citytala.ahlamontada.com/t216-topic
301 Moved Permanently 0 B URL HTTP/1.1 citytala.ahlamontada.com/t216-topic
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t216-topic HTTP/1.1
Host: citytala.ahlamontada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 16 Nov 2022 13:03:07 GMT
Content-Length: 0
Location: https://citytala.ahlamontada.com/t216-topic
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5679
Expires: Wed, 16 Nov 2022 14:37:46 GMT
Date: Wed, 16 Nov 2022 13:03:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9b4e6c72233070ef185ff980135e9555
2f14523a3f6f9532df3b872984fd23e156d2c465
5040e340e60b331b1569d52d66afcd5649a4121e2841d38cca0974e2a4c0af75
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4241
Cache-Control: max-age=167930
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "6374bbf5-1d7"
Expires: Fri, 18 Nov 2022 11:41:58 GMT
Last-Modified: Wed, 16 Nov 2022 10:31:17 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4178
Expires: Wed, 16 Nov 2022 14:12:46 GMT
Date: Wed, 16 Nov 2022 13:03:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 16 Nov 2022 12:44:33 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1115
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: L4qspY4jKmGJ+WExhHTgfhwiO+e9N9XH7JXUgm5o6zZrdK6OPjal3roTUcdnvjcUCUcuywvPVXY=
x-amz-request-id: 9JXCFVM0YFHF2HDS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 16 Nov 2022 12:52:02 GMT
age: 666
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d1e4b4a3fe74a44c78ecf8b84d945bf
462f5a1146f9659eb82917c0bcbdce9d9cb9c427
bd0829d9ef31e5bf48b489ceb4b4aab3806bb80112fb1c5faa198c4681ebd755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD0829D9EF31E5BF48B489CEB4B4AAB3806BB80112FB1C5FAA198C4681EBD755"
Last-Modified: Tue, 15 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2853
Expires: Wed, 16 Nov 2022 13:50:41 GMT
Date: Wed, 16 Nov 2022 13:03:08 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash dcc00bba57387997a5fcab4a6863d1c7
9582c226b0c740dae8ff5b60bdb29d221b510e6a
46d2691133695e87d41331384ab964c0b13e24948d6d2f24235acf7e1366c246
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6188
Cache-Control: max-age=152221
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637476fe-116"
Expires: Fri, 18 Nov 2022 07:20:09 GMT
Last-Modified: Wed, 16 Nov 2022 05:37:02 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash dcc00bba57387997a5fcab4a6863d1c7
9582c226b0c740dae8ff5b60bdb29d221b510e6a
46d2691133695e87d41331384ab964c0b13e24948d6d2f24235acf7e1366c246
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6188
Cache-Control: max-age=152221
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637476fe-116"
Expires: Fri, 18 Nov 2022 07:20:09 GMT
Last-Modified: Wed, 16 Nov 2022 05:37:02 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash dcc00bba57387997a5fcab4a6863d1c7
9582c226b0c740dae8ff5b60bdb29d221b510e6a
46d2691133695e87d41331384ab964c0b13e24948d6d2f24235acf7e1366c246
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6188
Cache-Control: max-age=152221
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637476fe-116"
Expires: Fri, 18 Nov 2022 07:20:09 GMT
Last-Modified: Wed, 16 Nov 2022 05:37:02 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f69270501ab9db87293d702ce920198
56fff336cbae9601613470a96b470f677ca63fdb
00159fa0d3a7a8d9bd203a80c02dcd295e04ad152f4f05230222a9d71c1773b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 1fa19aff1e1cd1bcb23807998ef85c43
a4c43d274ab7c17894153b771d5fe096e2142e96
e254f31055336f837930d3dbe663ff8b96129f069d67d4d8511f13f5620b5641
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4544
Cache-Control: max-age=89366
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637387e2-1d7"
Expires: Thu, 17 Nov 2022 13:52:34 GMT
Last-Modified: Tue, 15 Nov 2022 12:36:50 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 727 B IP
Hash b277595b04bb6e957e56d437951ca91f
59734b49f1cf706898e34a0a218567ecf3b9ba84
a540aa1c10a344dc77014aeddc23522c26ea52a9a64cec915767462d7cd2b070
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2676
Cache-Control: max-age=104432
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "6373ca08-2d7"
Expires: Thu, 17 Nov 2022 18:03:40 GMT
Last-Modified: Tue, 15 Nov 2022 17:19:04 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Nov 2022 21:15:13 GMT
expires: Sat, 11 Nov 2023 21:15:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 402475
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/ar_AR/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/ar_AR/all.js
IP
File type ASCII text, with very long lines (1957)
Hash 4a2f20e38a0f99b1f0e8f3979019e78b
3526ca6895a4757664649708a65db2f29685d453
342bcbbb87f332a190c8047baecbd80ec380904b42c8e86a4f35d98d8bc1985c
GET /ar_AR/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 7e1f7917c1ddf0a7a9238c1a4c286bba
etag: "01d287c831a57cb060ce30d61dcb5ed6"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 16 Nov 2022 13:19:25 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Si8g44oPmbHw6POXkBnniw==
x-fb-debug: L2puWL0jRAaiD6vs7uP6Kk0GpX2x+HAqgJmo4RSS1UKOacq6ptDH6Y0l2DAtEdSZzl5uDpOn5huwWk89qspIVA==
content-length: 1685
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 13:03:08 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash dcc00bba57387997a5fcab4a6863d1c7
9582c226b0c740dae8ff5b60bdb29d221b510e6a
46d2691133695e87d41331384ab964c0b13e24948d6d2f24235acf7e1366c246
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3947
Cache-Control: max-age=149981
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637476fe-116"
Expires: Fri, 18 Nov 2022 06:42:49 GMT
Last-Modified: Wed, 16 Nov 2022 05:37:02 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 312 B IP
Hash f86cf0bde12ef9b07967fa7bfdcd2db3
e2d2b277538fe878767964d21105c5e81283369f
9b9a5e9ce9933adc810851f84e2f083eb5d101f800ba5fe98ea1bcf0e4e934b3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2414
Cache-Control: max-age=119998
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637407dc-138"
Expires: Thu, 17 Nov 2022 22:23:06 GMT
Last-Modified: Tue, 15 Nov 2022 21:42:52 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 312
www.googletagmanager.com/gtag/js?id=
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP
File type ASCII text, with very long lines (1921)
Hash b2278f02b6ff126f6259a329ee0e2624
939091d135173939371354be0a5106621a9109d6
0b9022dcb0bd014c6e49eca6d3853cf471e0570d047802a1b363f5a186eb9de7
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 16 Nov 2022 13:03:08 GMT
expires: Wed, 16 Nov 2022 13:03:08 GMT
cache-control: private, max-age=900
last-modified: Wed, 16 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37458
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1921)
Hash 198264b4271ba569cd07136fa4124143
5996d6a89fcc6a5f3f9788d8bca0e944f9c920c0
22cceae71f33d76a5fb250c1988b4721843c6c2345574ff39e3ba4267416459e
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 16 Nov 2022 13:03:08 GMT
expires: Wed, 16 Nov 2022 13:03:08 GMT
cache-control: private, max-age=900
last-modified: Wed, 16 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 16 Nov 2022 12:25:01 GMT
cache-control: public,max-age=3600
age: 2287
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1fa19aff1e1cd1bcb23807998ef85c43
a4c43d274ab7c17894153b771d5fe096e2142e96
e254f31055336f837930d3dbe663ff8b96129f069d67d4d8511f13f5620b5641
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4544
Cache-Control: max-age=89366
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "637387e2-1d7"
Expires: Thu, 17 Nov 2022 13:52:34 GMT
Last-Modified: Tue, 15 Nov 2022 12:36:50 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 8345d8a2ca46c3b181a81d8626d0425f
5d9d088c5dca072bbc9ad23a15450e7af7829400
663b0e6c239177f35b5b48d4203ce95aabc0e5bab7911f5b1d9fb7624cac2e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5950
Cache-Control: max-age=164589
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Etag: "6374a83b-1d7"
Expires: Fri, 18 Nov 2022 10:46:17 GMT
Last-Modified: Wed, 16 Nov 2022 09:07:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f69270501ab9db87293d702ce920198
56fff336cbae9601613470a96b470f677ca63fdb
00159fa0d3a7a8d9bd203a80c02dcd295e04ad152f4f05230222a9d71c1773b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash abdbaa56ac358c53c5dc3723c7671381
48c0e50792e786d83b35f0a36efb55f4c94c694d
6e9cb55f14b8219b7495ed4cd17bae3f0ca6127735ed01d3c1979601ffeb7b1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
citytala.ahlamontada.com/0-rtl.css
200 OK 60 kB URL HTTP/2 citytala.ahlamontada.com/0-rtl.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 38d1882ec37ecdbb679d73b593e81732
949f1c3dbc0898992b52ae069fd5b2e7a1e1e839
78f5ec1597826ef8f3d125a9ff6c6bd7bc92148956df330d5d6b01b60fce3d91
GET /0-rtl.css HTTP/1.1
Host: citytala.ahlamontada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/t216-topic
Cookie: exadd=166861
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: text/css
content-length: 60183
last-modified: Wed, 16 Nov 2022 00:00:00 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: MISS
X-Firefox-Spdy: h2
2img.net/i/fa/banner/ar/banner5.png
200 OK 2.7 kB URL HTTP/2 2img.net/i/fa/banner/ar/banner5.png
IP
File type PNG image data, 113 x 50, 8-bit colormap, non-interlaced\012- data
Hash 86c5406474dd4c9056f73e0dd59fc44c
96ee0ab7d092ae5d7be8839e922157040e31f362
357295512f14a68f281d478951eddc401bb6fe6249a88e4a0a637027caea1da6
GET /i/fa/banner/ar/banner5.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/png
content-length: 2705
last-modified: Mon, 16 May 2016 10:55:01 GMT
etag: "5739a705-a91"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3474622
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b5xHAl9mFmlPdCnVWvXqNdZklOy1QMdEofhzSCRY75vNi03rWPflO%2FpdMITw86slln%2BZdXRqG53TznR0XSDI1DVZOAjgvglzP6K96hdyaouy4y9aZhBxKR7bDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f5f7423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/icon_mini_search.gif
200 OK 238 B URL HTTP/2 2img.net/i/fa/icon_mini_search.gif
IP
File type GIF image data, version 89a, 12 x 13\012- data
Hash 69ac99a266d5032986805506ed750bdd
a800b0f6f44e80d71f75808bd4324f866e6c54b1
605183a8594eb65a3db95a7735ad7adac28b7b9814a70334837fe630bdd8d5f4
GET /i/fa/icon_mini_search.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/gif
content-length: 238
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-ee"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3476528
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J50d%2FfIPNv143XkprT945%2BfogtekHilz1iEyqLh9ktRijZeCFd6TT0SL4MRD8Y%2BnEHuQgGV1qUJvv4Jvihnzbe%2FXG163bOvl7OM8SyGYVm1n0W8Qb22T9STfUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f617423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver_pink/vote_lcap.png
200 OK 87 B URL HTTP/2 2img.net/i/fa/prosilver_pink/vote_lcap.png
IP
File type PNG image data, 4 x 12, 1-bit colormap, non-interlaced\012- data
Hash 4ba0f174e9a60792c5b9b96ee6d761c5
5fe2fa4ebdd372d40f73cbf495aa1ee8ae3179c7
6cc0f23c9c4d5db529fe4aa40ea04636d4b59233aa4618280238dd859059fe46
GET /i/fa/prosilver_pink/vote_lcap.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/png
content-length: 87
last-modified: Mon, 16 May 2016 11:00:44 GMT
etag: "5739a85c-57"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 9984
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uo96NwTjj48GqVeO3cHPHYY2i4rRGf%2BdF%2BilZ9DhqPkQAg3oo4qgirb7gGlvFUXdyRXm9DGLbd7lb94axr%2Fb0%2F%2BefHrJrDSrMsF7T8RbnbxaQ3%2Bms7tpg4yw2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f6a7423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver_pink/vote_rcap.png
200 OK 89 B URL HTTP/2 2img.net/i/fa/prosilver_pink/vote_rcap.png
IP
File type PNG image data, 4 x 12, 1-bit colormap, non-interlaced\012- data
Hash bce52aed0df78a341cd2be23aa08e8b1
ca6e6253c2e672cad88e38a2e3f61428c8ba903e
266341ea4b094a5dfcb9e4dfc17505e83694fd6ae5a24a78b4aaa3a5a0d40c7c
GET /i/fa/prosilver_pink/vote_rcap.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/png
content-length: 89
last-modified: Mon, 16 May 2016 11:00:44 GMT
