magedyakot6.rigala.net/t20-topic
301 Moved Permanently 0 B URL HTTP/1.1 magedyakot6.rigala.net/t20-topic
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t20-topic HTTP/1.1
Host: magedyakot6.rigala.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 22 Nov 2022 14:19:02 GMT
Content-Length: 0
Location: https://magedyakot6.rigala.net/t20-topic
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13455
Expires: Tue, 22 Nov 2022 18:03:17 GMT
Date: Tue, 22 Nov 2022 14:19:02 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b59d95402dfb464c176610284ba13f65
1a6c62fb0d48654dd204b66161bb03fefe60f71a
40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5845
Cache-Control: max-age=164978
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 12:08:40 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 14:09:19 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 583
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8a6c553d89cb6fd1de4787fee2a0e0dc
b974e022ea8675c0a09f58864cc99df05b5b1241
a62ecedcb0953814f982237818a3d902fdca501f82b675629d28b5d476e0fbfa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A62ECEDCB0953814F982237818A3D902FDCA501F82B675629D28B5D476E0FBFA"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8205
Expires: Tue, 22 Nov 2022 16:35:47 GMT
Date: Tue, 22 Nov 2022 14:19:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rP9rcmSJ36s/i4ENB8FLKlGtvzoeD9tl5cnqRRTeh6KZ009+B3pw6z08Jnsbtj1dcJutTts9dk8=
x-amz-request-id: RM7AR08TMXMS8JM8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 13:42:35 GMT
age: 2187
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 159441b0c412df077d8b6b6fbd12740a
08eb014f877c761f711e0a51aebe3a7e9a02e7a6
1f2f7081dc7aa10db8035e696cd6d2a85075cb0549fd925a685462e474573dcb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F2F7081DC7AA10DB8035E696CD6D2A85075CB0549FD925A685462E474573DCB"
Last-Modified: Sun, 20 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5769
Expires: Tue, 22 Nov 2022 15:55:11 GMT
Date: Tue, 22 Nov 2022 14:19:02 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 832d74903c45165395bdf4347c0d32f7
347f30c9b1e3ed5a56a837eacea5d6da6a54c6cb
7c1d4541f335c7f8377decc1ac30aee4570508072aada25476c1b3629ab05b2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6335
Cache-Control: max-age=147814
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637c5ffd-116"
Expires: Thu, 24 Nov 2022 07:22:36 GMT
Last-Modified: Tue, 22 Nov 2022 05:37:01 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 832d74903c45165395bdf4347c0d32f7
347f30c9b1e3ed5a56a837eacea5d6da6a54c6cb
7c1d4541f335c7f8377decc1ac30aee4570508072aada25476c1b3629ab05b2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6335
Cache-Control: max-age=147814
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637c5ffd-116"
Expires: Thu, 24 Nov 2022 07:22:36 GMT
Last-Modified: Tue, 22 Nov 2022 05:37:01 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 832d74903c45165395bdf4347c0d32f7
347f30c9b1e3ed5a56a837eacea5d6da6a54c6cb
7c1d4541f335c7f8377decc1ac30aee4570508072aada25476c1b3629ab05b2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6335
Cache-Control: max-age=147814
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637c5ffd-116"
Expires: Thu, 24 Nov 2022 07:22:36 GMT
Last-Modified: Tue, 22 Nov 2022 05:37:01 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 832d74903c45165395bdf4347c0d32f7
347f30c9b1e3ed5a56a837eacea5d6da6a54c6cb
7c1d4541f335c7f8377decc1ac30aee4570508072aada25476c1b3629ab05b2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6335
Cache-Control: max-age=147814
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637c5ffd-116"
Expires: Thu, 24 Nov 2022 07:22:36 GMT
Last-Modified: Tue, 22 Nov 2022 05:37:01 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
magedyakot6.rigala.net/0-rtl.css
200 OK 60 kB URL HTTP/2 magedyakot6.rigala.net/0-rtl.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash ad8059a59d0b8a8c918c48bbb17109b1
54b68a9bca235c1fa9332a097d52c726a6bebd17
0db76a60358383b682f497d55ec20ee9504857fcebe352f3398bcddcee3c624b
GET /0-rtl.css HTTP/1.1
Host: magedyakot6.rigala.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/t20-topic
Cookie: exadd=166914
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: text/css
content-length: 60231
last-modified: Tue, 22 Nov 2022 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: HIT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 72d50acad831beb6384250b4be217004
4c63b5d7120df90dce65d1d9a449e0779916cd86
948ea04f802c71a04d3a7f3e5a056b195b99d7e4b346b1b2e8afb53fd537b642
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5648
Cache-Control: max-age=126622
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637c0fe4-1d7"
Expires: Thu, 24 Nov 2022 01:29:24 GMT
Last-Modified: Mon, 21 Nov 2022 23:55:16 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 312 B IP
Hash 6fc14b649b372e17262ac993a01b6e44
4866a8e009319378be142a25018223d7b0ef9bd8
31a96724f512a3cfec476ca9abfa1a5a6677668c4711a3063ce2380495771965
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3745
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Last-Modified: Tue, 22 Nov 2022 13:16:37 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 14:08:53 GMT
cache-control: public,max-age=3600
age: 609
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 832d74903c45165395bdf4347c0d32f7
347f30c9b1e3ed5a56a837eacea5d6da6a54c6cb
7c1d4541f335c7f8377decc1ac30aee4570508072aada25476c1b3629ab05b2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6335
Cache-Control: max-age=147814
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Etag: "637c5ffd-116"
Expires: Thu, 24 Nov 2022 07:22:36 GMT
Last-Modified: Tue, 22 Nov 2022 05:37:01 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Nov 2022 21:15:14 GMT
expires: Sat, 18 Nov 2023 21:15:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 320628
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 459d5ef006defa58c32fd9405316dc4f
8f9d44c56340827251dbdc7c140a9142d8355827
81044e93af528b4a6af5e62430ae28eecfcca906b861f7f841ab331ea5a5e745
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1327
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:02 GMT
Last-Modified: Tue, 22 Nov 2022 13:56:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 727
connect.facebook.net/ar_AR/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/ar_AR/all.js
IP
File type ASCII text, with very long lines (1957)
Hash 2c9efed79ddc2f2aa9d8995576e90d98
f1dc0715f6a8b23771daa75791f2d57e21957dbf
3c82fee940d57d75335bc26d9e34beb0c43a1d1efcd737ee8d8c22d558b0aa14
GET /ar_AR/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: a6f2e4405b73f86e6ec17cc4a43964e8
etag: "286293dce373faea0ad9448396e4bc8a"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 22 Nov 2022 14:28:44 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: LJ7+153cLyqp2JlVdukNmA==
x-fb-debug: 7VCkjAaMnsjlu/+zHzJlWJAUZqDgTlzqXJdJbhBoBB3auLHWpMuOsuJdT2K1rmYzp6FTVigdBAvvwOAqP+yZzA==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Tue, 22 Nov 2022 14:19:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=%20UA-39969191-1
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=%20UA-39969191-1
IP
File type ASCII text, with very long lines (1921)
Hash 7caa2a4573a1f923c5322e9a93426328
b3e29011bcd91428bdd2badddf718b323925107d
e369cd3d9b066b433487c25d32dd7268b031b648ce879acd02241a7b6cac2208
GET /gtag/js?id=%20UA-39969191-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Nov 2022 14:19:02 GMT
expires: Tue, 22 Nov 2022 14:19:02 GMT
cache-control: private, max-age=900
last-modified: Tue, 22 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37498
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1921)
Hash 17fd5d1a93292b067f3e803a31b27408
d0e94cff5ecf96ed56b80c25673e03bc6ac559d7
d95b3a943b130377012cddc3f51da4ccbcdadd7d18f32a7388e9ebd4e2c9cac4
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Nov 2022 14:19:03 GMT
expires: Tue, 22 Nov 2022 14:19:03 GMT
cache-control: private, max-age=900
last-modified: Tue, 22 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 72d50acad831beb6384250b4be217004
4c63b5d7120df90dce65d1d9a449e0779916cd86
948ea04f802c71a04d3a7f3e5a056b195b99d7e4b346b1b2e8afb53fd537b642
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3137
Cache-Control: max-age=124110
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637c0fe4-1d7"
Expires: Thu, 24 Nov 2022 00:47:33 GMT
Last-Modified: Mon, 21 Nov 2022 23:55:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eb526d16fc4a304286cf261dc5d8abea
0aed946d28abc21cb11657e6f864b561a0c68fba
551520b0344d58c1b4ddc9dfb452da2acf43080871a7037f4530eec48fb86362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 8a181d95550cfdf3b1fc4deb71631e40
37866f7293c41fbfb817e321754cae5c5bf59f93
6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 867
Cache-Control: max-age=154939
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637c912f-1d7"
Expires: Thu, 24 Nov 2022 09:21:22 GMT
Last-Modified: Tue, 22 Nov 2022 09:06:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d19218e245ef796f2fb4ed26ec2b854
3bce3908a802ec2d4e4f98ad2ed9a66e5102bde3
e78b2d7b358a41d8afa03c85667848829e7503fa8fdaa7683385996a23023ccf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2469
Cache-Control: max-age=116962
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637bf694-117"
Expires: Wed, 23 Nov 2022 22:48:25 GMT
Last-Modified: Mon, 21 Nov 2022 22:07:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d19218e245ef796f2fb4ed26ec2b854
3bce3908a802ec2d4e4f98ad2ed9a66e5102bde3
e78b2d7b358a41d8afa03c85667848829e7503fa8fdaa7683385996a23023ccf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5370
Cache-Control: max-age=119863
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637bf694-117"
Expires: Wed, 23 Nov 2022 23:36:46 GMT
Last-Modified: Mon, 21 Nov 2022 22:07:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d19218e245ef796f2fb4ed26ec2b854
3bce3908a802ec2d4e4f98ad2ed9a66e5102bde3
e78b2d7b358a41d8afa03c85667848829e7503fa8fdaa7683385996a23023ccf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2469
Cache-Control: max-age=116962
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637bf694-117"
Expires: Wed, 23 Nov 2022 22:48:25 GMT
Last-Modified: Mon, 21 Nov 2022 22:07:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d19218e245ef796f2fb4ed26ec2b854
3bce3908a802ec2d4e4f98ad2ed9a66e5102bde3
e78b2d7b358a41d8afa03c85667848829e7503fa8fdaa7683385996a23023ccf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2469
Cache-Control: max-age=116962
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637bf694-117"
Expires: Wed, 23 Nov 2022 22:48:25 GMT
Last-Modified: Mon, 21 Nov 2022 22:07:16 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 2d19218e245ef796f2fb4ed26ec2b854
3bce3908a802ec2d4e4f98ad2ed9a66e5102bde3
e78b2d7b358a41d8afa03c85667848829e7503fa8fdaa7683385996a23023ccf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5075
Cache-Control: max-age=119568
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637bf694-117"
Expires: Wed, 23 Nov 2022 23:31:51 GMT
Last-Modified: Mon, 21 Nov 2022 22:07:16 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 279
static.criteo.net/js/ld/publishertag.js
200 OK 40 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
Hash 721bdfcc75e7a28d8f0b677a02ac97b2
21b4c25faa0dc55f3447ef79e1b2c76a97953aad
73ac3de8b2246b7fbf58aeeb2cac0c84ad1261474c914e4297a706bc1df39b06
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-1e444"
expires: Wed, 23 Nov 2022 14:19:03 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
2img.net/s/t/17/89/31/i_icon_mini_index.gif
200 OK 2.9 kB URL HTTP/2 2img.net/s/t/17/89/31/i_icon_mini_index.gif
IP
File type GIF image data, version 89a, 86 x 100\012- data
Hash ec0ba4a39ddd76dddbed288790757eb0
25d12c4c39d11f44d96e8e4e9951c7b47dc01f2d
2a2e1ce9c2cdb485a608408201b99c95ced5e08d707a121cd6f287b097c37555
GET /s/t/17/89/31/i_icon_mini_index.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 2949
