb71b456f332052c6f007a
8e7dbc3bf8e712422b863ae65f40126a6010d7c74a00886348fe2648c57241f6
GET /tippy.js@6 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 10:06:22 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /tippy.js@6.3.7
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GKV5E5DQ92W31G1AQX5GPM76-fra
cf-cache-status: HIT
age: 169
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 776ced7eab12b505-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:06:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
login.uoh.edu.sa/_layouts/images/PG/images/gradient.svg
200 OK 826 B URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/PG/images/gradient.svg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (672)
Hash 90d20bb17943db0c4bab97b55d32800c
dc4fb1b10f61739a6e78993203c9df49787d05e9
b8eaec929cedc692cb1f0c001cc3d9ec0528acff95418e2c721f27175c8805e9
GET /_layouts/images/PG/images/gradient.svg HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/images/pg/css/style_custom.css?r=202114234
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 25 Nov 2020 10:55:10 GMT
Accept-Ranges: bytes
ETag: "0bb827119c3d61:0"
Date: Fri, 09 Dec 2022 10:06:23 GMT
Content-Length: 826
X-Frame-Options: DENY, SAMEORIGIN
fonts.gstatic.com/s/tajawal/v9/Iura6YBj_oCad4k1nzSBC45I.woff2
200 OK 8.7 kB URL HTTP/2 fonts.gstatic.com/s/tajawal/v9/Iura6YBj_oCad4k1nzSBC45I.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8724, version 1.0\012- data
Hash 20217aa9d3eaac472e24b02bcdcd6c9b
ee278f79d297f09fd3bf15fe453332649b1aa69e
1f56c2984babee36c5008ae3290384e27a63931814265ffe8ddda6a2fc38b41e
GET /s/tajawal/v9/Iura6YBj_oCad4k1nzSBC45I.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8724
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 08:19:18 GMT
expires: Fri, 08 Dec 2023 08:19:18 GMT
cache-control: public, max-age=31536000
age: 92826
last-modified: Wed, 27 Apr 2022 16:06:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
login.uoh.edu.sa/favicon.ico
200 OK 1.6 kB URL HTTP/1.1 login.uoh.edu.sa/favicon.ico
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash d08e2ee6c322b5cf1c381674b8ed79c4
fe218ba62a69cca877efc38d53ade46f756d9b1a
71433658b443a5a4b24c41c0305a7736d406de112a0e2e1c9e3258c19e5e0357
GET /favicon.ico HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Length: 1606
X-Frame-Options: DENY, SAMEORIGIN
Date: Fri, 09 Dec 2022 10:06:24 GMT
Age: 696879
login.uoh.edu.sa/_layouts/images/PG/images/SVG-Logo-ET.svg
200 OK 35 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/PG/images/SVG-Logo-ET.svg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (35069), with no line terminators
Hash 4ee95e7a114a675841e7e0950ebc71c8
7f97ed0839492a99d19924411d2c6431d76ed12f
6114f7a661a76fe948bfa10aa245a27341b082a15d6d9c57415ec6e864342742
GET /_layouts/images/PG/images/SVG-Logo-ET.svg HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Thu, 24 Feb 2022 10:44:23 GMT
Accept-Ranges: bytes
ETag: "31623d7c6b29d81:0"
Date: Fri, 09 Dec 2022 10:06:24 GMT
Content-Length: 35069
X-Frame-Options: DENY, SAMEORIGIN
login.uoh.edu.sa/_layouts/images/PG/images/ITC-Logo.svg
200 OK 30 kB URL HTTP/1.1 login.uoh.edu.sa/_layouts/images/PG/images/ITC-Logo.svg
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (29662), with no line terminators
Hash 388f0df1e420f27c4113da5a65531955
10e4633b6067c32df9914d0eaff001d6c2750091
55275a4437b2d42fc7f7e5e43fedaa09d25f0cf602feb8aa4571cabae7c263cf