etag: "5739a85c-59"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 9984
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fk%2FBtCgs2GnR3A1aLMrgY7rWdw7370ZcjFsenWh3dlj2PWxBOW%2B59osemCm%2FUUCxdhGbXzRvpazyNghl1WyOZPmlrjSS%2FkyJMtbWpjewY6ikcL%2FCjRcuNJ%2Fh6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd03f797423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/rss_mod/rss_br10.png
200 OK 447 B URL HTTP/2 2img.net/i/fa/rss_mod/rss_br10.png
IP
File type PNG image data, 15 x 15, 8-bit colormap, non-interlaced\012- data
Hash 219cd5ce2e3e08e14d2c7a26147143bc
120e1594382e5dfd0f0fcd7703c324f4322b831f
6afb26a22a3683d4587e4c96ab286eb61fe401dbe07cc1b38748d1671dcd1f0c
GET /i/fa/rss_mod/rss_br10.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/png
content-length: 447
last-modified: Mon, 16 May 2016 11:01:05 GMT
etag: "5739a871-1bf"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3476575
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2B6WV7kdjJAuJWwuFijbbun%2F9iV%2B1kp16W%2Fz7AKZDiaI5l0Qsa%2FS22DADLX5xV2gT74Zt3rKA0AsPS0ZfMCBfYx3d%2BCGa9nifERFfSkFkvzeV9pEfj50iz2SyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd04f907423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/35/63/i_icon_mini_index.jpg
200 OK 7.4 kB URL HTTP/2 2img.net/s/t/15/35/63/i_icon_mini_index.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 99x60, components 3\012- data
Hash 463b110c0c97646d56b45537bdf28ba7
fafd9d623aeb97e3205a5c171f1604141b205804
f1e22cf3daca7f2284bbb0b1e6fe89011c595e8d8b0b41199a2821548bb5b91a
GET /s/t/15/35/63/i_icon_mini_index.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/jpeg
content-length: 7414
last-modified: Fri, 12 May 2017 13:41:04 GMT
etag: "5915bb70-1cf6"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i4I2NVLhgX9wi6mAxMrhte1xkoTyBXXuYT%2B9bptUj4SjEECYBAdGT8%2B6wCba699cFBHqTl1t9X6grFTeg%2BRI6abwON9CMPERk6alNBU4cPCv%2BwPI5CwRjjuZHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f657423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver_pink/voting_bar.png
200 OK 86 B URL HTTP/2 2img.net/i/fa/prosilver_pink/voting_bar.png
IP
File type PNG image data, 1 x 12, 8-bit colormap, non-interlaced\012- data
Hash 05be3bb89d49c9575ea805ef1e31b533
4ed701f46c37cce33a47d775f4132e822a0020e0
75bf4ea0c970f9dfb8ac9a4c90849d71d033828a42ac2bee533ddbd5a62d1253
GET /i/fa/prosilver_pink/voting_bar.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/png
content-length: 86
last-modified: Mon, 16 May 2016 08:27:15 GMT
etag: "57398463-56"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 9984
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ir%2FGxU0hmKusc6ZG6lFQ1NjDVd0az6yCpikPsxMP4c66HmfgVYxxXejsW83ID%2FVA2816LgaTAIWUjL64Zr%2FCxJEoCBpafEwcmVA0IXIA%2BPIKLQ4qnyuDSOSvrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd05fa77423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/35/63/i_icon_mini_register.gif
200 OK 5.1 kB URL HTTP/2 2img.net/s/t/15/35/63/i_icon_mini_register.gif
IP
File type GIF image data, version 89a, 99 x 60\012- data
Hash 6231d481d4a17a2cd58a19099f45bdf4
c2b06ba625df77e6ac895deb5bf69e2926d8755b
a2e13f01101807f3a21612c8afd0f6d6cd7841cfcf781870eab7a2e9d461ad41
GET /s/t/15/35/63/i_icon_mini_register.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/gif
content-length: 5068
last-modified: Fri, 16 Apr 2010 14:58:09 GMT
etag: "4bc87b01-13cc"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JCHmFf69ZaMD%2BlMRpSo%2FP%2F%2F2XitOxpiRBz84unfRfq3XGW5RHd5j5yyHQEWkxEcWGfIVMlAF2Ovyof2wZuAILHQfpWSS153hBhKSGpun8x3X%2Bwcy4vFwMI8yQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f637423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/35/63/i_icon_mini_login.jpg
200 OK 7.0 kB URL HTTP/2 2img.net/s/t/15/35/63/i_icon_mini_login.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 99x60, components 3\012- data
Hash 94005ddf22bde21f9551cd7cdc12403e
df8bb39c00ac0aff9420a905cc78ebf94c86a670
9153fa0b87cc94954733d895903ebe636fadfbb85e365750a7459d64de44e9ff
GET /s/t/15/35/63/i_icon_mini_login.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/jpeg
content-length: 6956
last-modified: Fri, 12 May 2017 13:41:04 GMT
etag: "5915bb70-1b2c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FWh7ZhE5p3FPZXs%2BthlliOvqK6uhbR6OH5xqciw7xR8oQiiuTJ7qZz9tPp7NunFWAEPgCTbjwf4dUXM7El2M9D65q5AeJ76hyf6tHy7EWAMyKG8P3RN8Q9Cm0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f627423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/35/63/i_icon_mini_portal.jpg
200 OK 7.1 kB URL HTTP/2 2img.net/s/t/15/35/63/i_icon_mini_portal.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 99x60, components 3\012- data
Hash 77a01333bece29194caed79886e3cf40
71571540ccccb6d615e16ccc45438b9bfa1c1a20
08cacc00743a4e7726b9e427495a471635e5434ec27c43ee12498dc066f394ee
GET /s/t/15/35/63/i_icon_mini_portal.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/jpeg
content-length: 7149
last-modified: Fri, 12 May 2017 13:41:04 GMT
etag: "5915bb70-1bed"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WHkeGAiSHfamc7uhrttCSqnaA2bo2hCXS6QcwVZk8DS9%2FASQedggkCbcKAHDpzunbz%2FZyEAR0JM%2FmVqsVpqccqyfer5de4M0tL1zrA68Ksa9Bka6n4%2Fln0bVIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd02f667423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/15/35/63/i_icon_minipost.gif
200 OK 229 B URL HTTP/2 2img.net/s/t/15/35/63/i_icon_minipost.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash bed0d0552b218918b29561c5f2bafaa0
726ad8c4427ddba5aadaeb6f1653b1ab8fd2a2a0
540348fe4378cbeaa5e9e53739b8c544e6ab4ca4899736b0716f8f312a8a3d23
GET /s/t/15/35/63/i_icon_minipost.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: image/gif
content-length: 229
last-modified: Fri, 16 Apr 2010 14:57:48 GMT
etag: "4bc87aec-e5"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R4FsrLSi1TjqCkRasvtRMmkClt1IlXbGUsp%2Br1x101SQ5uqQC9H8F5o4hQ%2F58CQ%2FU7Wu0gVpJKfASDwr46E7tIQbkOWxxxkYRMsDWzwzWYbBj5SVba7dPEuZEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd04f847423-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/ograph/fb_login.js
200 OK 10 kB URL HTTP/2 illiweb.com/rs3/64/frm/ograph/fb_login.js
IP
File type ASCII text, with very long lines (2211), with no line terminators
Hash ee124b5bf79c71867685772810dab7ba
cc192a42e723c1d0202809b6d5e0dfbad9229c89
d1d27eea89b6cd7d5b4797ce8442b9349e2282aa44cc1a6fd93e96dd01ca4ac6
GET /rs3/64/frm/ograph/fb_login.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:33:34 GMT
last-modified: Tue, 27 Aug 2019 14:00:11 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 793774
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cx83ejnH%2FXSqBx7CvMCjWzGiFF8hbwKKwfvyTj4jIUYSvLOzFSdTRdjB5fBYjJ10TuwSsSLYXW7V5G6MKWI77WgcD7zFNx2CGh3T925uQmgsUb6whC0Zp1ZYZJH6MA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cce39930b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MT1Ja5ZdPNWKT3e1yjsXig==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KBQmT2Qma1oyFqMjcjRRn1oPzuI=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 889cc7c0813143ec5fc52752b0981130
936b7676bb262750e5499d0168f8e75c25cf3760
476d45d2548fbd8df2770c6bdfb2a7557d01ec07c5698d2c6a93a58d6c5a50d6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "476D45D2548FBD8DF2770C6BDFB2A7557D01EC07C5698D2C6A93A58D6C5A50D6"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5567
Expires: Wed, 16 Nov 2022 14:35:56 GMT
Date: Wed, 16 Nov 2022 13:03:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash dc83f54ac085b04b157d1862e99a945a
40cbad34ff331d2c2397ba1b3f7745ccbcbc3212
8179e8b2449f7c8f88804a42aeaae707c8de7620612e4b5cec2486c264cf5365
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3883
Cache-Control: max-age=152091
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "63747f7d-116"
Expires: Fri, 18 Nov 2022 07:18:00 GMT
Last-Modified: Wed, 16 Nov 2022 06:13:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 313 B IP
Hash c2d570c6c061151d97b9961e405b5a88
6a79be845d339db0236c9015a92c31397101556f
2b12747a749e1833e16587222d9088b951144b6ded3b30b9e9ff1807234a6576
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 553
Cache-Control: max-age=166379
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "6374c450-139"
Expires: Fri, 18 Nov 2022 11:16:08 GMT
Last-Modified: Wed, 16 Nov 2022 11:06:56 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
i.servimg.com/u/f45/16/65/30/13/21660310.gif
200 OK 22 kB URL HTTP/2 i.servimg.com/u/f45/16/65/30/13/21660310.gif
IP
File type GIF image data, version 89a, 340 x 315\012- data
Hash a85f09dd665105328da935c22befddb3
2701393ed52b427605ab4b3e369f40889b72c344
f0952ed51461daf705f863a6edee369ac67149d370d046223c4e4c437bc25e9b
GET /u/f45/16/65/30/13/21660310.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: image/gif
content-length: 22147
last-modified: Mon, 29 Aug 2011 16:11:48 GMT
etag: "4e5bba44-5683"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 16 Nov 2023 07:03:43 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yx1bDR9N3cHro2y8tX%2BIEyrIeaXDlX1Uo8TDuAe7MPGlaU%2BCnAw98xnppb5U%2BRHl%2FowKQqFpWjgNhDEJlFnBDKEyocwlcuDYzqBmSAbS1cDYjuyg7Qu53e1nPGXHWzOo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76b06cd1bb17b4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash dc83f54ac085b04b157d1862e99a945a
40cbad34ff331d2c2397ba1b3f7745ccbcbc3212
8179e8b2449f7c8f88804a42aeaae707c8de7620612e4b5cec2486c264cf5365
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3883
Cache-Control: max-age=152091
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "63747f7d-116"
Expires: Fri, 18 Nov 2022 07:18:00 GMT
Last-Modified: Wed, 16 Nov 2022 06:13:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278
stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=citytala.ahlamontada.com&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=citytala.ahlamontada.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash cdc8be94d6e4efb90ce038ec8b1ad475
f58b4021b57696697867d588576f83fddb09dd7c
492148deea5e7e55ef9eb6a0f6eb733d2ec1c48002fdc1c762190574bf9fd948
Analyzer Verdict Alert quad9 Sinkholed
GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=citytala.ahlamontada.com&var=&ymid=&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: 50e3ec7977bc34d776c963eee4fa9a35
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.403
200 OK 35 kB URL HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.403
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8942a5ce6a88edcf54ac9ee24ae8f0ab
fda99c7207cc5550c3237c227a09cac55b650b66
39f0c8d8e9a3b6b4d3e1d433770b34a6b976c92019c17ef05def18f607b91a1a
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/universal.min.js?v=3.1.403 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 14:20:39 GMT
etag: W/"636a65b7-180b9"
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 28567
date: Mon, 14 Nov 2022 00:43:49 GMT
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
etag: "072eaf64a771815874455704fca9301b"
cache-control: public, max-age=604800
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ValhvZCLG1mXpvpQA4S_BXFplRm9NGb_26fPszdesj5Y-g1C5rqfew==
age: 217161
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 97b17c78c6d6fb52647dd455fe8f220e
476c85bc36b3debf22dd5b07d9349a7f12dd7d6e
2bdccc0f42817ef947d61ccf558212e24c3e5740f7e4af29b0acd1dd8a67f1f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 666
Cache-Control: max-age=103872
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "6373cfb4-139"
Expires: Thu, 17 Nov 2022 17:54:21 GMT
Last-Modified: Tue, 15 Nov 2022 17:43:16 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 313
cdn.taboola.com/libtrc/forumotion-ar/loader.js
200 OK 25 kB URL HTTP/2 cdn.taboola.com/libtrc/forumotion-ar/loader.js
IP
File type Unicode text, UTF-8 text, with very long lines (65498)
Hash cd409ce256d9effa16942b642e80a131
ce54ee9e4633e6281e5f889c74972b39f5c182fa
71f08b1d11d07e6c92605a57d2f2298f2892c204f452fa0bae93fd7974ed72e7
GET /libtrc/forumotion-ar/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pduy4nRwDQiRO4N7VE+rFIDBDgChu2EW2QOUYlssuqj5b9/N4orA/q/RlmYYdQ3BGTXRtH/tpVY=
x-amz-request-id: K2WXN4CHWMY8GDTX
last-modified: Wed, 16 Nov 2022 12:11:44 GMT