last-modified: Fri, 07 Oct 2011 23:07:45 GMT
etag: "4e8f8641-b85"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 160728
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RVHkfSHhLdkGEIMD9%2BoG5OrXBW99%2F4Vu272eV5y3EjmC9opnAJhkQc7CIF3gtBR0Zxt4W48sUZ9j1z%2B0%2F9WNarmAUkE%2B3deQL1AJzgOiZ3NMNpRcpB3hPkVgpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40da0006d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/banner/ar/banner5.png
200 OK 2.7 kB URL HTTP/2 2img.net/i/fa/banner/ar/banner5.png
IP
File type PNG image data, 113 x 50, 8-bit colormap, non-interlaced\012- data
Hash 86c5406474dd4c9056f73e0dd59fc44c
96ee0ab7d092ae5d7be8839e922157040e31f362
357295512f14a68f281d478951eddc401bb6fe6249a88e4a0a637027caea1da6
GET /i/fa/banner/ar/banner5.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 2705
last-modified: Mon, 16 May 2016 10:55:01 GMT
etag: "5739a705-a91"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999368
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3250W%2F2oBSm%2FXOOmhuR2hxWU8bfWVD0DD1kkcWBr%2BTQh4BOwUjiMvBX2XT2%2FOKyBHi7t7TNRc82j3JQGIeu7%2FNs%2BFwBD6l3ygf%2BZizQcXrujunpU1BGEUkj3wA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40ea0606d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver/corners_right.gif
200 OK 54 B URL HTTP/2 2img.net/i/fa/prosilver/corners_right.gif
IP
File type GIF image data, version 89a, 6 x 12\012- data
Hash 130c94b5382c071dcf09c5f50f8e7ab1
d391f8020a97bd8d5c350d68585765be61bfd27a
e004ee77cdd0e83653c2bd53ed833fe6a25d73e2371ece3d081f1c2b16de2478
GET /i/fa/prosilver/corners_right.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 54
last-modified: Mon, 16 May 2016 11:00:36 GMT
etag: "5739a854-36"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999602
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tKgir8W6k0O2zy0drwaAClJtbvSLTigEIP9OyimiLgfpbiUE%2FkHG7OgfFbT82bpGLyqVpNw0Wf4J25VrHSJAFHEYpBPO2qQl%2Bxw1vv9grLr6PAsN7ldS%2Bcrqcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40d9ff06d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/icon_mini_search.gif
200 OK 238 B URL HTTP/2 2img.net/i/fa/icon_mini_search.gif
IP
File type GIF image data, version 89a, 12 x 13\012- data
Hash 69ac99a266d5032986805506ed750bdd
a800b0f6f44e80d71f75808bd4324f866e6c54b1
605183a8594eb65a3db95a7735ad7adac28b7b9814a70334837fe630bdd8d5f4
GET /i/fa/icon_mini_search.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 238
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-ee"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999480
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UftbAwOCyLrETng%2B7jECUVr74gS%2BazFZmz0DFna9PXzGE9FxXhvo4L9e8Xz9rw32W9EjQ1AKQ%2FH02AnOGOcYrvzzb%2FolIY%2BnMClfJCu6IQ0lBBuYh%2BTdCVv7aw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40d9fc06d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver/bg_header.gif
200 OK 682 B URL HTTP/2 2img.net/i/fa/prosilver/bg_header.gif
IP
File type GIF image data, version 87a, 5 x 92\012- data
Hash 9407101e2e92da510d9faa9ed4382e29
fa7c0bfff9372246a752ffc96483594127b5ddfa
6cdfe222dd349c5abe81b9b8c535d16c1c5d6b04950651558ca41d4078e30d00
GET /i/fa/prosilver/bg_header.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 682
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2aa"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999530
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vgiDzU4mKtqCIgRoYv8%2BBTlvYhw2MdTRV%2BFQplrsaTahk5%2BjRijgD42cNZnzVA2K5FkI5RRaaBu5B538TYqovmS%2F70JBXqQUntfObvyiqBTzd6OGouh4OJIqaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40ea0306d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/optimisation_fdf/common/facebook_boton.png
200 OK 2.8 kB URL HTTP/2 2img.net/i/fa/optimisation_fdf/common/facebook_boton.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash cecafd317fc82d9a497bd303054a35e0
a8bda041e9046d72c1edcd7e985bb6d7f2d1bfd2
7804c17acb48bccbd499ff10e138fcb168efcf3c0058a63ea9e141be1d4668be
GET /i/fa/optimisation_fdf/common/facebook_boton.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 2834
last-modified: Mon, 16 May 2016 11:00:17 GMT
etag: "5739a841-b12"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3998569
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cNvo1M8cPgjo5WMn44lqxsC5QnlvWzXhRkgq4XC1rjcyDyQajaRo7BTC%2BC4n1ZJzpErJ5eeQ424hKBruVOihpyVIxQuix68pU4VIGFgwxk3bSrxeTg2DwvxjkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40ea0706d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/optimisation_fdf/common/twitter.png
200 OK 756 B URL HTTP/2 2img.net/i/fa/optimisation_fdf/common/twitter.png
IP
File type PNG image data, 41 x 42, 8-bit colormap, non-interlaced\012- data
Hash 24865fdd87c3006120c4d945757430d4
8a157851ce37eb21b4fcfaf1a4ad762b0007b31c
6dc03b5f65888a39296b2a01af0826c121aa73279123d5eb3fbcdf5c29c411ac
GET /i/fa/optimisation_fdf/common/twitter.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 756
last-modified: Wed, 22 Aug 2018 13:46:18 GMT
etag: "5b7d692a-2f4"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3998569
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fdc5wfKLsZsjTEgCJj%2BQRYZlzoh7WWj0lpt6a%2Fgx5TW02Lbq0eHUvNi4eYXJolQcmUa0fKG2cmd6%2B4ry84U6ijSWTOWhXvIgmKYiCTISnUcBCp3gFKKhN7mOGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa2406d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/17/89/31/i_icon_mini_gallery.png
200 OK 2.8 kB URL HTTP/2 2img.net/s/t/17/89/31/i_icon_mini_gallery.png
IP
File type PNG image data, 85 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 0c6b005e33d57b7ed63bb2551e913aa4
1465d20531ade181a656c807f491c271de3f0296
e703f0f23ed3c3853ffab18b0c3f241b8e2e8524018e686df331916c14a16775
GET /s/t/17/89/31/i_icon_mini_gallery.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 2779
last-modified: Fri, 07 Oct 2011 23:07:45 GMT
etag: "4e8f8641-adb"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 61938
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VtHX3ErtXIYq5jVZZZ4b0p7JL02y7TofLgTViuoAlMHdbvWC8%2FVTEjBF0ygLqYoWkmmIxhL387TI%2BzLYYwrYNWyDrqlevG16wdGPtPtH%2B0zQs6DC3aFB6aBopw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa3606d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver/icon_contact_www.gif
200 OK 347 B URL HTTP/2 2img.net/i/fa/prosilver/icon_contact_www.gif
IP
File type GIF image data, version 89a, 20 x 20\012- data
Hash c338e10bf84bc5fa3152835f5b66c030
e73f388dda6f87b9bbabf962b36caedcadb72a29
c935da35fc40d1f900c7f05926db8dbd26daceabf9e61a6744f3ca1eb3e91cf7
GET /i/fa/prosilver/icon_contact_www.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 347
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-15b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999238
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BzIqtjRxCW3Eo2WFfUxMAio24%2FU6YUhUiXtu2fzGa5K6XKyx2ZV4ekSO0oUQ23jNcMLC5BBaIIDdnQaZ9QE9Gjuic9BJKTgvurX68EPe%2FGX%2Fnr3tlgq5MUesXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa3206d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/empty.gif
200 OK 42 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /i/fa/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 42
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-2a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999602
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VmbzKojT6km4jsK8P1fQzpvyuN2F5rwgltkFuPOrIbEOjVn%2Fhp9LwBMnBmK6Ku3IgDHjTmIE%2FphAfd%2FTilraOUmi5STcNkgi8CJ6keTaQF7nvFbNHWrdratQrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40ea0206d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/17/89/31/i_icon_mini_register.gif
200 OK 9.9 kB URL HTTP/2 2img.net/s/t/17/89/31/i_icon_mini_register.gif
IP
File type GIF image data, version 89a, 86 x 100\012- data
Hash 5fb20965becfc429bdedad4a7b71ce8f
47a8412c44c31591952dc5e855e15ea6817467ef
0e076bc717542cb6d278dac9ce34817ba51cbbd39fd3f9c3a8632eb71d383392
GET /s/t/17/89/31/i_icon_mini_register.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 9883
last-modified: Fri, 07 Oct 2011 23:07:44 GMT
etag: "4e8f8640-269b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 160720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KGS4ud6n2Mme6lmr5FpD7COD3XbpOdCgncrPpuZzBhAlUg%2BwDydSp9yKiBQucYvV4AV7Xb2HonY0bsuHtomhgmqyEu8rXGvBGgOXzNSlkaoKo4XhDCuIQJyZwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa2e06d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/invision/pp-blank-thumb.png
200 OK 9.6 kB URL HTTP/2 2img.net/i/fa/invision/pp-blank-thumb.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash db01076614dffc62222461ab141b990c
d9c4028723700b846dfbe902c19d9f78491fc65b
96ecd9f62a332fa2e57b75b308c1a6756d3e549c4d4dcdd0761af12431df59db
GET /i/fa/invision/pp-blank-thumb.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 9554
last-modified: Mon, 16 May 2016 10:59:31 GMT
etag: "5739a813-2552"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999465
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ywjb1V3l3s35Ub0M1r71IyhBQT929xoqbILHmiNIdDgyyFKiey%2BPf3bIbPN9GM3bcNTy8UvFs1R30lnd5HzVi17b9xkR0cMLDVSxvopWzw2Fockwz7tnVOmRpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c410a3f06d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/17/89/31/i_icon_mini_portal.gif
200 OK 2.9 kB URL HTTP/2 2img.net/s/t/17/89/31/i_icon_mini_portal.gif
IP
File type GIF image data, version 89a, 85 x 100\012- data
Hash 419de91e3b9f85f996e10ace51228114
b5c154832ba0a5da040ee5ebe9078860bc3596fb
c5e5e2d32c4030e8ecfbb3d4c39ab755e25935d4f6d033b3ac5e980a7a5be3a3
GET /s/t/17/89/31/i_icon_mini_portal.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 2937
last-modified: Fri, 07 Oct 2011 23:07:45 GMT
etag: "4e8f8641-b79"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 160720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MVnE3aCRq77mjG3moiIMnKqNlL%2FxtlNuvBf057M%2BbdMSSwIzxhZABLatgrXZXGJpWMXPDknC%2FKs5uyd57m3LaStqDqBDFpfMnkvVIJpxOUR%2Bd8XHA80jkLvy%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa3406d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/sprite_icons.png
200 OK 1.5 kB URL HTTP/2 2img.net/i/fa/sprite_icons.png
IP
File type PNG image data, 1395 x 12, 8-bit colormap, non-interlaced\012- data
Hash 6c31830c94fd2987aab8ed4af1e6b756
9bb52d402fd3cd4a0515c54b5061b655fdabfd96
b621467f74054e2999a7e213edf26895f9639e255f7c11b2047509fd0879f6c8
GET /i/fa/sprite_icons.png HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 1459
last-modified: Mon, 16 May 2016 11:01:49 GMT
etag: "5739a89d-5b3"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999601
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QMkdepIeQ55dDR3b9mOWh8uW%2FdwH%2BwaQOjFrm7ksLCejV%2BGYM9oVd0zWH8cOQwhy1FY8QkeiO7stZQjU%2B4slwkmR7s50cX6VbdeGGf8E8W6NmPfyPDTlppwFIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c410a4106d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/empty.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999609
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EaNcMOO8sMEBVcmhjfErz0wOvly17gwn4DvmhT%2FaUCOmDMRG9Qb%2BJ9RY46PNxMGqjrVkKJSME8nyVLXmK0rpN0pyyrpT7HhvMK4uloUd5iGBW8FFtlm2GJ1rgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa2806d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/fa/prosilver/bg_button.gif
200 OK 174 B URL HTTP/2 2img.net/i/fa/prosilver/bg_button.gif
IP
File type GIF image data, version 87a, 4 x 24\012- data
Hash 1f4cb2a1974e0f3cc6b739707fc5713c
f313497e6aba95854a44462b5e35a024404b8989
4e8a79a702c74305fd3a2a0e10d8fadc1752d72ea159b0a4b25825acf3ef42ad
GET /i/fa/prosilver/bg_button.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 174
last-modified: Sat, 01 Jan 2005 00:00:00 GMT
etag: "41d5e800-ae"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3999530
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Fl41He13%2Fs8LvkKC%2BK8pwa0gUl7gSEbQhA31y6JsUX4v%2BcJlBSTE%2FH3QVtKnx4iVq7jJDxh9wxXkBYtk1KgzVBE8L5RrdyK97eZy0gjB%2Ft7cnYRqiWjYfq2QA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa2d06d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/17/89/31/i_icon_mini_login.gif