GET /_layouts/images/PG/images/ITC-Logo.svg HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 23 Jun 2021 14:24:24 GMT
Accept-Ranges: bytes
ETag: "341512773b68d71:0"
Date: Fri, 09 Dec 2022 10:06:24 GMT
Content-Length: 29662
X-Frame-Options: DENY, SAMEORIGIN
login.uoh.edu.sa/exts/announcements/pub/viewAnon.ashx
200 OK 31 B URL HTTP/1.1 login.uoh.edu.sa/exts/announcements/pub/viewAnon.ashx
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with no line terminators
Hash 981d9348b4e4cacaefdf68ed86d54f07
6728ecc5dbbb07c8a7e135fd8a57e282dffef381
55f08cd24ff733eb7474de5358046cfcacb31d562bafda100cde9e5c6d34b975
GET /exts/announcements/pub/viewAnon.ashx HTTP/1.1
Host: login.uoh.edu.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/_layouts/PG/login.aspx?ReturnUrl=%2Fsso%2Fgo.ashx%3FSAMLRequest%3DjZJRa9swFIXfB%252FsPQu%252ByZSexMxGnZA1lgW4LjbuHvQzFlh2BfOXpSm337%252BfYC7TQlulNV%252BfqfudwV1dPnSEPyqG2UNAk4pQoqGytoS3ofXnDlvRqvULZmV5sgj%252FBnfodFHoy9AGK8aGgwYGwEjUKkJ1C4Stx2Hy9FWnERe%252Bst5U1dGp5XywRlfMDCyW7bUF%252FHXnTzLPFIs%252FqNJnniazzvFny5WKWLNSx4lk2y6t5ns3mlPy4uEjPLnaIQe0AvQQ%252FlHiasiRl%252FFOZcMEzkfKflOz%252FoX3WMBl%252BD%252B04iVB8Kcs9238%252FlJRsLrjXFjB0yh2Ue9CVur%252B7LejJ%252Bx5FHDfWdRgFe4pQxpRsh%252FQ0SD%252BiXjTGthpGjarDWYdo49ZGEk9PdMpfjI7cs%252BD%252FN8r1qySPPasseAU%252B7k0YxmPcadDWSWgVO%252F%252FPUs5wsGyGq26BWYhX8TOUy158G2bvtntrdPWHbIyxj9dOSa8K6l1QlNwMY6V%252FmzaJkrGia9aMUhEAe1XpRquafvxA3jjxesJ5uZnrvw%253D%253D%26RelayState%3D9KjLdVSQVeLn4M0HsKAilIslttE5YkOgU2ccACl0avY%253D%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2001%252F04%252Fxmldsig-more%2523rsa-sha256%26Signature%3DG3VYtQh5M5qj5%252FEULbT%252BwKVmRu%252B8x%252Blv%252BI%252FW3YS664yAToyxfflGNggzZWTR6XJD%252BhViWctJ2S7Qb0%252B7RwJ1FjKcDlsZZoXPOODcTobL%252BCffYrMMnifKMeeJywz%252FQwTOc9zfsJ8xqE1h5b8xIwohtD2pC3lOFjuyRjLhYmM6j9bCfMShmHlyD1l%252FH7xtXdp%252FzFrAumK96WQYjxYvzhvZ5iQZWlGVum85ofsUqgBJd%252BZ9YNGtR1URjYKSM64d3BPA5pjTPprxyDl1S9%252BgIcXIGAyMyaxwyovqWUqJYgoPV7hAj7qJEkYcjUyTEDqHdQTjHN7k3omT6ai0sMCY90D75A%253D%253D
Cookie: PGToken=OO8mbnJHIiXEMwGTTZIl55hvMgPxTSt88MFw1BH2sGOin8qzSMg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Date: Fri, 09 Dec 2022 10:06:24 GMT
Content-Length: 31
X-Frame-Options: DENY, SAMEORIGIN
kit.fontawesome.com/f4170ccb82.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/f4170ccb82.js
IP
GET /f4170ccb82.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Referer: https://login.uoh.edu.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:06:22 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyxLHJWmz40iDvx-AyAi
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 776ced7eaab4b527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/@popperjs/core@2.11.6
302 Found 0 B URL HTTP/2 unpkg.com/@popperjs/core@2.11.6
IP
GET /@popperjs/core@2.11.6 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.uoh.edu.sa/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Fri, 09 Dec 2022 10:06:22 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
location: /@popperjs/core@2.11.6/dist/umd/popper.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GA5YGHBZSVAZ09XW463WWTCG-ams
cf-cache-status: HIT
age: 10375751
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 776ced7ebb25b505-OSL
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=f4170ccb82
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=f4170ccb82
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=f4170ccb82 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.uoh.edu.sa/