etag: "50b8529a9a6a0a022bb89c30ce1742b8"
x-amz-version-id: S9WTC._TogCCV9z3AG.R7Rja1iFOtvnJ
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:09 GMT
via: 1.1 varnish
age: 3042
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 4
x-timer: S1668603789.239426,VS0,VE0
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 84
content-length: 25254
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 16 Nov 2022 12:41:09 GMT
expires: Wed, 16 Nov 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 1320
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/lang/ar.js
200 OK 19 kB URL HTTP/2 illiweb.com/rs3/64/frm/lang/ar.js
IP
File type Unicode text, UTF-8 text, with very long lines (64093), with no line terminators
Hash 44d66446fea8879bcc86c780b9529883
098449b25fdf3a5965f6396739d64832b5d59511
8a266a5b660f56c04d044ba82c429ddd42e07408b124cf7ee3b5c516481ae47e
GET /rs3/64/frm/lang/ar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=74879
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:39:39 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 793409
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CAG8JQokeB%2FM3USHcS0XiZXRRzccen%2F8sooFPQ%2Fvh2hLnq%2F5g02Oy2CqBAHFvIuz6DxvMRdlfPuESptmrxIcLy2CuUeyFJkW8IoNu5hXZYtAUTQ01To0plCrocV%2BZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cce79dc0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=4_YmRV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONXFUUEtqUGdocXkzblE1ZlFEQWslMkYxZg; expires=Mon, 11 Dec 2023 13:03:09 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 348597
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 242c70f7156a35008b468bc53223656c
5bb7a82134f6da679ada7ade414ed3dd7d1e613c
f4160ff727a9717accc785cfd4e71a2f4b5b72a32a0d3e53dc02a97ffb30e2e7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2303
Cache-Control: max-age=164173
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "6374b4db-138"
Expires: Fri, 18 Nov 2022 10:39:22 GMT
Last-Modified: Wed, 16 Nov 2022 10:00:59 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash 242c70f7156a35008b468bc53223656c
5bb7a82134f6da679ada7ade414ed3dd7d1e613c
f4160ff727a9717accc785cfd4e71a2f4b5b72a32a0d3e53dc02a97ffb30e2e7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2300
Cache-Control: max-age=164170
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "6374b4db-138"
Expires: Fri, 18 Nov 2022 10:39:19 GMT
Last-Modified: Wed, 16 Nov 2022 10:00:59 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 312
cdn.taboola.com/libtrc/impl.20221116-9-RELEASE.js
200 OK 146 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221116-9-RELEASE.js
IP
File type ASCII text, with very long lines (65509)
Size 146 kB (146442 bytes)
Hash 56f66010e8d8a09bc1df08dc7a8209e2
237452ab52e408d27a4c93c009689ba9ba74f0b5
5a955d6601a1dfdbf4d5ce8df9108cc3bc552d772fefbf6d7695b128f83d98b5
GET /libtrc/impl.20221116-9-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: hsM7qAQN77Tiu/I2eGV8O3Sq5O+VLGd1xDfBldKyjVg/7TsYOO+uhbhrdYSLgZHVwM6FmVgFeyc=
x-amz-request-id: RM7FN48RA6WBJPJM
last-modified: Wed, 16 Nov 2022 11:55:38 GMT
etag: "56f66010e8d8a09bc1df08dc7a8209e2"
content-encoding: br
x-amz-version-id: Arg_VDUIrdZC6y_QjsbtdT8CIRfNOFP3
content-type: application/javascript
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:09 GMT
via: 1.1 varnish
age: 3522
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 922
x-timer: S1668603789.347411,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 15
server: AmazonS3-br
content-length: 146442
X-Firefox-Spdy: h2
www.facebook.com/x/oauth/status?client_id=188749777847233&input_token&origin=1&redirect_uri=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&sdk=joey&wants_cookie_data=true
200 OK 0 B URL HTTP/2 www.facebook.com/x/oauth/status?client_id=188749777847233&input_token&origin=1&redirect_uri=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&sdk=joey&wants_cookie_data=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/oauth/status?client_id=188749777847233&input_token&origin=1&redirect_uri=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&sdk=joey&wants_cookie_data=true HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
access-control-expose-headers: fb-s
access-control-allow-credentials: true
access-control-allow-origin: https://citytala.ahlamontada.com
fb-s: unknown
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
document-policy: force-load-at-top
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
strict-transport-security: max-age=15552000; preload
x-fb-debug: DLhUBwRfe6qKdegmzpbYqCuiJeDZBWLMgUmB0WlEpN14tFZ2lsMltkujBHcflQzIIxgrLB67SujdfUmIXaoNaw==
content-length: 0
date: Wed, 16 Nov 2022 13:03:09 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 640a56fefbd4d5c465d71dc3b6bbb884
d98e46478032ef118a575bc5b840d1eafb0d314e
079cd049d9e3e2795e046a6ab614b3961916941d534efb5bc27dfca33e23ad5b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158739
Date: Wed, 16 Nov 2022 13:03:09 GMT
Etag: "6374975a-1d7"
Expires: Fri, 18 Nov 2022 09:08:48 GMT
Last-Modified: Wed, 16 Nov 2022 07:55:06 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AtkBWc3vBZdMMNJ2iCwXOHgurHvMHE-C2q88yj6D68aHdBZZk5xvvQ==
Age: 4422
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=13%3A03%3A08.715&type=usage&msg=rtus&llvl=2&id=6925&cv=20221116-9-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=13%3A03%3A08.715&type=usage&msg=rtus&llvl=2&id=6925&cv=20221116-9-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=13%3A03%3A08.715&type=usage&msg=rtus&llvl=2&id=6925&cv=20221116-9-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
x-fastly-to-nlb-rtt: 21946
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.viglink.com/api/ping
200 OK 259 B IP
File type ASCII text, with no line terminators
Hash eecdc71abc256c155dbb9723ca17e912
0faf6e52198f3e966a9d58bdb968c40b20c9427a
f558566649eb27b1ebf2f6dd359b43f2be55a700876408a9fce1d6e81d999fa1
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 143
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citytala.ahlamontada.com
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 16 Nov 2022 13:03:08 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 259
Connection: keep-alive
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash 690f88997f58726fbad6f13cae4fb4c4
edb029c9525ebd3952df332da959f401956a44db
1de5c8188eee82a6c4bb20b465c792334b32d31007622a5e59ba8c2f9120915c
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 557926
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 74c07a15d0960c36c1d1160344b946da
9b0d25cc445c83d1eae53deb84a2a74b152af6d4
ba99f5ae2d779e578700195798bb71dd43f11195ef6a982e0eaac735e26b5a85
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=531518859.1668603789&jid=1769639962&gjid=1422608472&_gid=1502431304.1668603789&_u=YEBAAUAAAAAAACAAI~&z=1429067449
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=531518859.1668603789&jid=1769639962&gjid=1422608472&_gid=1502431304.1668603789&_u=YEBAAUAAAAAAACAAI~&z=1429067449
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=531518859.1668603789&jid=1769639962&gjid=1422608472&_gid=1502431304.1668603789&_u=YEBAAUAAAAAAACAAI~&z=1429067449 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://citytala.ahlamontada.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 16 Nov 2022 13:03:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.viglink.com/api/sync.gif?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.gif?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.gif?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Wed, 16 Nov 2022 13:03:09 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 74c07a15d0960c36c1d1160344b946da
9b0d25cc445c83d1eae53deb84a2a74b152af6d4
ba99f5ae2d779e578700195798bb71dd43f11195ef6a982e0eaac735e26b5a85
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 54f808d0043199f8d2d56568ccf1d5dc
1ba149cef4cee5fcbe3ac9c47b13f5602d58d166
edf56ee82e76d2ba2c274bc3bfc91f96a5bdad7c48d4f74c62a8b138fff1a336
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 363
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citytala.ahlamontada.com
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 16 Nov 2022 13:03:09 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Content-Type: application/json
Origin: https://citytala.ahlamontada.com
Content-Length: 395
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 97a2055d686f02ca862183769e53d93d
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Content-Type: application/json
Origin: https://citytala.ahlamontada.com
Content-Length: 779
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 5f119404b0503ed2166de10fef5b6975
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Content-Type: application/json
Origin: https://citytala.ahlamontada.com
Content-Length: 478
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 5ce12df19b32c4f1507b2f59ee8e65d2
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3aa507e5a75e9b1cfa2279463996b421
20781a3ecfe782cd7f58b1e69f854158a48f2e5b
51611355e0660dd2863abc869678a860ea39dab111fee45c900ee9b287ad80c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51611355E0660DD2863ABC869678A860EA39DAB111FEE45C900EE9B287AD80C4"
Last-Modified: Tue, 15 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15014
Expires: Wed, 16 Nov 2022 17:13:23 GMT
Date: Wed, 16 Nov 2022 13:03:09 GMT
Connection: keep-alive
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://citytala.ahlamontada.com
server-processing-duration-in-ticks: 303126
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
citytala.ahlamontada.com/images/icons-180.png
200 OK 31 kB URL HTTP/2 citytala.ahlamontada.com/images/icons-180.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 08d781f2a20035514da60c2a2a267be8
8efb6f3647602ff1b58131aa26bcb7202460c3ce
626c56ce11108519dedfdc0301326e3d8b35d7b1a3cad5e6ebed599d9978289a
GET /images/icons-180.png HTTP/1.1
Host: citytala.ahlamontada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/t216-topic
Cookie: exadd=166861; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: image/png
content-length: 31304
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Wed, 16 Nov 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 14 kB IP
Hash 4106f31bc311ede5ed9ca46d49aec70c
148e74f142b5e86ec1937503f1df080e94047744
ed83d1f6e898eb962bdda4b7a7213cc17ef8c28d945cf4bc019cce938ac5f011
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trc.taboola.com/forumotion-ar/trc/3/json?tim=13%3A03%3A08.721<i=deflated&data=%7B%22id%22%3A888%2C%22ii%22%3A%22%2Ft216-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1668600698380%2C%22vi%22%3A1668603788718%2C%22cv%22%3A%2220221116-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic%22%2C%22vpi%22%3A%22%2Ft216-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3331%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A484.20001220703125%2C%22mw%22%3A0%2C%22amw%22%3A765%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A1880.63330078125%2C%22mw%22%3A765%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft216-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 19 kB URL HTTP/2 trc.taboola.com/forumotion-ar/trc/3/json?tim=13%3A03%3A08.721<i=deflated&data=%7B%22id%22%3A888%2C%22ii%22%3A%22%2Ft216-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1668600698380%2C%22vi%22%3A1668603788718%2C%22cv%22%3A%2220221116-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic%22%2C%22vpi%22%3A%22%2Ft216-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3331%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A484.20001220703125%2C%22mw%22%3A0%2C%22amw%22%3A765%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A1880.63330078125%2C%22mw%22%3A765%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft216-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
File type Unicode text, UTF-8 text, with very long lines (45335)
Hash b7257b8edda55c0fe3b8cdba0c6d097a
07ad66172a7ab3f1a9298bef89145a6f9037c626
ce655a5969a17c6105e6ec726b29866b39155e8fa271c3db7605937829789966