200 OK 2.8 kB URL HTTP/2 2img.net/s/t/17/89/31/i_icon_mini_login.gif
IP
File type GIF image data, version 89a, 86 x 100\012- data
Hash 59ba63cc9463beb5260a8f2d8a567436
2e2674590a19ee37328db659b6355752ceb9bf0b
5d3f096e76d4bdd68b0261451bb6154b3d954f7f87bade9ab6cf171bdf0a8e74
GET /s/t/17/89/31/i_icon_mini_login.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/gif
content-length: 2801
last-modified: Fri, 07 Oct 2011 23:07:44 GMT
etag: "4e8f8640-af1"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 61938
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DAeqZPfI6oIa4f%2BYOwSnAlpjYd4C1%2BT1LDh4ySnzi38cULzL%2FD1fiaJkJfkM1z8UrBXfJl0%2FWs1UjbAME2eJxKXfW87CIVs4Iqj8H43cS3G2l2KenCqO%2FfEZXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c40fa3006d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 000179ac3c073724444e3b68d680e09e
63d2c44dc0daeaa6f2a4b6cb1ff3d9819cd04b27
7f3c8029ae827b0874e4bce3ad1fb00fb24b1e4104e55439b1064fa101378604
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7F3C8029AE827B0874E4BCE3AD1FB00FB24B1E4104E55439B1064FA101378604"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13027
Expires: Tue, 22 Nov 2022 17:56:10 GMT
Date: Tue, 22 Nov 2022 14:19:03 GMT
Connection: keep-alive
illiweb.com/rs3/64/frm/embed/FA_Embed.js
200 OK 1.5 kB URL HTTP/2 illiweb.com/rs3/64/frm/embed/FA_Embed.js
IP
File type ASCII text, with no line terminators
Hash 74a932d9275afcf94d77ee61ae62a228
3938a3e91b0cd14947577f712775796ace4610a6
1df9b0684c5f997b63490ffbd9e1ea83a3099c0b781b2c20da850214fc152532
GET /rs3/64/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:53 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1317129
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i5had5xqAvgMhbjiisXv88%2Feh%2BlU1xcsXL3rBRi5735RrQOhASNJoyaKKOkAZDOQAlLcqBuFr1YMAhBhFlCXhc%2FsV5y7K07aTlnj9jtJ9cwn%2Fj90b%2BdY%2FbwLqwZ%2FUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c3f4a5fb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 0664ff3c470ba37f9ad2b4f7a5308cfb
9077fb0b0ad9e449b5d7f222ffb5c0f40256c123
d3143813e3b75c9c319ebb0641a5004615012c664d2c52901026a8f85ad5e323
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1940
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Last-Modified: Tue, 22 Nov 2022 13:46:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2rrm0179kl38fUVQv3FK/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kqdBSDA9VAJPAholzhQYfV+kKKg=
2img.net/u/1517/30/70/52/avatars/1-31.jpg
200 OK 6.8 kB URL HTTP/2 2img.net/u/1517/30/70/52/avatars/1-31.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "ACD Systems Digital Imaging", Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, software=ACD Systems Digital Imaging, datetime=2005:01:31 00:27:52], baseline, precision 8, 150x97, components 3\012- data
Hash 3b434d12c6d27a38692e5a71a62f07bd
2b1d56ac8b929041553eb9ed25152819fc560eb3
9d50ca31688f74014c48f97ae61e279f908dc5bbe06c4efb90693d5d7ed409a6
GET /u/1517/30/70/52/avatars/1-31.jpg HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/jpeg
content-length: 6777
last-modified: Fri, 14 Apr 2017 23:36:37 GMT
etag: "58f15d05-1a79"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z3I%2BJ0SeVr%2FJfn6MZlE5k1DnKcOKINtgOxTKHjo7d89966WIt7OX4gz51jBv%2BNji6EW2NTm4DZABbTyNZ%2FrEkgKED9R8OQA1WnUcaLqMe0coCOSpclcpvBmf%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c410a3e06d1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/jquery/toolbar/FAToolbar.js
200 OK 12 kB URL HTTP/2 illiweb.com/rs3/64/frm/jquery/toolbar/FAToolbar.js
IP
File type ASCII text, with very long lines (25563), with no line terminators
Hash ff5ff5fad22c7290da268030e054dbed
270000840aff06fd0d0cee2a8095724329c74547
320cc39c72b326960788d197d50419e3492a1f48c56bb9fceb3e0f4a120c3b8f
GET /rs3/64/frm/jquery/toolbar/FAToolbar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:58 GMT
last-modified: Wed, 17 Aug 2022 08:52:02 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1317123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=At4SBYN3aDPx3Ea4veGVIi6%2Fv%2FMFdAzsFwB2YQf99MSXS6UitCpBRWuEi3mKPeH%2FnfClKtM%2FEtKVGyGuB9z5NQ5U0Ha3Foya8DSQykciZSzmignyf2%2BDHuHNGKIltQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c3f7aadb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash ae8d32915bda4a19345a548f8fcf6b6a
9c26ccca35a0c77c3c21767ad035efb2b966e3b4
824ef283079c1fcb276b71d6281dcd39d6f98874617c6178aebfdb6da200da11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1923
Cache-Control: max-age=100582
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637bb8ba-13a"
Expires: Wed, 23 Nov 2022 18:15:25 GMT
Last-Modified: Mon, 21 Nov 2022 17:43:22 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 314
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 28567
date: Wed, 16 Nov 2022 00:22:48 GMT
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
etag: "072eaf64a771815874455704fca9301b"
cache-control: public, max-age=604800
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VIlAYnkc-Fs7s4s47ZlH5MbZT5ECXLxR2MtpalgDzHpGTI5aC8z7ww==
age: 568576
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 22 Nov 2022 12:41:08 GMT
expires: Tue, 22 Nov 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 5875
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=k4AnUF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTFXYVdOQm5Ed0ZTaTdEcCUyRnlRWjlodQ; expires=Sun, 17 Dec 2023 14:19:03 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 240544
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/forumotion-ar/loader.js
200 OK 26 kB URL HTTP/2 cdn.taboola.com/libtrc/forumotion-ar/loader.js
IP
File type Unicode text, UTF-8 text, with very long lines (65161)
Hash 9ab7ab090e0887c6174dbca4a7fc58ff
2b698626564ccf5cdc0616768a41611cdd8bc299
feeceb5960b6e5c9fae8eb8d52644f4a9099db0eda8c4ae636ef2327d75f040e
GET /libtrc/forumotion-ar/loader.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
etag: "c0bec8e139903e8c15b8459d3feceeea44a55d54"
last-modified: Tue, 22 Nov 2022 14:05:08 UTC
x-amz-id-2: HeJH6jn2SyxXTfOu5Rw4gemspT222zshiyODDn/BJmUZY/i6m0Gmjef84AmEaaP6oKfedCbjE28=
x-amz-request-id: XFJGARBM0THQ0BZ7
x-amz-version-id: 4wrcCgDF0_.4qUOvsEF6_lhZVIcIUJLV
x-from-cache: 1
x-envoy-upstream-service-time: 7
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:03 GMT
via: 1.1 varnish
age: 835
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669126744.589036,VS0,VE5
cache-control: private,max-age=14400
vary: Accept-Encoding, Accept-Encoding
abp: 27
content-length: 25642
X-Firefox-Spdy: h2
connect.facebook.net/ar_AR/all.js?hash=b1b463e729c0c637bc69103f23667fd3
200 OK 87 kB URL HTTP/2 connect.facebook.net/ar_AR/all.js?hash=b1b463e729c0c637bc69103f23667fd3
IP
File type ASCII text, with very long lines (18734)
Hash 6390517587d3cc2de9149bf81a76f5db
056af3963bae088895058437e6a2445f225d56cb
52e0fddfd836e2820c14f16570b5bf83754f8920276d2cb1fe6273cab3f5f555
GET /ar_AR/all.js?hash=b1b463e729c0c637bc69103f23667fd3 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 0c3441c1fa1b8a1cb29fd88399b4ab68
etag: "152a14d59ef9ebff565f5682e1fb7d9d"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 22 Nov 2023 11:26:59 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Y5BRdYfTzC3pFJv4Gnb12w==
x-fb-debug: +ZNKoWHGkeNX+/ZL/+45Oou/3JIzD0OTcmU7O+RBqF/+bydODDeM0JSKEDakYUiwLPgFDFmXdLNX+M23S2B7cw==
priority: u=3,i
content-length: 86996
x-fb-trip-id: 1679558926
date: Tue, 22 Nov 2022 14:19:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=350075265&t=pageview&_s=1&dl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&ul=en-us&de=UTF-8&dt=Autodesk%20AutoCAD%202013%20Free%20With%20Crack%20%26%20Key%20Download&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1640305900&gjid=209599564&cid=1115881146.1669126743&tid=UA-144347007-1&_gid=1271769252.1669126743&_r=1>m=2oub90&z=1737270600
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=350075265&t=pageview&_s=1&dl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&ul=en-us&de=UTF-8&dt=Autodesk%20AutoCAD%202013%20Free%20With%20Crack%20%26%20Key%20Download&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1640305900&gjid=209599564&cid=1115881146.1669126743&tid=UA-144347007-1&_gid=1271769252.1669126743&_r=1>m=2oub90&z=1737270600
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=350075265&t=pageview&_s=1&dl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&ul=en-us&de=UTF-8&dt=Autodesk%20AutoCAD%202013%20Free%20With%20Crack%20%26%20Key%20Download&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=1640305900&gjid=209599564&cid=1115881146.1669126743&tid=UA-144347007-1&_gid=1271769252.1669126743&_r=1>m=2oub90&z=1737270600 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://magedyakot6.rigala.net
date: Tue, 22 Nov 2022 14:19:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=350075265&t=pageview&_s=1&dl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&ul=en-us&de=UTF-8&dt=Autodesk%20AutoCAD%202013%20Free%20With%20Crack%20%26%20Key%20Download&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEDAAUABAAAAICAAo~&jid=978320227&gjid=339919715&cid=1115881146.1669126743&tid=UA-39969191-1&_gid=1271769252.1669126743&_r=1>m=2oub90&z=1238767673
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=350075265&t=pageview&_s=1&dl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&ul=en-us&de=UTF-8&dt=Autodesk%20AutoCAD%202013%20Free%20With%20Crack%20%26%20Key%20Download&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEDAAUABAAAAICAAo~&jid=978320227&gjid=339919715&cid=1115881146.1669126743&tid=UA-39969191-1&_gid=1271769252.1669126743&_r=1>m=2oub90&z=1238767673
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&aip=1&a=350075265&t=pageview&_s=1&dl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&ul=en-us&de=UTF-8&dt=Autodesk%20AutoCAD%202013%20Free%20With%20Crack%20%26%20Key%20Download&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEDAAUABAAAAICAAo~&jid=978320227&gjid=339919715&cid=1115881146.1669126743&tid=UA-39969191-1&_gid=1271769252.1669126743&_r=1>m=2oub90&z=1238767673 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://magedyakot6.rigala.net
date: Tue, 22 Nov 2022 14:19:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?ptv=132&profileId=206&cb=69323719472
200 OK 159 B URL HTTP/2 bidder.criteo.com/cdb?ptv=132&profileId=206&cb=69323719472
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0dc81a50d8c8dcdc3bf09dda1b2e100f
4efe03a95180d68795c1e721f10926fa00c3910d
85dbf9652432c3c25460c1f517f443419af3318afb93dac3a8a4e518a5c54c5f
POST /cdb?ptv=132&profileId=206&cb=69323719472 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 570
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
vary: Origin
server: Finatra
content-type: application/json; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: https://magedyakot6.rigala.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
content-encoding: gzip
content-length: 159
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 147 kB URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
Size 147 kB (146780 bytes)
Hash cd5c76ca859de5f1c21dcb56bfd580da
d3e5d8a0677b4e2519eb4950b5e07936757864f3
32b2a450106aa6a638287150297897eeda126255a6470f4e98fb2d3da852e02f
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 105228
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bf4ae67fac2b54264c48dbb70dfec52b
a03e149c9c2760cfd360642309790003d0ece590
5130ccd1988a14ecaa9f5e8cede945c7b5165655703663f476a6879912bb016b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152855
Date: Tue, 22 Nov 2022 14:19:03 GMT
Etag: "637c8059-1d7"
Expires: Thu, 24 Nov 2022 08:46:38 GMT
Last-Modified: Tue, 22 Nov 2022 07:55:05 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X4GNuiHFLKeaaOHr3biIEtzuh2iF6pvB6XOrrg5cbfjPcVLoW6OmGg==
Age: 3093
gem.gbc.criteo.com/newidsd
200 OK 542 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash 663dd89125925bed13bff46c7ab26dfa
0eb7da669b1a3e319da75e151a7205ec61fa2096
45a047f4ea94e70e092c07eaf3e75c19a4ef9af34c34f55b1f7c2a6b9c5b9551
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 119149