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:06:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b6216e4c56dadde1800bac82ec5ee908.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C3
x-amz-cf-id: vzaAu39NvAbHBqwxwESO5TAxL4Syxq8QmUDFak9TjZsSiIz4kMKEOQ==
age: 31131819
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UD%2FBdc4lFro%2BieqKA50j2sbmujaztCaJUXMQhd5jEfw3Hfjp0kwtKyqb8xnu94ybrKZVaqh3OjYji%2B3G%2FZtS441pq4p9Ge6WF%2Bc2izYHmNF9bc1uia77iCtnEK%2BoqdSYq8TA63%2BMBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776ced8bfbd3773e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
forms.uoh.sa/
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: forms.uoh.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Fri, 09 Dec 2022 10:06:18 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Language
x-redirect-by: Polylang Pro
set-cookie: PHPSESSID=4i8mobnem3887b0fj0j3cbu47a; path=/
pll_language=en; expires=Sat, 09-Dec-2023 10:06:18 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
location: https://forms.uoh.sa/en/
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
unpkg.com/@popperjs/core@2
302 Found 0 B URL HTTP/2 unpkg.com/@popperjs/core@2
IP
GET /@popperjs/core@2 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://login.uoh.edu.sa/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Dec 2022 10:06:22 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@popperjs/core@2.11.6
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GKV55DNJACC38F8HVEFGP7C8-fra
cf-cache-status: HIT
age: 456
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 776ced7e9b0fb505-OSL
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=f4170ccb82
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=f4170ccb82
IP
GET /releases/v5.15.4/css/free.min.css?token=f4170ccb82 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.uoh.edu.sa/
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:06:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 728b6476f3e2317ec8044d22806d4f94.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: TvcPuElmOIKdU06sLZdxauBr00Y5vqDAo0GORvo8DEK_xB0-DKpKqw==
age: 13095268
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nMU1QXgbyApPyeDYQMFzvWVjkarZAiFHQyjnwbHKEzMXKnVkvxqJzK%2FH36%2FTGbh7RYmCS4FqkmukcpBc7s%2FzM98t15Vx4csNuiqyRi838qdzDkiyDdl7ML40gZMr9yrfYDCVn6stLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776ced8c0c0c773e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=f4170ccb82
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=f4170ccb82
IP
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=f4170ccb82 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.uoh.edu.sa/
Origin: https://login.uoh.edu.sa
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:06:24 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bbd81ac50c4c19202fae4e2a92912971.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR52-C1
x-amz-cf-id: b37UqZGSFH6X2FyKED7I9IUp5DuS7AklgMPjqdW9WUeUFlj6NdFB7Q==
age: 3761592
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vq%2FH9ByQh8%2FSF1J0yjuZFVw%2BO8zLFRJC6ZKrGM1uziMW55dJIyC2FL5Wc2yhzJN0TeYQHWBWmY1dqdiyeJcrEzxc5OfO%2ByT6wfioGfMuXi7JN8ECuwBwlp%2BtO62p6VXoFPl1i6A%2BXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 776ced8bfbcc773e-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
40.114.227.126
172.64.168.22
104.18.23.52
23.36.77.32
93.184.220.29
40.126.208.155