GET /forumotion-ar/trc/3/json?tim=13%3A03%3A08.721<i=deflated&data=%7B%22id%22%3A888%2C%22ii%22%3A%22%2Ft216-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1668600698380%2C%22vi%22%3A1668603788718%2C%22cv%22%3A%2220221116-9-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic%22%2C%22vpi%22%3A%22%2Ft216-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3331%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A484.20001220703125%2C%22mw%22%3A0%2C%22amw%22%3A765%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A1880.63330078125%2C%22mw%22%3A765%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft216-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:09 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603790.511710,VS0,VE455
vary: Accept-Encoding
x-vcl-time-ms: 455
X-Firefox-Spdy: h2
vidstat.taboola.com/lite-unit/3.9.6/UnitWidgetItemDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.6/UnitWidgetItemDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1bb4fe57c8c100e340264f84207b752c
2a28aeb084639a401f0cd87aec8bbe850870526d
ad3a717d4868f3571cd032eb81b5cea3492d713c599acaa32872b2f03766528b
GET /lite-unit/3.9.6/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 10:48:33 GMT
etag: "defa80fca84ea6620e26bc79bffe323e"
server: AmazonS3
via: 1.1 0078c2805bf98a4574ea5eee972aa9f6.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: Ahhmoz-qJnMshrGnf8PQmZnB8loqEuIOs8qi_oTh0T8V2-V2jCscaA==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
age: 699220
x-served-by: cache-bma1682-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 21553
x-timer: S1668603790.054431,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29911
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d96ce61547f9d3184b571ec26c13f61
9607a743ed3f0c67ffd8aa22fdc76070c00b18fc
ce83e5b84417ac34b261442b70b71cec63124f57e8baa8acee68dc22c38763c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gum.criteo.com/syncframe?origin=rtus&topUrl=citytala.ahlamontada.com
200 OK 10 kB URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=citytala.ahlamontada.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (18924)
Hash 38169d76d347c077d7452da03b5a417d
812b0015411f9b891ff6da63069be29125ab6d57
be7cc2bfc08cb9eaaa3cf54f52a1a9748a38078eaefe04e02ceed77397b48d48
GET /syncframe?origin=rtus&topUrl=citytala.ahlamontada.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=cad46b6a-dd5e-4a94-ab49-4b091926e9f5; expires=Mon, 11 Dec 2023 13:03:09 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 737228
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=531518859.1668603789&jid=1769639962&_u=YEBAAUAAAAAAACAAI~&z=166230080
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=531518859.1668603789&jid=1769639962&_u=YEBAAUAAAAAAACAAI~&z=166230080
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=531518859.1668603789&jid=1769639962&_u=YEBAAUAAAAAAACAAI~&z=166230080 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 16 Nov 2022 13:03:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=ahlamontada.com&sn=FirefoxSyncframe&so=3&topUrl=citytala.ahlamontada.com&bundle=jcqTQ19Pb0psemlNb2NRSUhFVUprQzJtJTJCMWw2ekhuMVZGc1YlMkZ2cUdmR2Z0eUFubVpVZjRBRUF6SGRPV256N2FVJTJGb2dTYlhSa3B4aDRTRWY2RSUyQklGQmZuJTJCdUtaVzNtQzlSMjQ1SVIlMkJESU5oQlBsSjBuVGhCWExjSHpVUFhwZGw0OCUyQkttMlpld1JKJTJCRlRyR2k0bXlSUWhlWXpnJTNEJTNE&info=61gBIl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONXIlMkZjWmdRUGlYUjNpMDAlMkI3T0tqYkNz&idsd=-1144122495,925897867&cw=1&rtusCallerId=72&lsw=1
200 OK 368 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=ahlamontada.com&sn=FirefoxSyncframe&so=3&topUrl=citytala.ahlamontada.com&bundle=jcqTQ19Pb0psemlNb2NRSUhFVUprQzJtJTJCMWw2ekhuMVZGc1YlMkZ2cUdmR2Z0eUFubVpVZjRBRUF6SGRPV256N2FVJTJGb2dTYlhSa3B4aDRTRWY2RSUyQklGQmZuJTJCdUtaVzNtQzlSMjQ1SVIlMkJESU5oQlBsSjBuVGhCWExjSHpVUFhwZGw0OCUyQkttMlpld1JKJTJCRlRyR2k0bXlSUWhlWXpnJTNEJTNE&info=61gBIl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONXIlMkZjWmdRUGlYUjNpMDAlMkI3T0tqYkNz&idsd=-1144122495,925897867&cw=1&rtusCallerId=72&lsw=1
IP
Hash a3d5a817ce262bd8f648734ba0cf63a3
331971e824ed208c5eb938670963185845cbfd98
103358aaed6753f287f0d6b548cbd6014daa9ec5c5d767cf544331bbf14dee33
GET /sid/json?origin=rtus&domain=ahlamontada.com&sn=FirefoxSyncframe&so=3&topUrl=citytala.ahlamontada.com&bundle=jcqTQ19Pb0psemlNb2NRSUhFVUprQzJtJTJCMWw2ekhuMVZGc1YlMkZ2cUdmR2Z0eUFubVpVZjRBRUF6SGRPV256N2FVJTJGb2dTYlhSa3B4aDRTRWY2RSUyQklGQmZuJTJCdUtaVzNtQzlSMjQ1SVIlMkJESU5oQlBsSjBuVGhCWExjSHpVUFhwZGw0OCUyQkttMlpld1JKJTJCRlRyR2k0bXlSUWhlWXpnJTNEJTNE&info=61gBIl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONXIlMkZjWmdRUGlYUjNpMDAlMkI3T0tqYkNz&idsd=-1144122495,925897867&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1420808
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/501d032ab969b806b872771e0ed6fe64.jpg
200 OK 11 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/501d032ab969b806b872771e0ed6fe64.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fb814c9c1e712712e45954163817e69e
d68d9b94c94d93bd848067ae7193638a217c86d0
1afdd09cedd3441bd9e3efdab1441532ed509edb33303e92b6995f3cb69f5086
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/501d032ab969b806b872771e0ed6fe64.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 488350054442161824406673530804291327339,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 488350054442161824406673530804291327339,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
etag: "94c901a3fd5bb319ac9fb6d115d8a0ad"
last-modified: Fri, 14 Oct 2022 04:34:55 GMT
req-referer: https://www.lepoint.fr/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: e1b1767115e35eb5d2d4ccd3d952e027
x-envoy-upstream-service-time: 79
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb804
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
age: 2317292
x-served-by: cache-iad-kjyo7100106-IAD, cache-iad-kjyo7100055-IAD, cache-lga21938-LGA, cache-iad-kcgs7200055-IAD, cache-bma1682-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 12, 1
x-timer: S1668603790.135270,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/501d032ab969b806b872771e0ed6fe64.jpg
x-vcl-time-ms: 1
content-length: 11328
X-Firefox-Spdy: h2
citytala.ahlamontada.com/t216-topic
200 OK 17 kB URL HTTP/2 citytala.ahlamontada.com/t216-topic
IP
Hash 89ee7569d99947018fa5dc47bdc8bf52
befc99376e4a9589cfdc1dd82635d11b3499799a
cb9561827ee5ad6e8941809acb34e423b782a68bc674314ffb78711bcdf37a68
GET /t216-topic HTTP/1.1
Host: citytala.ahlamontada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache
pragma: no-cache
expires: Wed, 16 Nov 2022 00:00:00 GMT
last-modified: Wed, 16 Nov 2022 13:03:08 GMT
vary: User-Agent
set-cookie: exadd=166861; expires=Wed, 16-Nov-2022 17:03:08 GMT; Max-Age=14400
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 511 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
Hash ba7451e2ac1bb9669bad999fd3ab5334
202e01d98800703460d6cfe25084c011420d68e2
4a4107cd006d304762e8cd71e4b5cf0da679bac6619e511c066e7d021974969d
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 66268
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 370
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 16 Nov 2022 13:03:09 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://citytala.ahlamontada.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8cb5439106f8299db7c601b974d22d11
c7a60bf6709a8880cee136b5c518cb2bd08d93b2
6b8ae137d6e363a71c366c59515d387d04718430f20470a6aa73e3b050f39e9c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5879
Cache-Control: max-age=161635
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:10 GMT
Etag: "63749cfb-117"
Expires: Fri, 18 Nov 2022 09:57:05 GMT
Last-Modified: Wed, 16 Nov 2022 08:19:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19147
Expires: Wed, 16 Nov 2022 18:22:17 GMT
Date: Wed, 16 Nov 2022 13:03:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19147
Expires: Wed, 16 Nov 2022 18:22:17 GMT
Date: Wed, 16 Nov 2022 13:03:10 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0be1985-4e6e-4cc3-9b6e-2fc0d94bc02b.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0be1985-4e6e-4cc3-9b6e-2fc0d94bc02b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96b4478c098865b0d19738098db61d64
0e18a8c51596c8a4d84a142a57ffe376294833cc
9c9e433cf8f2167e4cfc3cff247eee85ebb9977e338e6e144acaea830db17c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0be1985-4e6e-4cc3-9b6e-2fc0d94bc02b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5749
x-amzn-requestid: ee63924c-be5c-4f48-9fe0-cc2ba3f93ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bX5qxHgWoAMFiZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ca311-32c6916d41247a9b563c952f;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 07:06:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5hBm4pVThVud5Nr3ReI8uRgqhR3MVsqS4qGEcE5Wrs3pqzyMgH2CRg==
via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 05:57:01 GMT
age: 25569
etag: "0e18a8c51596c8a4d84a142a57ffe376294833cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8cb5439106f8299db7c601b974d22d11
c7a60bf6709a8880cee136b5c518cb2bd08d93b2
6b8ae137d6e363a71c366c59515d387d04718430f20470a6aa73e3b050f39e9c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5879
Cache-Control: max-age=161635
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:10 GMT
Etag: "63749cfb-117"
Expires: Fri, 18 Nov 2022 09:57:05 GMT
Last-Modified: Wed, 16 Nov 2022 08:19:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc50c38bf-fe3d-4eec-be11-1e782b0f0bbc.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc50c38bf-fe3d-4eec-be11-1e782b0f0bbc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edd6a84f848a83f4d1990f92b4807def
bc2bb7815b062941d51fde65574851db55be37dc
4d015538adfa6c61a5dfca3cbb224ae91ccbe1d82212e997e22f895a77387bed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc50c38bf-fe3d-4eec-be11-1e782b0f0bbc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6629
x-amzn-requestid: ff03ae40-8d00-41ec-875f-b49b1b86151c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqY6CG9IoAMF8rA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63740840-7fdaa40f3ca9246045270665;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:44:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Wn2txfVMcQZgjTT0ny5o_j87O-eidXenBmzitM6zJec0i40Bs1zgGQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1949caaabae48a894fcd770a3e1384f6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:05:26 GMT
age: 53864
etag: "bc2bb7815b062941d51fde65574851db55be37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e399ef-c649-4728-84e9-6fea03ea9b5a.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e399ef-c649-4728-84e9-6fea03ea9b5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae0ab55e0e77a4265808a6689f25cbc3
187e6b340b43eb1aa0c724b749db7c20a486706a
3881e5ad44b9b2fae82510794af43d14e304ce624f26f66523f85d58fea063dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e399ef-c649-4728-84e9-6fea03ea9b5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9625
x-amzn-requestid: 9bd72b4a-2ac0-423f-b0e2-73fd51e02e97
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYEBHTjIAMFvOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406e6-57f5412d5eca6d640a0f590d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qWuPuzaXg4Cfowj2mJuTEUIH3UVCely6rXVpbiNGxIDgBAt38UOBxw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:54:50 GMT
etag: "187e6b340b43eb1aa0c724b749db7c20a486706a"
content-type: image/jpeg
age: 54500
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b00960f-2d08-4518-83c0-1d7f0f3c973c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b00960f-2d08-4518-83c0-1d7f0f3c973c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53d2d9380ba28ed0656b54c22bc56766
757f8e6306effbab70d99757c5672564cfc9f623
6d6c41527ae28cdce016470ec1eb87e0ed384f3ef721838724f29845f3bd8dac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b00960f-2d08-4518-83c0-1d7f0f3c973c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8990