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
api.viglink.com/api/ping
200 OK 260 B IP
File type ASCII text, with no line terminators
Hash 503107a431f0d789a26795eab617c304
ca9725b2c1580504468d06af7cd20d2f0353502e
3f2e5f91ba0c27d1b3eb2d16c2a6c537aee3d63d39446725b0846eaa993c8a5f
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 140
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://magedyakot6.rigala.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Tue, 22 Nov 2022 14:19:03 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 260
Connection: keep-alive
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://magedyakot6.rigala.net/
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://magedyakot6.rigala.net/
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 1.8 kB IP
Hash 7445fc23b53ed5b2bbc4744c07ff674d
18b98e91716d1642dd6ad32ed997ac1921078b90
2c3d6c080923fc5e3d484edc661d75186f6da9d3bb19832dfe604bea6b9aafbe
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/
Content-Type: application/json
Origin: https://magedyakot6.rigala.net
Content-Length: 390
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 1fdbae86c69f2ed04c853b5351a73976
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/
Content-Type: application/json
Origin: https://magedyakot6.rigala.net
Content-Length: 471
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 9c5d4f810184e14028e4f2c3de787c10
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
api.viglink.com/api/sync.gif?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.gif?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.gif?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Tue, 22 Nov 2022 14:19:03 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 461760f30678f8aa3ad801eb88dc59d9
7b3c33ec99c429ad19918895014e309ca947f31a
fe8c62f7c90fa17a3d286b4abc0c8d7aa338d26aa4724d0d5dbaaab7b889b382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash e4815ea0890407e0ec8159f54a9041f5
bc71cbf37e95a5fbc996661434cebd9a0a8a637d
089a1d3552a7519cd89bf5b426a6c267372dee2a451abee6a8d40a0bf160acb2
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 290
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://magedyakot6.rigala.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Tue, 22 Nov 2022 14:19:03 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
magedyakot6.rigala.net/images/icons-180.png
200 OK 34 kB URL HTTP/2 magedyakot6.rigala.net/images/icons-180.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 557ca0151fe70ed705b21ef8a9e18849
bf6d8534b39b0c3571c7647f547ed9b9162e5c73
f5676b2dd549856baab80d42cf85067436afb3125893c3d23a08e86994361b08
GET /images/icons-180.png HTTP/1.1
Host: magedyakot6.rigala.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/t20-topic
Cookie: exadd=166914; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: image/png
content-length: 34531
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 22 Nov 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&gjid=209599564&_gid=1271769252.1669126743&_u=YEBAAUAAAAAAACAAI~&z=1345824423
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&gjid=209599564&_gid=1271769252.1669126743&_u=YEBAAUAAAAAAACAAI~&z=1345824423
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&gjid=209599564&_gid=1271769252.1669126743&_u=YEBAAUAAAAAAACAAI~&z=1345824423 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://magedyakot6.rigala.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 22 Nov 2022 14:19:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
magedyakot6.rigala.net/sw.js
200 OK 2.1 kB URL HTTP/2 magedyakot6.rigala.net/sw.js
IP
File type ASCII text, with very long lines (5459)
Hash 19fb572e4442ad975dced9d82a9500c3
7d77c7b861599f16d6a9fede8158aad89a72d596
643f5af8b9bc291bf7af78c540d4255ccf06d6dc23ff1b17ff9365e6364bed9d
GET /sw.js HTTP/1.1
Host: magedyakot6.rigala.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/t20-topic
Connection: keep-alive
Cookie: exadd=166914; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; _ga=GA1.2.1115881146.1669126743; _gid=GA1.2.1271769252.1669126743; _gat_gtag_UA_144347007_1=1; _gat_gtag_UA_39969191_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/javascript
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 84159ac7a7050bc533a07bef865cf134
57b3eb1a0badd4bc6510f2b83c938130a5ae6f52
a161ac91485f4e01aacf23df472a49a11928c241d2d0a06e8989f5859f612f6f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6589
Cache-Control: max-age=157780
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Etag: "637c85ef-117"
Expires: Thu, 24 Nov 2022 10:08:44 GMT
Last-Modified: Tue, 22 Nov 2022 08:18:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
gum.criteo.com/sid/json?origin=publishertag&domain=rigala.net&sn=FirefoxSyncframe&so=0&topUrl=magedyakot6.rigala.net&info=lb17dF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTNub1RLUlNjWnM1azJsWnhDeDZtelU&idsd=1345338342,2026847496&cw=1&lsw=1
200 OK 360 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=rigala.net&sn=FirefoxSyncframe&so=0&topUrl=magedyakot6.rigala.net&info=lb17dF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTNub1RLUlNjWnM1azJsWnhDeDZtelU&idsd=1345338342,2026847496&cw=1&lsw=1
IP
Hash 5bff11601883988b18886c7fc7c8968a
8d9b3be426cdd10f9244f492b5fc0b6986246313
092e5a30d4d6d4dcd54f77362e57fa841ddb5aa3b6d532f5f5b2aee8321d1608
GET /sid/json?origin=publishertag&domain=rigala.net&sn=FirefoxSyncframe&so=0&topUrl=magedyakot6.rigala.net&info=lb17dF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTNub1RLUlNjWnM1azJsWnhDeDZtelU&idsd=1345338342,2026847496&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=magedyakot6.rigala.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1250290
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 461760f30678f8aa3ad801eb88dc59d9
7b3c33ec99c429ad19918895014e309ca947f31a
fe8c62f7c90fa17a3d286b4abc0c8d7aa338d26aa4724d0d5dbaaab7b889b382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 84159ac7a7050bc533a07bef865cf134
57b3eb1a0badd4bc6510f2b83c938130a5ae6f52
a161ac91485f4e01aacf23df472a49a11928c241d2d0a06e8989f5859f612f6f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6589
Cache-Control: max-age=157780
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Etag: "637c85ef-117"
Expires: Thu, 24 Nov 2022 10:08:44 GMT
Last-Modified: Tue, 22 Nov 2022 08:18:55 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/
Content-Type: application/json
Origin: https://magedyakot6.rigala.net
Content-Length: 754
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:04 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 72f2b72654109e95e8d2a1af499444fb
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 5.7 kB IP
File type ASCII text, with very long lines (13017), with no line terminators
Hash 5b76aa17ce414a21799b6dd0b5256e59
04ddcd95d1f2c8efeaa14b9efa582ca3bc65d5df
1cbec69ae712a9dcc8b76ee074952154148f8a2fd7c0d231e76940462cec5ddd
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:04 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 2245
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q7Ue3qHnXs%2F6x%2B7f6GpOVxjcVRp3l0CdvH6CevP1nOdZd50C6%2Fl42jP4UglPrr69CZ7ktGw2p7foiWHADI7cQxDNhEqcEcwye99pKGaedRz25l7Ip3ZFH70zVUZDnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c467b2ab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=6367fa611eeb4269ab7fc62b842eff3c
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=6367fa611eeb4269ab7fc62b842eff3c
IP
File type JSON data\012- , ASCII text
Hash 51c9d3f159e735425ad9432fd0bc72f8
1ff330ba49f55e4327126a490289440f58dd8e21
c203b0e068fed7774ddbe622334ff0c4c91775526e7bfe1973f309e4156f41aa
GET /gid.js?userId=6367fa611eeb4269ab7fc62b842eff3c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:04 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=6367fa611eeb4269ab7fc62b842eff3c; expires=Wed, 22 Nov 2023 14:19:04 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
cdn.betgorebysson.club/?rb=CGs45dNh-8SmtmUl1EpT3A55DP7AEzsYpgBYlIOxLGV9evf4W_l32Egta7iJuTNnsx8M3wg9ujIvHcRwiQA19MFP1cOR8fOsxhLLSemZNXy5awU3N3aTtf0dtxaV-6eluUusA9Q2EBiKQQeJ2j8CZzrPl1avGIZV9eQMZi2H41EdxvtOElRx-MNaRBhVfZIIe1hDDjAghL2YWtSF9U4X4Tm1gOg-XUg0gyyABSlbJmK_-om9K36FyQ%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.452.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.452.0&bs=eab84fe0-0c2f-47b9-9005-dc088ad5856c&userId=6367fa611eeb4269ab7fc62b842eff3c&m=link
200 OK 1.7 kB URL HTTP/2 cdn.betgorebysson.club/?rb=CGs45dNh-8SmtmUl1EpT3A55DP7AEzsYpgBYlIOxLGV9evf4W_l32Egta7iJuTNnsx8M3wg9ujIvHcRwiQA19MFP1cOR8fOsxhLLSemZNXy5awU3N3aTtf0dtxaV-6eluUusA9Q2EBiKQQeJ2j8CZzrPl1avGIZV9eQMZi2H41EdxvtOElRx-MNaRBhVfZIIe1hDDjAghL2YWtSF9U4X4Tm1gOg-XUg0gyyABSlbJmK_-om9K36FyQ%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.452.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.452.0&bs=eab84fe0-0c2f-47b9-9005-dc088ad5856c&userId=6367fa611eeb4269ab7fc62b842eff3c&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2201), with no line terminators
Hash 1dc17a3a8ff5b063f47962afd17d9e2b
87a66bab743f68d5369f1f689071f8dd03448ec4
c1d42d741094219f652309914a1e15308d22a8784d81067301c5eaf2774dc069
GET /?rb=CGs45dNh-8SmtmUl1EpT3A55DP7AEzsYpgBYlIOxLGV9evf4W_l32Egta7iJuTNnsx8M3wg9ujIvHcRwiQA19MFP1cOR8fOsxhLLSemZNXy5awU3N3aTtf0dtxaV-6eluUusA9Q2EBiKQQeJ2j8CZzrPl1avGIZV9eQMZi2H41EdxvtOElRx-MNaRBhVfZIIe1hDDjAghL2YWtSF9U4X4Tm1gOg-XUg0gyyABSlbJmK_-om9K36FyQ%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.452.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.452.0&bs=eab84fe0-0c2f-47b9-9005-dc088ad5856c&userId=6367fa611eeb4269ab7fc62b842eff3c&m=link HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Cookie: OAID=6367fa611eeb4269ab7fc62b842eff3c; oaidts=1669126743
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:04 GMT
content-type: application/json
x-trace-id: 3804703cfe1ba896bbccc57b093fbeaa
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=6367fa611eeb4269ab7fc62b842eff3c; expires=Wed, 22 Nov 2023 14:19:04 GMT; path=/; secure; SameSite=None
oaidts=1669126744; expires=Wed, 22 Nov 2023 14:19:04 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 29 Nov 2022 14:19:04 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=rigala.net&sn=FirefoxSyncframe&so=3&topUrl=magedyakot6.rigala.net&bundle=F11PGV8wYWdENDN5REowMVRuMUdaZ3FQTkQwJTJCMSUyRjBCUXoyTnlEYzhtRkdJVDM5ZVJ5dFJxWWVRJTJCM3AlMkJIRG5JZXlOUHFjaGtId2JQaEtBcmhDMnllMENPb1V5cW0xejRPZXFqZ0ZrcUZaRUJRdGZZYkJmbzVQQmVmeGVjZG5zZGhIRlpiVkFETUdYdVlXMXBQNEx1aTh1dkZYQSUzRCUzRA&info=4e36M180M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTFBbXFVMkJiM1FRY1ByNHp5aVBsY1k&idsd=1345338342,2026847496&cw=1&rtusCallerId=72&lsw=1
200 OK 318 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=rigala.net&sn=FirefoxSyncframe&so=3&topUrl=magedyakot6.rigala.net&bundle=F11PGV8wYWdENDN5REowMVRuMUdaZ3FQTkQwJTJCMSUyRjBCUXoyTnlEYzhtRkdJVDM5ZVJ5dFJxWWVRJTJCM3AlMkJIRG5JZXlOUHFjaGtId2JQaEtBcmhDMnllMENPb1V5cW0xejRPZXFqZ0ZrcUZaRUJRdGZZYkJmbzVQQmVmeGVjZG5zZGhIRlpiVkFETUdYdVlXMXBQNEx1aTh1dkZYQSUzRCUzRA&info=4e36M180M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTFBbXFVMkJiM1FRY1ByNHp5aVBsY1k&idsd=1345338342,2026847496&cw=1&rtusCallerId=72&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (398), with no line terminators
Hash 04360e36db3793a363898e97e322e37a
092dabcd24aad580a792511c6a779159e487be34
99e856233b4f3e87403565cc2c415778d2bb47ca3192f403703355cf9d7e2b3f
GET /sid/json?origin=rtus&domain=rigala.net&sn=FirefoxSyncframe&so=3&topUrl=magedyakot6.rigala.net&bundle=F11PGV8wYWdENDN5REowMVRuMUdaZ3FQTkQwJTJCMSUyRjBCUXoyTnlEYzhtRkdJVDM5ZVJ5dFJxWWVRJTJCM3AlMkJIRG5JZXlOUHFjaGtId2JQaEtBcmhDMnllMENPb1V5cW0xejRPZXFqZ0ZrcUZaRUJRdGZZYkJmbzVQQmVmeGVjZG5zZGhIRlpiVkFETUdYdVlXMXBQNEx1aTh1dkZYQSUzRCUzRA&info=4e36M180M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTFBbXFVMkJiM1FRY1ByNHp5aVBsY1k&idsd=1345338342,2026847496&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=magedyakot6.rigala.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1519273
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.betgorebysson.club/apu.php?zoneid=3765907
200 OK 30 kB URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=3765907
IP
Hash 09f9aff216c798ad850f1de072dd606a
c7d062233b328c15ca5d39b3340551cd32e634a1
adfbe0bdc5f16cd65039513507c8a7263d91ef33e7b4126af35413fa51db1424
Analyzer Verdict Alert fortinet Malware
GET /apu.php?zoneid=3765907 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/javascript
x-trace-id: 5e3946ba91b5761b8cf2e179cdb94c19
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=6367fa611eeb4269ab7fc62b842eff3c; expires=Wed, 22 Nov 2023 14:19:03 GMT; path=/; secure; SameSite=None
oaidts=1669126743; expires=Wed, 22 Nov 2023 14:19:03 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
200 OK 20 kB URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
Hash 8132ec737bf6fdc221492703423abaa3
5000dccd78834fd8772176c5665c003115342678
b26f1dcf8c4e02431b17d150869f328ff639e91f97de5217c435061fd9119870
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Thu, 22 Dec 2022 14:19:03 GMT
cache-control: max-age=2592000
x-proxy-cache: HIT
x-github-request-id: 131C:870B:4A733E:4C50CD:63781133
vary: Accept-Encoding
x-fastly-request-id: 91b1d5d3880d36fa7daf82ef48e14b9ca73087d6
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&_u=YEBAAUAAAAAAACAAI~&z=405555497
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&_u=YEBAAUAAAAAAACAAI~&z=405555497
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&_u=YEBAAUAAAAAAACAAI~&z=405555497 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 14:19:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&_u=YEBAAUAAAAAAACAAI~&z=405555497
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&_u=YEBAAUAAAAAAACAAI~&z=405555497
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=1115881146.1669126743&jid=1640305900&_u=YEBAAUAAAAAAACAAI~&z=405555497 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 14:19:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dc18476a17e787dc0700f3ee8dc99bcf
4db3ef7edb2683d8141280b9dd780ce4375e3c0f
4082538731e62eb96bd62690e973875ef9e3048432a3a849d7bedd37872b79ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ef11a2d1e232b4b45e40ff0c29fa8b0
0966963f13e3b149e3e3c8c2c81e7986d1d8a07b
9ce8b9ab5f1dfdc0686d1660ed64c6eff5cc3d1492d82aa769ac58e3a159dd1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Tue, 22 Nov 2022 16:53:20 GMT
Date: Tue, 22 Nov 2022 14:19:04 GMT
Connection: keep-alive
trc.taboola.com/forumotion-ar/trc/3/json?tim=14%3A19%3A03.628<i=deflated&data=%7B%22id%22%3A938%2C%22ii%22%3A%22%2Ft20-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669110912635%2C%22vi%22%3A1669126743625%2C%22cv%22%3A%2220221122-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic%22%2C%22vpi%22%3A%22%2Ft20-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A1845%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A404%2C%22mw%22%3A0%2C%22amw%22%3A1036.63330078125%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A1737.4666748046875%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft20-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 15 kB URL HTTP/2 trc.taboola.com/forumotion-ar/trc/3/json?tim=14%3A19%3A03.628<i=deflated&data=%7B%22id%22%3A938%2C%22ii%22%3A%22%2Ft20-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669110912635%2C%22vi%22%3A1669126743625%2C%22cv%22%3A%2220221122-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic%22%2C%22vpi%22%3A%22%2Ft20-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A1845%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A404%2C%22mw%22%3A0%2C%22amw%22%3A1036.63330078125%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A1737.4666748046875%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft20-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
Hash 5fccb05e01b2226b50087045ba93a4f4
a315986ff9657451be6ef040e9f696828b8f9b78
8d516da8f338648ec3c4794d4a613ab6a6ffa149156beb524fa787ca8aae16f4
GET /forumotion-ar/trc/3/json?tim=14%3A19%3A03.628<i=deflated&data=%7B%22id%22%3A938%2C%22ii%22%3A%22%2Ft20-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1669110912635%2C%22vi%22%3A1669126743625%2C%22cv%22%3A%2220221122-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic%22%2C%22bv%22%3A%220%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic%22%2C%22vpi%22%3A%22%2Ft20-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A1845%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A404%2C%22mw%22%3A0%2C%22amw%22%3A1036.63330078125%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A1737.4666748046875%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft20-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126744.994572,VS0,VE386
vary: Accept-Encoding
x-vcl-time-ms: 386
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Tue, 22 Nov 2022 16:53:20 GMT
Date: Tue, 22 Nov 2022 14:19:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9256
Expires: Tue, 22 Nov 2022 16:53:20 GMT
Date: Tue, 22 Nov 2022 14:19:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ab62c5a7c3296600de924eb0b283bc1
bc4a2dc43898e3fb78ba7301d8b09b280991d221
f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10556
x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-Iq0GPVoAMF9bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: sBNLrVAl4G6pJ-OBZ6aJZC64MrkkGQdsuZKITQwcqgYgP6-GJiblfA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:59:20 GMT
age: 58784
etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/userx.20221122-6-RELEASE.es6.js
200 OK 5.4 kB URL HTTP/2 cdn.taboola.com/libtrc/userx.20221122-6-RELEASE.es6.js
IP
File type ASCII text, with very long lines (17842)
Hash d12f4b962deab13f683cffe80af6150e
60401625cb2ebae2d0c796cc78f60353ed75b744
d390601a9c6a17dad0be8d947ce8b7212de6588fb3719c42f9aeeba9cdd72e5f
GET /libtrc/userx.20221122-6-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: AG6cgvl/jh2IqEPxfNPsQQQfK9peTee9dVUsX0mg4XpcdgE1887hywzi5VlU6KRQRD9P5WvXP2s=
x-amz-request-id: JP3ANRPKA5TJ5QYK
x-amz-replication-status: PENDING
last-modified: Tue, 22 Nov 2022 09:58:13 GMT
etag: "c2eeb4b8fc138ae26b0f7113e3413133"
x-amz-version-id: rdVKYHjhIsUkZYWb1AMC4aXBNslbW_lY
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
via: 1.1 varnish
age: 15648
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 2838
x-timer: S1669126745.617429,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 12
content-length: 5395
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/cta-component.20221122-6-RELEASE.es6.js
200 OK 5.1 kB URL HTTP/2 cdn.taboola.com/libtrc/cta-component.20221122-6-RELEASE.es6.js
IP
File type ASCII text, with very long lines (18924)
Hash 67008d1e3084f58d9e5c8a9132c7eaa4
ce2b581177f337c4fc98ae4fcf6737e0b32de0ae
21dc74acf16c56b5259c39b9495d499a0d99ae6fc5ef5b97c94242bc390e55c2
GET /libtrc/cta-component.20221122-6-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: EEKstZns/ptEYqm2krycpIn1AZEu4Ntr97Nmr+eNg7qzS7yo8NgIzwQp1sLgQnmOgc89bi+VXIg=
x-amz-request-id: W8CFZN3PDWNYQCGT
x-amz-replication-status: COMPLETED
last-modified: Tue, 22 Nov 2022 09:54:39 GMT
etag: "d423c724e3578d10611b826c9aecddb5"
x-amz-version-id: ZiNYjimOS9lhYBq0EdA5NPTRzGIzO32K
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
via: 1.1 varnish
age: 15466
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 6302
x-timer: S1669126745.617514,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 12
content-length: 5107
X-Firefox-Spdy: h2
vidstat.taboola.com/lite-unit/3.9.8/UnitWidgetItemDesktop.min.js
200 OK 30 kB URL HTTP/2 vidstat.taboola.com/lite-unit/3.9.8/UnitWidgetItemDesktop.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash aac1042207afd54e1cf1befcaf3420cd
00f0597866330a850a1d6222861591f24dd18380
ea77ece8880eb28ffe83e94ef787b4204f8b1b3d09f443011b898b13ed4bb706
GET /lite-unit/3.9.8/UnitWidgetItemDesktop.min.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 07:02:09 GMT
etag: "1842444d4bb92087143326a4d508875d"
server: AmazonS3
via: 1.1 b34d5d8e5954d0b7b46d5f0eb534c166.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: iVxUQ_yUDgKIDSZaR21P2jFvv94ZUaTAMQdnd9xsEMFJTpsmb2NMlg==
cache-control: public, max-age=2592000
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 26187
x-served-by: cache-bma1666-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 1680
x-timer: S1669126745.620830,VS0,VE0
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 29909
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 17 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash ed56e351b5dbc76404be6af98ceddb28
ed73e466004efc1d2ba9daadd2e4823775fa6974
548c3efdbf4d53b2d0d0bad15eeb24fb15c8f5d7bc56d8d46af79930edec17ba
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/
x-crto-bundle: h0YEHl9Qb0JwZHM0NlBkTFRoVXJNYSUyQlh2WjBKNkJudHkxem5RWEpWSk1vQ1V3SVpUdCUyRm9jRFVsMkFYajlzZUU5TUlUTDRoRWpud1kzT1VtUk5LWFNkbCUyRlNFdWgySUthSDFJRkFNenElMkZ0Y0thcGphcDdyaWZLcCUyRm9vbTNJUVdyd1BneHVERGYlMkJQaWRVR0dGV1cxTkxkQVlaNWclM0QlM0Q
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:04 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://magedyakot6.rigala.net
server-processing-duration-in-ticks: 2739655
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/62c980bb8bbd80a6c4c24712a9832be5.jpg
200 OK 5.1 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/62c980bb8bbd80a6c4c24712a9832be5.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fda737463629bcb5c52caa1ba9849c2
97d6a57e88c37c57126a886a61a25ed227d29686
e7c6439b48ab46a6be54fe25f44e10f3fa7f94493ed34a8ce752dd60d3253a28
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/62c980bb8bbd80a6c4c24712a9832be5.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 544276494860862155285317049526564973234,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 544276494860862155285317049526564973234,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "480e88b0dd9bdb1b00844b282a86c922"
expiration: expiry-date="Thu, 01 Dec 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Mon, 31 Oct 2022 14:22:05 GMT
req-referer: https://www.kiep.pl/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 188
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 535597
x-served-by: cache-iad-kcgs7200100-IAD, cache-iad-kiad7000055-IAD, cache-bur-kbur8200103-BUR, cache-iad-kcgs7200059-IAD, cache-bma1666-BMA
x-cache: MISS, MISS, MISS, HIT, HIT
x-cache-hits: 0, 0, 0, 9, 2
x-timer: S1669126745.623770,VS0,VE0
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/62c980bb8bbd80a6c4c24712a9832be5.jpg
x-vcl-time-ms: 0
content-length: 5074
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed6b76d15fc8d6295acdb6fb47461d3
b8c928f93a8d82b48491448d811a95ad99dc6aef
de326836a9de677438b9ae724198e94348b0900c62817ff10de3677ce93fdae0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8685
x-amzn-requestid: 66455cc7-83d7-4570-99f9-5fa838da947f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrAHwKoAMFUHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee46-354d65e9609bc05647556a5a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -9tZPsMl7i5hr0N1rwJdQBLiOImuEO12RDL0pcPNjf6t-LkRbPaN2A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:58:29 GMT
age: 58835
etag: "b8c928f93a8d82b48491448d811a95ad99dc6aef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/413e0ec8e3f76577082d0d4628d03eb1.png
200 OK 9.2 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/413e0ec8e3f76577082d0d4628d03eb1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e5d51d5f31f308956d654748041abde6
88a0d89cb7d887b08e1e28ec2d68488388b18ef7
40d05340933f125b7edd5a7aae70847ca6eb44aead3dad948d5a95be7d9f918a
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/413e0ec8e3f76577082d0d4628d03eb1.png HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 321472462394424012194695128685658289652,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 321472462394424012194695128685658289652,341818766630488423269086991181948173068,29ecf9b93bbf306179626feeda1fab70
etag: "648790098c557403deba979d898c0b83"
last-modified: Tue, 18 Oct 2022 05:34:57 GMT