x-amzn-requestid: cb142f4b-787e-4b3c-9d75-72579105db60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYFOHi8IAMFpDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406ee-504a14105d2be58b1ce71c18;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: K-Js3sppuhzF03KF0M0wVw5GCSaq5VfHDbzU2DyEwjiARRDsccGYbQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:54:54 GMT
etag: "757f8e6306effbab70d99757c5672564cfc9f623"
content-type: image/jpeg
age: 54496
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 848af62ec10d0c297922f8600b6ad12d
4eadbf5f0dade92dcc6d68c8ebb70898aadb9a7d
a3b4eb6768259876819d7e6c7ac9e21c603d54f60bf70ed077cb820711e2ae74
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11316
x-amzn-requestid: 8456b25a-b87f-490d-86b3-fb217afea082
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlniESaIAMF3Qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c96-30ed3b0972418bae4700edc8;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:10 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mMfP4wVk4SVBFR_ZqBEFuKeOS_NHYS1RuAnRSZajYau-oLVcc4j9BA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 05:20:06 GMT
age: 27784
etag: "4eadbf5f0dade92dcc6d68c8ebb70898aadb9a7d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b31091803f98744f4da3b311467300a7
d829c5d23a494bc901d925dd02b84c470a0de479
c1cb88b82d8b5a82019da970f812cd31e13086c2da8498a21a57e7238aa34fe8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8971
x-amzn-requestid: b5dd68c5-7146-4d31-a7fd-4ac4c474119a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bnb6bGeyoAMFV9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6372d9dc-2ca4003e65d69039389bc676;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 00:14:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8TqIvhJUq_yG_iMFds_btqtYsrNzoaZeIQgOP0-Kc60yuQFOPYEXRA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 09:04:35 GMT
age: 14315
etag: "d829c5d23a494bc901d925dd02b84c470a0de479"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//luahx.com/content/3e7c9d26-fa35-4dbd-b5f0-ce025d26d2ad
200 OK 10 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//luahx.com/content/3e7c9d26-fa35-4dbd-b5f0-ce025d26d2ad
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dc5979b0bf95bb9ee35ba87dacbff493
507cb7f1a4b12cb41e3babe94cb2bdc92c6ddfc8
56e50f511a5038956934a0d11ee1fe2a0a901b218d86ddd35f3f71e0bb279f2e
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//luahx.com/content/3e7c9d26-fa35-4dbd-b5f0-ce025d26d2ad HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 312273098421013413362703936195646142113,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 312273098421013413362703936195646142113,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
etag: "424e66248b90df10f0fde34ef9c2f0c1"
last-modified: Sun, 09 Oct 2022 02:08:16 GMT
req-referer: https://www.completesports.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 5ee0dc17bd14a614dce8cf8c9a1c3433
x-envoy-upstream-service-time: 1007
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb204
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
age: 1958561
x-served-by: cache-iad-kiad7000055-IAD, cache-iad-kcgs7200038-IAD, cache-sna10720-LGB, cache-iad-kcgs7200102-IAD, cache-bma1682-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 25, 1
x-timer: S1668603791.569848,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//luahx.com/content/3e7c9d26-fa35-4dbd-b5f0-ce025d26d2ad
x-vcl-time-ms: 1
content-length: 10020
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
200 OK 8.1 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 679744ee01cd8f0e9d5bd3f97de9a1fd
b678d18309e35ff0e206ae0bbc0d7f57001406f4
fdf1eda67cab7bf239fe9d9d494cf0a204f403ebacc19e6828c2d20fda48175c
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 352690306229506137798207407469809578240,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 352690306229506137798207407469809578240,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
etag: "f48ef060a18c1a36e8e104736857c035"
last-modified: Tue, 04 Oct 2022 10:35:32 GMT
req-referer: https://halimb.yoo7.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 3dcfd34bb355296090bd85c052a57255
x-envoy-upstream-service-time: 428
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
age: 2519538
x-served-by: cache-iad-kiad7000084-IAD, cache-iad-kiad7000031-IAD, cache-lax10655-LGB, cache-iad-kjyo7100055-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 84, 1
x-timer: S1668603791.585962,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
x-vcl-time-ms: 2
content-length: 8080
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/h_150,w_180,c_fill,g_xy_center,x_734,y_413/https%3A//img2.goodfon.com/wallpaper/nbig/9/b3/training-ball-abs-pose.jpg
200 OK 4.3 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/h_150,w_180,c_fill,g_xy_center,x_734,y_413/https%3A//img2.goodfon.com/wallpaper/nbig/9/b3/training-ball-abs-pose.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4278b3a1b2d9c8bc9c35ab239d9db313
b174457a6d860f12b4585975a76937b9d45d78ae
46524732255e95fa587287aef232f1136a713777dafb34651b7e27d9e8c6529b
GET /taboola/image/fetch/h_150,w_180,c_fill,g_xy_center,x_734,y_413/https%3A//img2.goodfon.com/wallpaper/nbig/9/b3/training-ball-abs-pose.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 325181489593724211708107492274185756495,513562205727188539274500710930811684698,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 325181489593724211708107492274185756495,513562205727188539274500710930811684698,29ecf9b93bbf306179626feeda1fab70
etag: "47857ff980c60bb9ed6f153f49b613ba"
last-modified: Thu, 22 Sep 2022 06:19:41 GMT
req-referer: https://genevaa.yoo7.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 1afaa963288cc6e0c6b4afa6e5b5c240
x-envoy-upstream-service-time: 1719
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
age: 3645832
x-served-by: cache-iad-kjyo7100041-IAD, cache-iad-kjyo7100175-IAD, cache-bur-kbur8200165-BUR, cache-iad-kiad7000156-IAD, cache-bma1682-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 39, 1
x-timer: S1668603791.585989,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/h_150,w_180,c_fill,g_xy_center,x_734,y_413/https%3A//img2.goodfon.com/wallpaper/nbig/9/b3/training-ball-abs-pose.jpg
x-vcl-time-ms: 1
content-length: 4318
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 4e202ed830421ee60a7721213f44d280
589dde236561a228ae52a310094db229cb0abc08
1a76b26a4408869ed7e87fd48fa59772e7f226ffaf7a0f5d8283d998035fc103
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 294
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://citytala.ahlamontada.com
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Wed, 16 Nov 2022 13:03:10 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 657b1ebd9afcde3ce9cf72abaef1b691
1a80eee05a05fe45873b20f879ed84a1610c1662
8a267039e06c9346d5966fa8dda84beedbba9352eb32af800af3e70a01b8d6d2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 13:03:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 14 Nov 2022 06:25:20 GMT
Expires: Mon, 21 Nov 2022 06:25:19 GMT
Etag: "1a80eee05a05fe45873b20f879ed84a1610c1662"
Cache-Control: max-age=407528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76b06cda4cbe1c0a-OSL
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/13/38/57/51/uuoous10.png
200 OK 4.8 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/13/38/57/51/uuoous10.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9b6faedee1da6ab92d086e476b1b42db
64ea1c90a4315045f21118036b4ab3c5d47e324b
adf57611aba96302c621c1427bf9c2085084b28a457a257e1bfc70860a3ddc48
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/13/38/57/51/uuoous10.png HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 562058347387171312922067549307883669264,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 562058347387171312922067549307883669264,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
etag: "964698ac0c26377f0973f909713ba201"
last-modified: Wed, 09 Nov 2022 02:56:14 GMT
req-referer: https://halimb.yoo7.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 5c3faf5a69594ff4d4b48838527346e8
x-envoy-upstream-service-time: 437
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
age: 69737
x-served-by: cache-iad-kjyo7100149-IAD, cache-iad-kiad7000108-IAD, cache-bur-kbur8200124-BUR, cache-iad-kjyo7100042-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, HIT, MISS
x-cache-hits: 0, 0, 0, 8, 0
x-timer: S1668603791.585932,VS0,VE91
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f48/13/38/57/51/uuoous10.png
x-vcl-time-ms: 91
content-length: 4760
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=5d82df2f00164f71993299b777517875
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=5d82df2f00164f71993299b777517875
IP
File type JSON data\012- , ASCII text
Hash abe42593ef77ca0dacefdd10dbea8bdd
e487e811ae99aa3a9d0cc6392bf16e2f6155a7a8
42d594c00b1595ddea31ceb56c39811e350bf6a4058e3152987a2ef1d24fb347
GET /gid.js?userId=5d82df2f00164f71993299b777517875 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5d82df2f00164f71993299b777517875; expires=Thu, 16 Nov 2023 13:03:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 78fda0786272bab7ed8ca951c64603b2
ade126b44cc781c55a21f3d411942d6ef9c376a2
54c1fad8e9c064305b5a2f0a1051a8ee9bdf28ff39d6c101984aa6116c9bd1b4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 13:03:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 01:33:17 GMT
Expires: Tue, 22 Nov 2022 01:33:16 GMT
Etag: "ade126b44cc781c55a21f3d411942d6ef9c376a2"
Cache-Control: max-age=476405,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76b06cdc3e801c0a-OSL
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 906
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 16 Nov 2022 13:03:10 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://citytala.ahlamontada.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&cmcv=&pix=31589837&cb=1668603789910&uv=3241&tms=1668603789910&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668603786852!ts:1668603789910&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&cmcv=&pix=31589837&cb=1668603789910&uv=3241&tms=1668603789910&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668603786852!ts:1668603789910&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&cmcv=&pix=31589837&cb=1668603789910&uv=3241&tms=1668603789910&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668603786852!ts:1668603789910&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
content-length: 0
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&cmcv=&pix=31589837&cb=1668603790086&uv=3241&tms=1668603790086&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668603786852!ts:1668603790086&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&cmcv=&pix=31589837&cb=1668603790086&uv=3241&tms=1668603790086&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668603786852!ts:1668603790086&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&cmcv=&pix=31589837&cb=1668603790086&uv=3241&tms=1668603790086&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668603786852!ts:1668603790086&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
content-length: 0
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=13%3A03%3A09.576&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=2946&cv=20221116-9-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=13%3A03%3A09.576&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=2946&cv=20221116-9-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=13%3A03%3A09.576&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=2946&cv=20221116-9-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
x-fastly-to-nlb-rtt: 80240
access-control-allow-credentials: true
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&cmcv=&pix=undefined&cb=1668603790087&uv=3241&tms=1668603790087&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=f95375d6-d282-4137-95da-233cdb4a8e80&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 1.0 kB URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&cmcv=&pix=undefined&cb=1668603790087&uv=3241&tms=1668603790087&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=f95375d6-d282-4137-95da-233cdb4a8e80&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