req-referer: https://zone.msn.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 579950a9eafa8453280d562d261fd946
x-envoy-upstream-service-time: 85
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 579043
x-served-by: cache-iad-kjyo7100025-IAD, cache-iad-kjyo7100059-IAD, cache-bur-kbur8200142-BUR, cache-iad-kiad7000025-IAD, cache-bma1666-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 1, 0, 1, 1
x-timer: S1669126745.623554,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/http%3A//cdn.taboola.com/libtrc/static/thumbnails/413e0ec8e3f76577082d0d4628d03eb1.png
x-vcl-time-ms: 1
content-length: 9244
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.pinimg.com/originals/e0/32/c5/e032c5069f62318b9cd07cd907729f26.png
200 OK 6.7 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.pinimg.com/originals/e0/32/c5/e032c5069f62318b9cd07cd907729f26.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f5e4bf9c2bf4b91c46e787d8f9c732f2
35663c85ec42bf07f1abd10515fecbb338565a87
0401bd678add4f16b15b0daecc1624829ed1a11ec9686cc4953f2afb2ab6de33
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.pinimg.com/originals/e0/32/c5/e032c5069f62318b9cd07cd907729f26.png HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 626022443290154259135441267950558062660,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 626022443290154259135441267950558062660,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "4a152a35f3486e948ff7046b54ffa673"
expiration: expiry-date="Wed, 05 Oct 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Sun, 04 Sep 2022 16:34:37 GMT
req-referer: https://www.fanatik.com.tr/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 206
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb804
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 6037383
x-served-by: cache-iad-kcgs7200026-IAD, cache-iad-kcgs7200026-IAD, cache-chi-kigq8000105-CHI, cache-iad-kcgs7200162-IAD, cache-bma1666-BMA
x-cache: HIT, HIT, MISS, HIT, HIT
x-cache-hits: 1, 3, 0, 4, 1
x-timer: S1669126745.623946,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.pinimg.com/originals/e0/32/c5/e032c5069f62318b9cd07cd907729f26.png
x-vcl-time-ms: 1
content-length: 6670
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 34I3ZsWcHKNvx-MctWUIyOgHOm8vjDMxuHtcGZmykKvEtbs4JziNqA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 15:03:51 GMT
age: 83713
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//aijxg.com/content/772b0a08-4a9c-4b94-93dd-fe20e0236062
200 OK 6.1 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//aijxg.com/content/772b0a08-4a9c-4b94-93dd-fe20e0236062
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 16fec5c4900ca5a6c343432cb1197c5b
a50f0a7a44bbbe45b47856c722e787808e1b7d01
4fe3c599de7f704da93531d4bd056f789faab0d792aeb7f81561e9a6a22c9c93
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//aijxg.com/content/772b0a08-4a9c-4b94-93dd-fe20e0236062 HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 547038191971269950177142999030341373160,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 547038191971269950177142999030341373160,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "f30a7de0d26460949a6b0c35295e32f9"
expiration: expiry-date="Sun, 23 Oct 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Thu, 22 Sep 2022 07:55:39 GMT
req-referer: https://weather.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 1024
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb201
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 4833108
x-served-by: cache-iad-kjyo7100141-IAD, cache-iad-kiad7000091-IAD, cache-bur-kbur8200064-BUR, cache-iad-kcgs7200174-IAD, cache-bma1666-BMA
x-cache: HIT, HIT, HIT, HIT, HIT
x-cache-hits: 1, 1, 1, 48, 1
x-timer: S1669126745.623756,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//aijxg.com/content/772b0a08-4a9c-4b94-93dd-fe20e0236062
x-vcl-time-ms: 2
content-length: 6078
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f3fad7453f45dfa617243c8beac64e1
56414a905340e1b1478a0a40a52b25365a724524
7befcfbedac5652eb04bc675b67f7b642631d4e918f7aaee17b0b594e26854d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6031
x-amzn-requestid: f59b04c5-4955-4847-9a7f-d9d53b47ca52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3cV0GC-oAMF5hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637940f1-0425b3cf6a4650b60936feba;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 20:47:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VabInML1mfcQLIp29OWRNsixwfSWt0Wv9l7I-Ak7TdUHlNt2ZEVtPg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 15:21:36 GMT
age: 82648
etag: "56414a905340e1b1478a0a40a52b25365a724524"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif
200 OK 300 B URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x200, components 1\012- data
Hash 117612906d848ac5bab362816a837ecb
71afde9bddb00f1d13960b3db299407a39733859
6be9cfd683b1c8e57d7c231f9518ae7325c7df03bcca93c77bf779eb89a5c106
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 576314129693928467953438700423355769068,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
content-type: image/jpeg
edge-cache-tag: 576314129693928467953438700423355769068,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "117612906d848ac5bab362816a837ecb"
expiration: expiry-date="Mon, 21 Nov 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Fri, 21 Oct 2022 11:39:18 GMT
server: cloudinary
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-backend-name: CLOUDINARY:3FP7YNX3LMizprTZsG7BSW--F_addr_taboola_res_cloudinary_com
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 2415949
x-served-by: cache-iad-kjyo7100130-IAD, cache-iad-kjyo7100130-IAD, cache-bma1666-BMA
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 31, 1
x-timer: S1669126745.634826,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//illiweb.com/fa/empty.gif
x-vcl-time-ms: 1
content-length: 300
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dafd9e17dc0023e71ae513c6025e4b80
12e2654db1f384bb04f5c5042848b25dda86b710
e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4639
x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oELooAMFWFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bmrDryUp_4bvIikGkppa36e9isEfvK0gjunV6xmU5ApJtxlLR_GYkA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:05:18 GMT
age: 58426
etag: "12e2654db1f384bb04f5c5042848b25dda86b710"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f58/15/08/68/59/zzuii10.jpg
200 OK 6.8 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f58/15/08/68/59/zzuii10.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1bb60e93e5b9b79db7d0d839d69bb763
b08319155ed105426e12a90f9ddba6dc99daf0fc
af200dd1a38a7f1a63e5d08550e73ba890cc22e1df9d28414c296ea2830c7d51
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f58/15/08/68/59/zzuii10.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 315150761238388019880486429541193340629,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 315150761238388019880486429541193340629,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "7c7451aa49c2a5b3af7da32c8f426e15"
expiration: expiry-date="Tue, 18 Oct 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Sat, 17 Sep 2022 08:05:59 GMT
req-referer: https://tr-hacker.yetkin-forum.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 950
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb203
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
age: 4763052
x-served-by: cache-iad-kiad7000098-IAD, cache-iad-kiad7000098-IAD, cache-bur-kbur8200096-BUR, cache-iad-kjyo7100178-IAD, cache-bma1666-BMA
x-cache: MISS, HIT, MISS, HIT, HIT
x-cache-hits: 0, 2, 0, 26, 1
x-timer: S1669126745.634970,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f58/15/08/68/59/zzuii10.jpg
x-vcl-time-ms: 1
content-length: 6818
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 3fa13f26e3f1d506e987a382d418f52e
44b5c2f209579fe72afd212b7864737891ce6490
db2ef84af40984f4441680613c1bf4630a40284ab2593a617378fbecd1956819
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1168
Cache-Control: max-age=148761
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:04 GMT
Etag: "637c77e1-138"
Expires: Thu, 24 Nov 2022 07:38:25 GMT
Last-Modified: Tue, 22 Nov 2022 07:18:57 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 312
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 9.3 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash 47f08304e0302db9d2ebe971034c2d68
de49d3fa9c941c84e4a0fecb71bb8bd72c48a902
e05b7df6b669baffcace295a6b724a0f43f7b4a38a4de62f69eb176fa3ee567d
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 377550
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:04 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 902
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 22 Nov 2022 14:19:04 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://magedyakot6.rigala.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 056ca726f56b34fed6618f4a39a5956c
d27c20c355ee4f332459e66ab73639266a44dbfb
8e4f81ed085edeb19c499a7b7fe7c84550206a33a771af41046b4de313b99785
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 307
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://magedyakot6.rigala.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Tue, 22 Nov 2022 14:19:04 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=14%3A19%3A04.463&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=5825&cv=20221122-6-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=14%3A19%3A04.463&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=5825&cv=20221122-6-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=14%3A19%3A04.463&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=5825&cv=20221122-6-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 22 Nov 2022 14:19:05 GMT
x-fastly-to-nlb-rtt: 78196
access-control-allow-credentials: true
X-Firefox-Spdy: h2
15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&encoded=1&uid=e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1669126744246&tagid=&cntry=NO&platform=1&sesid=a51384c9539693fee06836fb04162af4&itemid=/t20-topic&viewid=1669126743625&geolat=&geoing=&deviceifa=&appid=&sd=v2_a51384c9539693fee06836fb04162af4_e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8_1669126744_1669126744_CNawjgYQ3pxDGMnM0_3JMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=fa122e4240d2fcc71a899c1ab3a51de2&appname=&cdb=&gdprApplies=true&rid=&sii=-2738045953797954274&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=
200 OK 8.9 kB URL HTTP/2 15.taboola.com/tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&encoded=1&uid=e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1669126744246&tagid=&cntry=NO&platform=1&sesid=a51384c9539693fee06836fb04162af4&itemid=/t20-topic&viewid=1669126743625&geolat=&geoing=&deviceifa=&appid=&sd=v2_a51384c9539693fee06836fb04162af4_e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8_1669126744_1669126744_CNawjgYQ3pxDGMnM0_3JMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=fa122e4240d2fcc71a899c1ab3a51de2&appname=&cdb=&gdprApplies=true&rid=&sii=-2738045953797954274&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv=
IP
File type ASCII text, with very long lines (31196), with no line terminators
Hash 9227f73e56ff6e4e7b61e911d13281df
59e5e2ced5d3013d91d6a0ec34b8e4e29402f4f7
4ab5d9f6ea75ca74c9708d19f3dc8b134eadcf052af9047f66d9cbba7014bdbf
GET /tb?oid=15&pubnm=forumotion-ar&unitType=226&tbloc=&pageType=text&pstn=Below%20Desktop%20Forum%20Thumbnails&uuip=&cisrf=&cirf=https%3A%2F%2Fmagedyakot6.rigala.net%2Ft20-topic&encoded=1&uid=e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8&variant=-100|1786174634&callback=TRC.videoTagCallbacks.videoCallback2&cb=1669126744246&tagid=&cntry=NO&platform=1&sesid=a51384c9539693fee06836fb04162af4&itemid=/t20-topic&viewid=1669126743625&geolat=&geoing=&deviceifa=&appid=&sd=v2_a51384c9539693fee06836fb04162af4_e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8_1669126744_1669126744_CNawjgYQ3pxDGMnM0_3JMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ri=fa122e4240d2fcc71a899c1ab3a51de2&appname=&cdb=&gdprApplies=true&rid=&sii=-2738045953797954274&oee=true&tpubid=1101406&uis=2&fagg=1&ccpaDns=false&ccpaPrivacy=®ion=03&hasGDPRConsent=true&tcfVersion=&cmpStatus=&tnetid=1037540&prcnt=&layer=&normp=1&gvv= HTTP/1.1