Hash d022e5ce0459e29cfb9af5ce6f7d7d22
69d50a2477618ec3259853363145df6b53d171af
49b39de45fd466a312e516b624ca64d8cb7315fe4de67bfac53c7f0d65b790ca
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&cmcv=&pix=undefined&cb=1668603790087&uv=3241&tms=1668603790087&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=f95375d6-d282-4137-95da-233cdb4a8e80&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603791.863352,VS0,VE22
vary: Accept-Encoding
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 96f34a2383f7e60fe8aaf4189d606e01
6f0f297a06714568016feb91e0cfefe23153c125
850178be92f3018d1c7818c69fd8a07402519e312fda10d955f1f5e5496f1578
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3439
Cache-Control: max-age=130031
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:10 GMT
Etag: "63742b0e-1d7"
Expires: Fri, 18 Nov 2022 01:10:21 GMT
Last-Modified: Wed, 16 Nov 2022 00:13:02 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 312 B IP
Hash 9ac52b8084165a204a950c55145c885d
0eb66ec4347cc111b570e735df4a486118378146
8ab282960e40b823e7120dcf2f656f3a3dac9f435e8c1db3595c771b0d4e9983
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 285
Cache-Control: max-age=152437
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:10 GMT
Etag: "63748ee6-138"
Expires: Fri, 18 Nov 2022 07:23:47 GMT
Last-Modified: Wed, 16 Nov 2022 07:19:02 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 312
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&cmcv=&pix=undefined&cb=1668603789911&uv=3241&tms=1668603789911&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=208257a7-fdd2-4e6d-861f-6d3d871a420f&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 395 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&cmcv=&pix=undefined&cb=1668603789911&uv=3241&tms=1668603789911&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=208257a7-fdd2-4e6d-861f-6d3d871a420f&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (742), with no line terminators
Hash 39da82976567401a7629ab307831318a
80f6271faa2f7984a80bbc1a9454bf4fc59fc026
472f739499d43be3081e7c9104126ec9eb42286120ed68a4373f240b20255834
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&cmcv=&pix=undefined&cb=1668603789911&uv=3241&tms=1668603789911&abt=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=208257a7-fdd2-4e6d-861f-6d3d871a420f&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603791.710802,VS0,VE23
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.betgorebysson.club/?rb=OzjeE1KCYsU275PppGVXCwzhsPG1qpYKiUpitSP7ns_X1kaFkRyXDQ9uTxOSNSycQ4N-sYrtw3wc5POt20IzckVL-jKCrDb1PsMK701QFkkntbyObl0EVxAhNR7mRXNRFRwr6x3cI29oeL64kk3rSYeK9OOq_c-UDiJ27e4ju4i-JEexhBvTkqSGQwe5dr_B4jWG1EtB88fXL7Ru3WJUuCjLtzoIG0pWPF1suDMeRQvz1ezFnGLMKA%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.449.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.449.0&bs=f333f3b6-e71b-4497-af67-d91a5aecffe6&userId=5d82df2f00164f71993299b777517875&m=link
200 OK 1.8 kB URL HTTP/2 cdn.betgorebysson.club/?rb=OzjeE1KCYsU275PppGVXCwzhsPG1qpYKiUpitSP7ns_X1kaFkRyXDQ9uTxOSNSycQ4N-sYrtw3wc5POt20IzckVL-jKCrDb1PsMK701QFkkntbyObl0EVxAhNR7mRXNRFRwr6x3cI29oeL64kk3rSYeK9OOq_c-UDiJ27e4ju4i-JEexhBvTkqSGQwe5dr_B4jWG1EtB88fXL7Ru3WJUuCjLtzoIG0pWPF1suDMeRQvz1ezFnGLMKA%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.449.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.449.0&bs=f333f3b6-e71b-4497-af67-d91a5aecffe6&userId=5d82df2f00164f71993299b777517875&m=link
IP
Hash 1dfcdb1d7f13a63b3d6e931c730086ae
6e315a693c54cbef3bcc6d214b3b25757256fd8f
5e5d3a702e84e598b50691a8b496367d87ffdb4255d8b4157f3a4d1cf29bbe81
GET /?rb=OzjeE1KCYsU275PppGVXCwzhsPG1qpYKiUpitSP7ns_X1kaFkRyXDQ9uTxOSNSycQ4N-sYrtw3wc5POt20IzckVL-jKCrDb1PsMK701QFkkntbyObl0EVxAhNR7mRXNRFRwr6x3cI29oeL64kk3rSYeK9OOq_c-UDiJ27e4ju4i-JEexhBvTkqSGQwe5dr_B4jWG1EtB88fXL7Ru3WJUuCjLtzoIG0pWPF1suDMeRQvz1ezFnGLMKA%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.449.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.449.0&bs=f333f3b6-e71b-4497-af67-d91a5aecffe6&userId=5d82df2f00164f71993299b777517875&m=link HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Cookie: OAID=5d82df2f00164f71993299b777517875; oaidts=1668603789
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
content-type: application/json
x-trace-id: ba8b8f536e8447006d0354da2a468bbd
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=5d82df2f00164f71993299b777517875; expires=Thu, 16 Nov 2023 13:03:10 GMT; path=/; secure; SameSite=None
oaidts=1668603790; expires=Thu, 16 Nov 2023 13:03:10 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 23 Nov 2022 13:03:10 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 16 Nov 2022 13:03:10 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05d43717-65af-11ed-bff5-1984e64b0506; expires=Wed, 14-Dec-2022 13:03:10 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d43756-65af-11ed-bff5-1984e64b0506
X-fe: 114
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 16 Nov 2022 13:03:10 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05d42a62-65af-11ed-8cbe-17d925990206; expires=Wed, 14-Dec-2022 13:03:10 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d42ab9-65af-11ed-8cbe-17d925990206
X-fe: 4
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
vidstat.taboola.com/vpaid/units/32_4_1/assets/css/cmOsUnit.css
200 OK 8.3 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_4_1/assets/css/cmOsUnit.css
IP
Hash a28320a69408adba1f01f56d6eb80708
8012c7108fab547cf31481cfda7cb49e654a0542
befbb274b7045e7e5791a4badbe46e1a2e367e6570da7cd0ac127acc4b8e8991
GET /vpaid/units/32_4_1/assets/css/cmOsUnit.css HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: bAySMeSEXUGF3N8aZ6rmf8GYDZEd5K/VMoUKcFg92G+JmjfEGiEl/M1DtvrgnTYRvY/caUbbLEE=
x-amz-request-id: BD24MC3C62DTEDFC
last-modified: Thu, 10 Nov 2022 16:15:38 GMT
etag: "a28320a69408adba1f01f56d6eb80708"
x-amz-meta-ctime: 1668096937
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1668096936
content-type: text/css
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
via: 1.1 varnish
age: 506384
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 116610
x-timer: S1668603791.996648,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 8297
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/units/32_4_1/infra/cmTagWIDGET_ITEM.js
200 OK 128 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_4_1/infra/cmTagWIDGET_ITEM.js
IP
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Size 128 kB (127530 bytes)
Hash 151facb98d755a46fd260231d78130a9
f10823c4a61f363f3256882cea2ca31881e4afd5
678985021845d0de22cd87f7cfe9f174f170791fbd99d91237fb9ad6742f72e5
GET /vpaid/units/32_4_1/infra/cmTagWIDGET_ITEM.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1yXNPquop0+Zvalsht6cm6Z/leKNzl+LPgBYbMGuhP07wVVrY6iRM4MUHQHpDgMNh1Ejf//TflA=
x-amz-request-id: EHGZNJWMAS99HHZH
last-modified: Thu, 10 Nov 2022 16:14:45 GMT
etag: "151facb98d755a46fd260231d78130a9"
x-amz-meta-ctime: 1668096884
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1668096883
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:11 GMT
via: 1.1 varnish
age: 506384
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 58500
x-timer: S1668603791.011513,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 127530
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05cf9793-65af-11ed-968e-1bbe6fc50406
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05cf9793-65af-11ed-968e-1bbe6fc50406
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05cf9793-65af-11ed-968e-1bbe6fc50406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05d8336b-65af-11ed-9065-1ce730eb0306; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 140
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d43756-65af-11ed-bff5-1984e64b0506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d43756-65af-11ed-bff5-1984e64b0506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d43756-65af-11ed-bff5-1984e64b0506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05d91e98-65af-11ed-88bd-1d03a5b20106; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 87
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d42ab9-65af-11ed-8cbe-17d925990206
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d42ab9-65af-11ed-8cbe-17d925990206
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05d42ab9-65af-11ed-8cbe-17d925990206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05dc9334-65af-11ed-bd0f-11e121d60406; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 8
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05e0119a-65af-11ed-a07b-194044dd0106; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05e011f3-65af-11ed-a07b-194044dd0106
X-fe: 88
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05e011f3-65af-11ed-a07b-194044dd0106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05e011f3-65af-11ed-a07b-194044dd0106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=05e011f3-65af-11ed-a07b-194044dd0106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=05ee3a10-65af-11ed-8119-14684a3a0506; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 117
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.digicert.com/
200 OK 471 B IP
Hash 28fdacb00dd3f6ed84fa72022d97fcb6
438dc26bd3fe789bb0040a072c24d68728bd767e
be82127e2eb4d550987fce6056d2d6ee9414bbffc1d40c8c956a65df06f5fa41
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5170
Cache-Control: max-age=99326
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 13:03:11 GMT
Etag: "6373ac5b-1d7"
Expires: Thu, 17 Nov 2022 16:38:37 GMT
Last-Modified: Tue, 15 Nov 2022 15:12:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
trc.taboola.com/forumotion-ar/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk?tvi2=-2&route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4530
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:11 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603791.134136,VS0,VE83
x-vcl-time-ms: 83
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 5d76d361c50e9ca15fff2077e912418a
5fc21ef1d686df2d20510320764d27df143d222d
a96bbc8602545d7a35cbe8fb55dfd274a0bbe3505b1a906eba281391584b0a9c
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 20 Nov 2022 11:55:11 GMT
ETag: "5fc21ef1d686df2d20510320764d27df143d222d"
Last-Modified: Wed, 16 Nov 2022 11:55:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 194
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76b06cdf285cb4ed-OSL
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 16 Nov 2022 13:03:11 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBI_fdGMCEK0Qrk4QyGl2pA-NvH2FvhYFEgEBAQExdmN-YwAAAAAA_eMAAA&S=AQAAAlS_5D54XLHFkGGf8eW63tA; Expires=Thu, 16 Nov 2023 19:03:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a30b582a2573caa5e8bdbb23b2f09139
2f24807376faaa14ca2b67db13e9d5830a6086c9
ca749e187a0f56bff342818f212d6389919129bcdaea0a8c08b16e6727f51fc1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 13:56:49 GMT
Expires: Tue, 22 Nov 2022 13:56:48 GMT
Etag: "2f24807376faaa14ca2b67db13e9d5830a6086c9"
Cache-Control: max-age=521016,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76b06cdf093f1c0a-OSL
vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
200 OK 87 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash dcfe04133edaa84ac4a7356299134bf2
600265d1e188692d5cb0b9dbc828c708181bd3d8
1f50ba3994c74af69746c8db181597b9e74d7bb53c808ce9f7014facf0c59bfd
GET /vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DH4gCSpZOjdiQ2RHNdcZaQ1gWcI8EDnhtXKaFZT4JUmiFDacp53eylqcVHaDpMgh56JBtwAdvTI=
x-amz-request-id: M2DJX9S4FNAQPE8Z
last-modified: Thu, 27 Oct 2022 07:34:53 GMT
etag: "dcfe04133edaa84ac4a7356299134bf2"
x-amz-meta-ctime: 1666856092
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1666856080
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:11 GMT
via: 1.1 varnish
age: 1747669
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 388681
x-timer: S1668603791.273395,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 87152
X-Firefox-Spdy: h2