Host: 15.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
machineid: 1414
link: <https://am-wf.taboola.com>; rel=preconnect
xvid-debug: mrmr - :
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126745.676241,VS0,VE30
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&cmcv=&pix=31589837&cb=1669126744961&uv=3243&tms=1669126744961&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1669126741736!ts:1669126744961&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&cmcv=&pix=31589837&cb=1669126744961&uv=3243&tms=1669126744961&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1669126741736!ts:1669126744961&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&cmcv=&pix=31589837&cb=1669126744961&uv=3243&tms=1669126744961&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1669126741736!ts:1669126744961&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:05 GMT
content-length: 0
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash feaf59654bdde94c20c55db2fe9f3a46
7cc07fd98382684d33d9c5f1b2734a501aae8f26
a6efe4579ac868942325d7e4687b6257e63170a29929a7703d3bf974e8a483dd
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6124
Cache-Control: max-age=128161
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:05 GMT
Etag: "637c140e-1d7"
Expires: Thu, 24 Nov 2022 01:55:06 GMT
Last-Modified: Tue, 22 Nov 2022 00:13:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash feaf59654bdde94c20c55db2fe9f3a46
7cc07fd98382684d33d9c5f1b2734a501aae8f26
a6efe4579ac868942325d7e4687b6257e63170a29929a7703d3bf974e8a483dd
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6124
Cache-Control: max-age=128161
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:05 GMT
Etag: "637c140e-1d7"
Expires: Thu, 24 Nov 2022 01:55:06 GMT
Last-Modified: Tue, 22 Nov 2022 00:13:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
vidstat.taboola.com/vpaid/units/32_4_3/infra/cmTagWIDGET_ITEM.js
200 OK 128 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_4_3/infra/cmTagWIDGET_ITEM.js
IP
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Size 128 kB (127638 bytes)
Hash c84f37a3a16e6b0512178f454420974e
9c83474a724bfe81cf77769dce26b9eca706316b
de86ad2de6a7b3b859cd9698135b40b1be4187e50a008545be14d1d0c3cc202e
GET /vpaid/units/32_4_3/infra/cmTagWIDGET_ITEM.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 1QasmF1iH1lq7kuYQwj9EdQiOS2MRUYxqjWY0ZehgTi75v7EG87HijIWOGeaNkfi/SGYPpGLrMg=
x-amz-request-id: MSBKAFN3EMN630HW
last-modified: Tue, 22 Nov 2022 07:04:36 GMT
etag: "c84f37a3a16e6b0512178f454420974e"
x-amz-meta-ctime: 1669100675
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1669100675
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
age: 25923
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 4913
x-timer: S1669126745.285123,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 127638
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/units/32_4_3/assets/css/cmOsUnit.css
200 OK 8.3 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_4_3/assets/css/cmOsUnit.css
IP
Hash a28320a69408adba1f01f56d6eb80708
8012c7108fab547cf31481cfda7cb49e654a0542
befbb274b7045e7e5791a4badbe46e1a2e367e6570da7cd0ac127acc4b8e8991
GET /vpaid/units/32_4_3/assets/css/cmOsUnit.css HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rI++A/Byk1MqPg91PRZwGCQMUzCfWZUum3iCjxO0u+HEMa/M0kffw+fqjpY45NSaaL14+aJnd4o=
x-amz-request-id: MSBZX6S2J485FW6V
last-modified: Tue, 22 Nov 2022 07:05:27 GMT
etag: "a28320a69408adba1f01f56d6eb80708"
x-amz-meta-ctime: 1669100726
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1669100725
content-type: text/css
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
age: 25924
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 10367
x-timer: S1669126745.286897,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 8297
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9ee35c4a-6a70-11ed-a954-18c6427b0106; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ee35c89-6a70-11ed-a954-18c6427b0106
X-fe: 108
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9eef7e68-6a70-11ed-949b-1024185a0506; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef7edb-6a70-11ed-949b-1024185a0506
X-fe: 29
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9eef8e5e-6a70-11ed-a4ed-1eddb0c50106; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef8e9a-6a70-11ed-a4ed-1eddb0c50106
X-fe: 48
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9ef31e98-6a70-11ed-9290-1974e5cf0406; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ef31ee1-6a70-11ed-9290-1974e5cf0406
X-fe: 120
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ee35c89-6a70-11ed-a954-18c6427b0106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ee35c89-6a70-11ed-a954-18c6427b0106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ee35c89-6a70-11ed-a954-18c6427b0106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9ef3329b-6a70-11ed-991b-19b4ac340406; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 89
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef7edb-6a70-11ed-949b-1024185a0506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef7edb-6a70-11ed-949b-1024185a0506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef7edb-6a70-11ed-949b-1024185a0506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9ef6e50c-6a70-11ed-a459-199d37980406; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 51
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef8e9a-6a70-11ed-a4ed-1eddb0c50106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef8e9a-6a70-11ed-a4ed-1eddb0c50106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9eef8e9a-6a70-11ed-a4ed-1eddb0c50106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9ef765a7-6a70-11ed-9db8-152b84bd0206; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 80
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ef31ee1-6a70-11ed-9290-1974e5cf0406
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ef31ee1-6a70-11ed-9290-1974e5cf0406
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9ef31ee1-6a70-11ed-9290-1974e5cf0406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9efa9a7c-6a70-11ed-81ba-1d34abdd0506; expires=Tue, 20-Dec-2022 14:19:05 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 21
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash af9324714429c9003687bc1cee56ea84
f2761d5c967b1e8426c4d543fa6cf9e118d3f610
60c09553e0bf0846d98ceff9039430474dc9036a813753c88913dedacbff3f32
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 14:19:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 26 Nov 2022 12:50:35 GMT
ETag: "f2761d5c967b1e8426c4d543fa6cf9e118d3f610"
Last-Modified: Tue, 22 Nov 2022 12:50:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 925
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e24c4f7811b51d-OSL
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:05 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
200 OK 87 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash dcfe04133edaa84ac4a7356299134bf2
600265d1e188692d5cb0b9dbc828c708181bd3d8
1f50ba3994c74af69746c8db181597b9e74d7bb53c808ce9f7014facf0c59bfd
GET /vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DH4gCSpZOjdiQ2RHNdcZaQ1gWcI8EDnhtXKaFZT4JUmiFDacp53eylqcVHaDpMgh56JBtwAdvTI=
x-amz-request-id: M2DJX9S4FNAQPE8Z
last-modified: Thu, 27 Oct 2022 07:34:53 GMT
etag: "dcfe04133edaa84ac4a7356299134bf2"
x-amz-meta-ctime: 1666856092
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1666856080
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
age: 2270623
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 11752
x-timer: S1669126746.604713,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 87152
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4500
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126746.640257,VS0,VE87
x-vcl-time-ms: 87
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6b57f424bfd561dbb4f7cc916aa019ba
63dae942ae56ad319076f084fe5f2cdddfe86eaa
dee36f4c7ab75a63ba2c774a1d1b8a5c300b5c9a6ceed341dc20063f7bd61b7b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103441
Date: Tue, 22 Nov 2022 14:19:05 GMT
Etag: "637bb1ac-1d7"
Expires: Wed, 23 Nov 2022 19:03:06 GMT
Last-Modified: Mon, 21 Nov 2022 17:13:16 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6l-6xqBn9tD9S1j7O8RkVwNnYpCyqmXJqE3c3cnMxa9qQjVlQPYiwA==
Age: 6590
trc.taboola.com/forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/visible?route=AM%3AIL%3AV<i=deflated HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2450
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126746.649705,VS0,VE83
x-vcl-time-ms: 83
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
age: 24405
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 3086
x-timer: S1669126746.890253,VS0,VE0
cache-control: private,max-age=31536000
abp: 12
content-length: 254
X-Firefox-Spdy: h2
secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
301 Moved Permanently 0 B URL HTTP/2 secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utils/xapi/multi-sync.html?gdpr=1&p=15414&us_privacy=1---&endpoint= HTTP/1.1
Host: secure-assets.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
date: Tue, 22 Nov 2022 14:19:05 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 559965013e2d7b388533f5e537b57cee
edd1bb28bf8781a82bd917611af353c3a73aa8b2
230c08d7bf687ec3775a25ed1017cbc3adaf006a16921d547154a4ae5e3e20fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6131
Cache-Control: max-age=95732
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 14:19:05 GMT
Etag: "637b955a-1d7"
Expires: Wed, 23 Nov 2022 16:54:37 GMT
Last-Modified: Mon, 21 Nov 2022 15:12:26 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
am-match.taboola.com/sync?dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&excid=22&docw=0&cijs=1&nlb=true
200 OK 1.2 kB URL HTTP/2 am-match.taboola.com/sync?dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
Hash da33a7c13ac7e96b66fa2c8e711d58db
abc09c4687c6364d5d1f96b3def6ff7adbc6b664
d18eddee2656f908e96319f05f018824a59ed5572ff250bcd416de4dc97e6fe6
GET /sync?dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:05 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3406
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=d8b9473a5edf6d34d257bd4b87580f29&sd=v2_a51384c9539693fee06836fb04162af4_e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8_1669126744_1669126744_CNawjgYQ3pxDGMnM0_3JMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8&pi=/t20-topic&wi=-2738045953797954274&pt=text&vi=1669126743625&li=rbox-t2m<=deflated&tim=14%3A19%3A05.660&id=826&llvl=2&cv=20221122-6-RELEASE&
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=d8b9473a5edf6d34d257bd4b87580f29&sd=v2_a51384c9539693fee06836fb04162af4_e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8_1669126744_1669126744_CNawjgYQ3pxDGMnM0_3JMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8&pi=/t20-topic&wi=-2738045953797954274&pt=text&vi=1669126743625&li=rbox-t2m<=deflated&tim=14%3A19%3A05.660&id=826&llvl=2&cv=20221122-6-RELEASE&
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/3/explore?route=AM:IL:V<i=deflated&ri=d8b9473a5edf6d34d257bd4b87580f29&sd=v2_a51384c9539693fee06836fb04162af4_e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8_1669126744_1669126744_CNawjgYQ3pxDGMnM0_3JMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=e26d88bf-6461-4e9e-a77a-e88d7d752bd2-tucta765fd8&pi=/t20-topic&wi=-2738045953797954274&pt=text&vi=1669126743625&li=rbox-t2m<=deflated&tim=14%3A19%3A05.660&id=826&llvl=2&cv=20221122-6-RELEASE& HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126746.890275,VS0,VE82
x-vcl-time-ms: 82