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:11 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:11 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=297&height=167&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668603790092&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1650325703&tz=0&viewable=true&ddast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fcitytala.ahlamontada.com&en=1
200 OK 975 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=297&height=167&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668603790092&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1650325703&tz=0&viewable=true&ddast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fcitytala.ahlamontada.com&en=1
IP
Hash 1ef7a4954483439f4d08322144d22782
b21701cd8939c1d2193eac94d568df1bc4a54282
4333add2b85af1609bbd96ce43a60fc4a1c74e0dfe0e62eddcaf1246133ad50f
POST /VideoBidRequestHandlerServlet?oid=15&width=297&height=167&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668603790092&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1650325703&tz=0&viewable=true&ddast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fcitytala.ahlamontada.com&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 117
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1447
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603791.884846,VS0,VE103
vary: Accept-Encoding
X-Firefox-Spdy: h2
vidstatb.taboola.com/vid/blackScreen5.mp4
206 Partial Content 91 kB URL HTTP/2 vidstatb.taboola.com/vid/blackScreen5.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash b2b087fe4ae638c533731c347fcd4df8
62851c888c21bb51cc04f13b6fc0451279fe0425
0407dafc112212a135d1aa4dd9b40ba0208c6bb6b1959f5535af093254189d66
GET /vid/blackScreen5.mp4 HTTP/1.1
Host: vidstatb.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Sun, 02 Jul 2017 20:40:57 GMT
etag: "b2b087fe4ae638c533731c347fcd4df8"
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1497790207
server: AmazonS3
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: gopM2XYfUoVUFmJXQ0440-QEF6IoAyvdLK0EUOquu3M35zK6ZGLwLg==
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:11 GMT
age: 2016556
x-served-by: cache-bma1682-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 454059
x-timer: S1668603792.512959,VS0,VE0
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-range: bytes 0-90783/90784
content-length: 90784
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:11 GMT
via: 1.1 varnish
age: 19862
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 2507
x-timer: S1668603792.520925,VS0,VE0
cache-control: private,max-age=31536000
abp: 15
content-length: 254
X-Firefox-Spdy: h2
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?gdpr=1&p=15414&us_privacy=1---&endpoint= HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
date: Wed, 16 Nov 2022 13:03:11 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 16 Nov 2022 13:03:11 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBI_fdGMCEFFL5KPUVCOflo_UzoeW6QkFEgEBAQExdmN-YwAAAAAA_eMAAA&S=AQAAAvci2z4MdmbgRl4l-QLdi8s; Expires=Thu, 16 Nov 2023 19:03:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
200 OK 233 B URL HTTP/1.1 eus.rubiconproject.com/usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 6220919f0a2b24a12a281ea8b891ecf6
759111c360edc6df73ed10aaaa212cb22c47ce0d
030c6e199782fb1908f6f89d3cd41950fd3ae0830c5020ba9ed617111bacd180
GET /usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint= HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
Last-Modified: Wed, 02 Nov 2022 02:30:44 GMT
ETag: "403b9-119-5ec73a0a33d00"
Accept-Ranges: bytes
Content-Encoding: gzip
Content-Length: 233
Content-Type: text/html; charset=UTF-8
Date: Wed, 16 Nov 2022 13:03:11 GMT
Connection: keep-alive
Vary: Accept-Encoding
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 43 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:11 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (18728)
Hash 3411aa8c96c3090048616a98b8f70969
4f97fc2e688dc3153f22b2a46226ba3fa6d72b6f
ae0e909887c1b005ab82b8568049b8ccabd99f7caefcf35a4fc473cd89ffd6ac
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Wed, 16 Nov 2022 10:56:11 GMT
Content-Encoding: gzip
Content-Length: 10066
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=78727
Expires: Thu, 17 Nov 2022 10:55:18 GMT
Date: Wed, 16 Nov 2022 13:03:11 GMT
Connection: keep-alive
Vary: Accept-Encoding
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668603789927&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1650325703&tz=0&viewable=true&ddast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fcitytala.ahlamontada.com&en=1
200 OK 518 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668603789927&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1650325703&tz=0&viewable=true&ddast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fcitytala.ahlamontada.com&en=1
IP
File type ASCII text, with very long lines (1424), with no line terminators
Hash 310bd1e271f7b73fec06b3ff793ed33e
2e11849177b64d717d9ebdfa42083a29b849bab0
f4a94903b8cfd580ede388c5778c4a460424fe429c0b0d06aa850bde69dcc33d
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668603789927&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-1650325703&tz=0&viewable=true&ddast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=ecp_vC!mprdctdt6_vA!ntvc_vB!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fcitytala.ahlamontada.com&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1457
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603791.884365,VS0,VE94
vary: Accept-Encoding
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=06334a9b-65af-11ed-8a10-1342c0320206
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=06334a9b-65af-11ed-8a10-1342c0320206
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=06334a9b-65af-11ed-8a10-1342c0320206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=0639907c-65af-11ed-986b-190e06a80506; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 17
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=0633b992-65af-11ed-af03-1c5660560506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=0633b992-65af-11ed-af03-1c5660560506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=0633b992-65af-11ed-af03-1c5660560506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 16 Nov 2022 13:03:11 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=063ab91f-65af-11ed-9f25-1d37f49c0206; expires=Wed, 14-Dec-2022 13:03:11 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 14
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:11 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&excid=22&docw=0&cijs=1&nlb=true
200 OK 1.1 kB URL HTTP/2 am-match.taboola.com/sync?dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1102), with no line terminators
Hash 2dd3ea13a4ddfadb10d95540a595271d
d26d892723951d9e3b0f93cb852aafa472196832
7a8d4b47e33eb733a52ec68d1e543d949b426c3e2eb8d836f83a842e957e1bb7
GET /sync?dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:11 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3401
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Wed, 16 Nov 2022 13:03:11 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBI_fdGMCEHc_gnx8IWrf-SV_sa_xfhQFEgEBAQExdmN-YwAAAAAA_eMAAA&S=AQAAAiOtx1k8C8x6YVWWDLiNFkU; Expires=Thu, 16 Nov 2023 19:03:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
cdn.taboola.com/scripts/cds-pips.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/scripts/cds-pips.js
IP
File type ASCII text, with very long lines (3545), with no line terminators
Hash 780c5c514014519ce276709f515905a0
04fe86d00b9c9077effe05171d066d243ecab221
015db06150b62ad2ad533883652174ebb6f07e24a7147fdac01a0ccd266e3f30
GET /scripts/cds-pips.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2KBeU0d7OyPXtZDYUoIqlTBmhGhsve90tjYoemCxISjKQrNgcxT28sPXVt5KfJt+6r7dFoJgA8g=
x-amz-request-id: NFWGDQGY1WQ95XHE
x-amz-replication-status: COMPLETED
last-modified: Wed, 12 Oct 2022 13:57:57 GMT
etag: "383fa66d2a0a09f4a6e64a9593ad43bb"
x-amz-version-id: z5FoayaLm_Bvew3pbkytkoHczFCvkPwT
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:12 GMT
via: 1.1 varnish
age: 19
x-served-by: cache-bma1682-BMA
x-cache: HIT
x-cache-hits: 36
x-timer: S1668603792.032990,VS0,VE0
vary: Accept-Encoding
abp: 15
cache-control: private, max-age=3600
content-length: 1340
X-Firefox-Spdy: h2
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://citytala.ahlamontada.com
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:12 GMT
via: 1.1 varnish
x-served-by: cache-bma1650-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//pfjfm.com/content/3b4a1429-02f4-4553-b1c7-564502f92da6
200 OK 3.9 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//pfjfm.com/content/3b4a1429-02f4-4553-b1c7-564502f92da6
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e7da54b44106e1b27501168e13ce72f8
dc0b617f30247c6c0d80f1df2c0d8b6e1eb8c3e6
273883df129108127fc244538c93213601e6ceaecc52c09abf682995afc4e446
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//pfjfm.com/content/3b4a1429-02f4-4553-b1c7-564502f92da6 HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 329175589791632588211733355539078372304,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 329175589791632588211733355539078372304,296870302051874402078780526775162453794,29ecf9b93bbf306179626feeda1fab70
etag: "57f1d740ea0a085369081dfc009cf739"
expiration: expiry-date="Sat, 19 Nov 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Wed, 19 Oct 2022 17:03:56 GMT
req-referer: https://citytala.ahlamontada.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 1746
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:12 GMT
age: 0
x-served-by: cache-iad-kiad7000102-IAD, cache-iad-kjyo7100161-IAD, cache-sna10737-LGB, cache-iad-kcgs7200099-IAD, cache-bma1682-BMA
x-cache: MISS, MISS, MISS, MISS, MISS
x-cache-hits: 0, 0, 0, 0, 0
x-timer: S1668603791.586019,VS0,VE1920
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_150%2Cw_180%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//pfjfm.com/content/3b4a1429-02f4-4553-b1c7-564502f92da6
x-vcl-time-ms: 1920
content-length: 3922
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=38efef01672343c0afd84057924c4f9e&zoneId=2308013&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=38efef01672343c0afd84057924c4f9e&zoneId=2308013&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash abe42593ef77ca0dacefdd10dbea8bdd
e487e811ae99aa3a9d0cc6392bf16e2f6155a7a8
42d594c00b1595ddea31ceb56c39811e350bf6a4058e3152987a2ef1d24fb347
GET /gid.js?pub=0&userId=38efef01672343c0afd84057924c4f9e&zoneId=2308013&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Cookie: ID=5d82df2f00164f71993299b777517875
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5d82df2f00164f71993299b777517875; expires=Thu, 16 Nov 2023 13:03:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:10 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5719
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yWXS1QXsufkE7lc3%2B2q%2Bkqp8OEdM2HRcWCcnpxwEOCrRXSE66EdZMpeIeXEIqwYYiFlK7oUbaYkQr7Y0Zr7E9yKluY8XBcZrbIhnYc%2FDgSiEtdEkk1nNRn%2FZ89BhpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd9d9ddfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
citytala.ahlamontada.com/serviceworker.js
200 OK 0 B URL HTTP/2 citytala.ahlamontada.com/serviceworker.js
IP
GET /serviceworker.js HTTP/1.1
Host: citytala.ahlamontada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: exadd=166861; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/javascript
last-modified: Thu, 25 Feb 2021 14:30:57 GMT
etag: W/"6037b4a1-b0d"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=citytala.ahlamontada.com
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=citytala.ahlamontada.com
IP
GET /syncframe?origin=publishertag&topUrl=citytala.ahlamontada.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=4a941dfc-3f70-4c79-bd2b-d4fa97257085; expires=Mon, 11 Dec 2023 13:03:08 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 581708
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.betgorebysson.club/apu.php?zoneid=3765907
200 OK 0 B URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=3765907
IP
Analyzer Verdict Alert fortinet Malware
GET /apu.php?zoneid=3765907 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/javascript
x-trace-id: 1bba2e680f0be4d5a5992dad12b7e9b5
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=5d82df2f00164f71993299b777517875; expires=Thu, 16 Nov 2023 13:03:09 GMT; path=/; secure; SameSite=None
oaidts=1668603789; expires=Thu, 16 Nov 2023 13:03:09 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 72793
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
stootsou.net/pfe/current/tag.min.js?z=2308013
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/tag.min.js?z=2308013
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/tag.min.js?z=2308013 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 14:20:39 GMT
etag: W/"636a65b7-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=4_YmRV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONXFUUEtqUGdocXkzblE1ZlFEQWslMkYxZg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=Q4Evl180M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONW8zVmVTWW1rJTJGYXNBMk8yaklNMGZjRA; expires=Mon, 11 Dec 2023 13:03:09 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 350796
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.com&sn=FirefoxSyncframe&so=0&topUrl=citytala.ahlamontada.com&info=Q4Evl180M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONW8zVmVTWW1rJTJGYXNBMk8yaklNMGZjRA&idsd=-1144122495,925897867&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.com&sn=FirefoxSyncframe&so=0&topUrl=citytala.ahlamontada.com&info=Q4Evl180M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONW8zVmVTWW1rJTJGYXNBMk8yaklNMGZjRA&idsd=-1144122495,925897867&cw=1&lsw=1
IP
GET /sid/json?origin=publishertag&domain=ahlamontada.com&sn=FirefoxSyncframe&so=0&topUrl=citytala.ahlamontada.com&info=Q4Evl180M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONW8zVmVTWW1rJTJGYXNBMk8yaklNMGZjRA&idsd=-1144122495,925897867&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1373924
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 66129
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
200 OK 0 B URL HTTP/2 connect.topicit.net/scripts/connect.js
IP
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 1146
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DEXkS9WPnCNXn736cBFxTzgrhmwnVyQAmne15v%2B3Ck1lvUBvfaPGwVokcFdfQmFfyF0Z1t6TCNUWGyAGMYSeeZYBa39oZDWjqOjAg2TsGLPEHkQoLZfuxdyqGqQWCK62a%2BDwOU5y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cd17b53b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/jquery/cookie/jquery.cookie.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/jquery/cookie/jquery.cookie.js
IP
GET /rs3/64/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:48 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 794180
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xua4s0prdSdCjjq39lQJ%2FIZuczBhECJ7EQ268824bdt08Qp1Mkc0hWNxMzN8WMEgLjd6UNzZV9dguz2iwPARnC%2FsJwcEjmyfhTTmXwflGKIRq7MP4jJ6Sh9YHTulWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cce499b0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7IvkCFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJDIYTla7hW8tM5ksa9HKNnILZ4uZWzbyjIy7xcI0GcyMQCKD4WS1W_jWMpPJshatbCO3cLaYuWUjz8i4WyxMk8HMChE3GQ6fg4Go6Hpb7A6n2fOGFTSdDp_rXq9xmp6nh9lhVxjNDrffbnqYHHaN3-0XXRaztehveHrsAAAAAPDw____DwEAAAAQAQAAACABAAAAQBFQ8W8hcAEAAACA8f___68B8MlB8J6z3x8AAAAAIAAAAAAkAAOrASUAH-crJ___________MQP0mTcy_____zcGPQAPPgAPQgAAABdDDV5bDD5nvbBEBbhFjAAAAAC2tFQ0jyZ1QmVR9f__328FcAUAEEAImBg0kqU7KPEWBgAAEDC2QA-L32922DV-t8v-_________83-z_7RhN5Gr9OCWEav1X4BAQDWfgEBANjUDQDgLQAu6AhaMRisTiF2w9liN5ptRrMDAAAAuPv____XA8nVZDLcjRYbm8O38Y0Ws9FkYnH4Jp7NyjaZTAzbQ2LuxoKr_VHsi7jJcPgcDERF19tidzjNnvtRtGS5W-5Wo8liNFouN7vhZjTY30AMVgOciMFyOZksJrvVaDXaDHej2WCBAjGYIEVLVsvlcrXZrFa70WI22CyHmw1StGo1G20Gw9VsMtvtVsPBcDkaIUVLlrvlbjWaLEaj5XKzG25GgyHC5Gw5WS08jrVgYfKtRZPZYC1xjBxukW83821GppHDMnKLXh_Tw7ayrQYjLwoGbOxF8rRIJ8LRcDTYTHybiWPmGLkWE-NuNZyMDDPjajdZGVcTsURzskgnssu-uZpMhrvRYmNz-Da-0WI2mkwsDt_Es1nZJpOJYd-cLSerhcexFixMvrVoMhusJY6Rwy3y7Wa-zcg0clhGbtHrY3rYVrbVYORvzGbD2WCzGy73jdlsOBtsdsPlvkNn-K4-Z6MzOJ54XN5u8CQ12RwGhctg8f4-F2kz2rgZVdqwxaK6FneuiVWnjZ2MnYPZoPANr4nh76d-XrvZ20FsMChiieAincj8ltfbb3r67W6F5SKWKE0X6UQvuixma9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10f9aUTRAcPqN3TUiIcxPU2_2LGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H0gpOzMzM1MT!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:11 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3408
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=Q4Evl180M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONW8zVmVTWW1rJTJGYXNBMk8yaklNMGZjRA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=61gBIl80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFRZXlBZ3FxMUFHZWY1ektGZTJONXIlMkZjWmdRUGlYUjNpMDAlMkI3T0tqYkNz; expires=Mon, 11 Dec 2023 13:03:09 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 290840
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/
x-crto-bundle: BAK3Kl9pR0xhJTJCMDBoejRzdWNMZVBJYlBtUnlwSmx4NHBENUxJUkFqUVVsYWdFREM2cXpSTGJjckpyYllqenBMb0syTkNDQjFPRkRIUmJRWmN1aUVPTmVvbnhnbyUyQm85Nk9GRGJaQ2dQREdoSHJFVm1wVmZCZkFCSHY3emlaQVpSMCUyRk9wTkY0NCUyRlJPekIlMkJJMFE1U2Jha0pXQnN3JTNEJTNE
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://citytala.ahlamontada.com
server-processing-duration-in-ticks: 8193342
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/embed/FA_Embed.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/embed/FA_Embed.js
IP
GET /rs3/64/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:53 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 794175
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWFZVhNw3YehoMhAyB7mKaxvXuDDwpH%2FC6DEdgPQ9b8DOaQs59qtYMsNcU9PgCxoPLJ359YnWoGX4UnF5h8tRuL6zOPOD4uk5ruNZ7Z%2FYh7N%2Bofk%2FmxYkTUEweI3Yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cce599c0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&encoded=1&uid=96925ac1-0ad7-4260-b1da-d77f73d4da2d-tucta6e650d&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1668603789315&tagid=&cntry=NO&platform=1&sesid=95228741cfa7c741642bba7b33e622b0&itemid=/t216-topic&viewid=1668603788718&geolat=&geoing=&deviceifa=&appid=&sd=v2_95228741cfa7c741642bba7b33e622b0_96925ac1-0ad7-4260-b1da-d77f73d4da2d-tucta6e650d_1668603789_1668603789_CNawjgYQ3pxDGK77pITIMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=8b6f8541ff4d68fa6adfc01e58cffc9e&appname=&cdb=&gdprApplies=true&rid=&sii=2748537971617230334&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=
200 OK 0 B URL HTTP/2 15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&encoded=1&uid=96925ac1-0ad7-4260-b1da-d77f73d4da2d-tucta6e650d&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1668603789315&tagid=&cntry=NO&platform=1&sesid=95228741cfa7c741642bba7b33e622b0&itemid=/t216-topic&viewid=1668603788718&geolat=&geoing=&deviceifa=&appid=&sd=v2_95228741cfa7c741642bba7b33e622b0_96925ac1-0ad7-4260-b1da-d77f73d4da2d-tucta6e650d_1668603789_1668603789_CNawjgYQ3pxDGK77pITIMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=8b6f8541ff4d68fa6adfc01e58cffc9e&appname=&cdb=&gdprApplies=true&rid=&sii=2748537971617230334&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=
IP
GET /tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fcitytala.ahlamontada.com%2Ft216-topic&encoded=1&uid=96925ac1-0ad7-4260-b1da-d77f73d4da2d-tucta6e650d&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1668603789315&tagid=&cntry=NO&platform=1&sesid=95228741cfa7c741642bba7b33e622b0&itemid=/t216-topic&viewid=1668603788718&geolat=&geoing=&deviceifa=&appid=&sd=v2_95228741cfa7c741642bba7b33e622b0_96925ac1-0ad7-4260-b1da-d77f73d4da2d-tucta6e650d_1668603789_1668603789_CNawjgYQ3pxDGK77pITIMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=8b6f8541ff4d68fa6adfc01e58cffc9e&appname=&cdb=&gdprApplies=true&rid=&sii=2748537971617230334&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv= HTTP/1.1
Host: 15.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://citytala.ahlamontada.com
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
machineid: 1424
link: <https://am-wf.taboola.com>; rel=preconnect
xvid-debug: mrmr - :
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://citytala.ahlamontada.com
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Wed, 16 Nov 2022 13:03:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1682-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668603790.098596,VS0,VE33
vary: Accept-Encoding
X-Firefox-Spdy: h2
citytala.ahlamontada.com/?utm_source=pwa
200 OK 0 B URL HTTP/2 citytala.ahlamontada.com/?utm_source=pwa
IP
GET /?utm_source=pwa HTTP/1.1
Host: citytala.ahlamontada.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://citytala.ahlamontada.com/serviceworker.js
Connection: keep-alive
Cookie: exadd=166861; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:09 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Wed, 16 Nov 2022 00:00:00 GMT
last-modified: Wed, 16 Nov 2022 13:03:09 GMT
vary: User-Agent
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&excid=22&docw=0&cijs=1&nlb=true
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7lKECFgNMUAwXGif1yQRMUAwXGif1yQUAAAAGBuIHJOZcbXarkW0tsgwna9Fis1srVyOHW7LZbEwW08K4Mg6GQGIj52CxMi3WstlytBYNJsa1cLNyuDXGiXM22I1MnolxCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjesoOl0-Fz3eo3T9Dw9zA67wmh2uP1208PksGv8br_ospitRX_D02MHAAAAgAcAq7dMiB9AAIAIAAAAAAkAAAAAioCKfwuBCwAAAAAMAAOSCw2ATw6C95z9_gAAaNgCAQAQwCABGFgNKAH4OF85AQAAAAAAAABg-f___48B2MMakwEY2d_pAXjwAXggKoAsYgQAAACwpaWieTSpEyqLKgAAgnQrgCsAgABCwMQhjjAAAICAsQV6WPx-s8Ou8btdBgAAAAAAAABg9n_2jyb0NnqdFsQyeq32CwgAsPYLCADApm4AAG8BcEFH0IrBYHUKsRvOFrvRbDOaHQAAAMDd____vx5IriaT4W602Ngcvo1vtJiNJhOLwzfxbFa2yWRi2B4SczcWXO2PYp-HsMx-30HE8nxNf8NBxre83gZR0fW22B1Os-d-FC1Z7pa71WiyGI2Wy81uuBkN9jcQg9UAJ2KwXE4mi8luNVqNNsPdaDZYoEAMJkjRktVyuVxtNqvVbrSYDTbL4WaDFK1azUabwXA1m8x2u9VwMFyORkjRkuVuuVuNJovRaLnc7Iab0WCIMDlbTlYLj2MtWJh8a9FkNlhLHCOHW-TbzXybkWnksIzcotfH9LCtbKvByIuCARt7EVykE5nf8nr7TU-_3a2wXMQSzckincgu--ZqMhnuRouNzeHb-EaL2WgysTh8E89mZZtMJoZ9c7acrBYex1qwMPnWoslssJY4Rg63yLeb-TYj08hhGblFr4_pYVvZVoORvzGbDWeDzW643Ddms-FssNkNl_sOneG7-pyNzuB44nF5u8GT1GRzGBQug8X7-1ykzWjjZlRpwxaL6lrcuSZWnTZ2MnYOZoPCN7wmhr-f-nntZm8HscGgiCWC00U6Eb2Mp4tYInlapBPhxDYzrkaLmc00sg1nDtvCZPMYFivXcGOzeZwri1iiNF2kE73ospitRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzl-7PmrIJgsNn9K4JCXFugnq7f3Hjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DKWVnZmZmagI!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:10 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3401
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/jquery/marquee/jquery.marquee.min.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/jquery/marquee/jquery.marquee.min.js
IP
GET /rs3/64/frm/jquery/marquee/jquery.marquee.min.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/x-javascript
last-modified: Tue, 27 Aug 2019 14:00:14 GMT
expires: Tue, 07 Nov 2023 08:27:36 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
cf-cache-status: HIT
age: 794132
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nth%2Fyhq47xe7EEa0nvCL1L6IPJwO6GLgzjAOD5yzrDRJCvJ7Yma6geNmyMH%2BjRvvaNs3Aza1OnC4DyohtqtI6yNhI5VRrYdCxjEsQoZ4RTzGYbxXE3jkj9MtxqFCsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76b06cce69d50b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
200 OK 0 B URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Fri, 16 Dec 2022 13:03:08 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: D9DC:101F2:8442B2:88431A:6373E40D
vary: Accept-Encoding
x-fastly-request-id: ff237ed923f08253ee470932b745a2c1d2faa8f6
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://citytala.ahlamontada.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 13:03:08 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-1e444"
expires: Thu, 17 Nov 2022 13:03:08 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
188.165.2.137
151.101.85.44
23.111.9.57
139.45.195.8
104.18.21.226
3.123.171.127
141.226.228.48
185.106.33.48
34.241.86.223
94.23.76.111
23.36.76.249