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 43 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:05 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
eus.rubiconproject.com/usync.js
200 OK 10 kB URL HTTP/1.1 eus.rubiconproject.com/usync.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (18728)
Hash 49714970a0fc03d9d97b6f612423ceb5
f20dc2a8964a8fe7319f101eac4f298bfe094426
7a5947cbabf1d1d30e0e04fa1c52da30ce62d78477889a0989d291de4f63c99b
GET /usync.js HTTP/1.1
Host: eus.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://eus.rubiconproject.com/usync.html?gdpr=1&p=15414&us_privacy=1---&endpoint=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Mon, 21 Nov 2022 20:35:26 GMT
Content-Encoding: gzip
Content-Length: 10066
Content-Type: text/html; charset=UTF-8
Cache-Control: max-age=22580
Expires: Tue, 22 Nov 2022 20:35:26 GMT
Date: Tue, 22 Nov 2022 14:19:06 GMT
Connection: keep-alive
Vary: Accept-Encoding
am-match.taboola.com/sync?dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&excid=22&docw=0&cijs=1&nlb=true
200 OK 928 B URL HTTP/2 am-match.taboola.com/sync?dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (928), with no line terminators
Hash 8227d4c992bdc2c4c5804d84b62fda07
83839cdf21b0918f46e16e1e2c732c94b3c13f4f
59b21f9cd8081c4bd058979d3b7c6fab9785b7ce8214db75f94d2bb0d92142cb
GET /sync?dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:05 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 14:19:06 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9f57b2a3-6a70-11ed-9965-102ad03c0306; expires=Tue, 20-Dec-2022 14:19:06 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f57b2f1-6a70-11ed-9965-102ad03c0306
X-fe: 134
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 14:19:06 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFrafGMCEC_9YR0hdwAUqjdEQZceHcwFEgEBAQErfmOGYwAAAAAA_eMAAA&S=AQAAAj3DdTfhMNZWln_0Xy2jFE8; Expires=Wed, 22 Nov 2023 20:19:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f56dddf-6a70-11ed-aaae-143d56a10106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f56dddf-6a70-11ed-aaae-143d56a10106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f56dddf-6a70-11ed-aaae-143d56a10106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 22 Nov 2022 14:19:06 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9f5bfad8-6a70-11ed-a8ae-125b01370206; expires=Tue, 20-Dec-2022 14:19:06 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 93
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f57b2f1-6a70-11ed-9965-102ad03c0306
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f57b2f1-6a70-11ed-9965-102ad03c0306
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=9f57b2f1-6a70-11ed-9965-102ad03c0306 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 22 Nov 2022 14:19:06 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=9f5dff30-6a70-11ed-a05a-1f0541440106; expires=Tue, 20-Dec-2022 14:19:06 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 121
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.sectigo.com/
200 OK 471 B IP
Hash 86776344fc6dd826ff48ca2f315dec8a
23054ddd051e653c90cc3232bbe1ecb88820b29a
7a6a778b4a383d8385e3843a7fd1ad88a5e7182d5627740511dd2c83a6f264c1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 14:19:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:56:48 GMT
Expires: Tue, 29 Nov 2022 13:56:47 GMT
Etag: "23054ddd051e653c90cc3232bbe1ecb88820b29a"
Cache-Control: max-age=602860,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e24c522e31b517-OSL
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:06 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/2 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:06 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 22 Nov 2022 14:19:06 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFrafGMCEJiyn4wEVIvRjdgiA1k5E48FEgEBAQErfmOGYwAAAAAA_eMAAA&S=AQAAAl9usTpeP49qBzwPzXrn3FQ; Expires=Wed, 22 Nov 2023 20:19:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 14:19:06 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBFrafGMCELoMy0WSckpXj7PPbqonDCMFEgEBAQErfmOGYwAAAAAA_eMAAA&S=AQAAAvcdKDLYAzI6HGYhm_EHIdI; Expires=Wed, 22 Nov 2023 20:19:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&excid=22&docw=0&cijs=1&nlb=false
200 OK 2.1 kB URL HTTP/2 am-match.taboola.com/sync?dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
Hash 905d653bd5fca92c2fa82491235cecc2
41e3c41c9668eb0df2eef615abd3ff8445293e9a
0ee7d0a49ef9695ad6b7a1a893a1101e95d1ab808e9ac8c8e6509706e7caecad
GET /sync?dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:05 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3406
X-Firefox-Spdy: h2
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://magedyakot6.rigala.net
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:06 GMT
via: 1.1 varnish
x-served-by: cache-bma1665-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1669126750002&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=462956179&tz=0&viewable=true&ddast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vB!dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!ntvc_vA!smbs!t45!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
200 OK 575 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1669126750002&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=462956179&tz=0&viewable=true&ddast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vB!dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!ntvc_vA!smbs!t45!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
IP
Hash 1ddd8536a7dc8d7b121fffc42e1664b5
8557e42283deb19eeb353709b04388c5c3f0228a
9c9add4054203523cfcc314223be8d9338eb60454469e432f0b52e2eba7cf611
POST /VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1669126750002&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=462956179&tz=0&viewable=true&ddast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vB!dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!ntvc_vA!smbs!t45!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1446
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126750.225578,VS0,VE113
vary: Accept-Encoding
X-Firefox-Spdy: h2
magedyakot6.rigala.net/t20-topic
200 OK 0 B URL HTTP/2 magedyakot6.rigala.net/t20-topic
IP
GET /t20-topic HTTP/1.1
Host: magedyakot6.rigala.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache
pragma: no-cache
expires: Tue, 22 Nov 2022 00:00:00 GMT
last-modified: Tue, 22 Nov 2022 14:19:02 GMT
vary: User-Agent
set-cookie: exadd=166914; expires=Tue, 22-Nov-2022 18:19:02 GMT; Max-Age=14400
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
magedyakot6.rigala.net/serviceworker.js
200 OK 0 B URL HTTP/2 magedyakot6.rigala.net/serviceworker.js
IP
GET /serviceworker.js HTTP/1.1
Host: magedyakot6.rigala.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: exadd=166914; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/javascript
last-modified: Thu, 25 Feb 2021 14:30:57 GMT
etag: W/"6037b4a1-b0d"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:05 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1669126749967&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=462956179&tz=0&viewable=true&ddast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vB!dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!ntvc_vA!smbs!t45!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1669126749967&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=462956179&tz=0&viewable=true&ddast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vB!dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!ntvc_vA!smbs!t45!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1669126749967&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=462956179&tz=0&viewable=true&ddast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vB!dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!ntvc_vA!smbs!t45!t45!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1467
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:10 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126750.191709,VS0,VE129
vary: Accept-Encoding
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/lang/ar.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/lang/ar.js
IP
GET /rs3/64/frm/lang/ar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=74879
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:39:39 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1316363
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGvx0Ra2%2FOEEItFqz6XIfS8RfggvmT7xx%2F1X3SYQodLx%2Bj7tF%2B1rl5zfeXlaPOgW1ofmwzbGCfcBrd6uES1XTnZ05WAtkb8Qb0ihV%2FdEUJgRHwxtr%2Fq1BedXJhjrjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c3f1a13b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/ograph/fb_login.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/ograph/fb_login.js
IP
GET /rs3/64/frm/ograph/fb_login.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:33:34 GMT
last-modified: Tue, 27 Aug 2019 14:00:11 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1316728
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sSw6ESTqwwyzS%2F6fBOqAPOBrHnTJTghHqIJc1yp56jH3VnV1CBlOFDGd1%2BAS9s4B%2BcSsILkzagp%2Fr1%2B8XCn0G5KMUgyqM7p69tb9tY5pXvz4GSKl8ZHVnHTEJCiIlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c3f2a3db51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.404
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.404
IP
GET /pfe/current/universal.min.js?v=3.1.404 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magedyakot6.rigala.net/
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 14:15:02 GMT
etag: W/"637cd966-180b9"
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=magedyakot6.rigala.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=magedyakot6.rigala.net
IP
GET /syncframe?origin=rtus&topUrl=magedyakot6.rigala.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=284a2e86-adac-4b72-b829-44a2303242f7; expires=Sun, 17 Dec 2023 14:19:03 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 857617
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:06 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/jquery/marquee/jquery.marquee.min.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/jquery/marquee/jquery.marquee.min.js
IP
GET /rs3/64/frm/jquery/marquee/jquery.marquee.min.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/x-javascript
last-modified: Tue, 27 Aug 2019 14:00:14 GMT
expires: Tue, 07 Nov 2023 08:27:36 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
cf-cache-status: HIT
age: 1317086
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VxaA7cmpenu2GvYjIKVl3OMxGn8Y9gx%2B8gGAUYpRm2cYUd4E9YmZDWLvtUXWQSYJY1901sx1wkIuzbqnEnF4rOoybLHH%2FYSu6SgDXb6ZoVkf3mVAkW7YyXLkyVKK6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c3f1a15b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stootsou.net/pfe/current/tag.min.js?z=2308013
200 OK 0 B URL HTTP/2 stootsou.net/pfe/current/tag.min.js?z=2308013
IP
GET /pfe/current/tag.min.js?z=2308013 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 14:15:02 GMT
etag: W/"637cd966-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1669126744897&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-398613867&tz=0&viewable=true&ddast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1669126744897&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-398613867&tz=0&viewable=true&ddast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1669126744897&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-398613867&tz=0&viewable=true&ddast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1421
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126745.138965,VS0,VE119
vary: Accept-Encoding
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&cmcv=&pix=undefined&cb=1669126744884&uv=3243&tms=1669126744884&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0aa77ac1-57ed-4d9f-8a3f-12add9091ae1&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&cmcv=&pix=undefined&cb=1669126744884&uv=3243&tms=1669126744884&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0aa77ac1-57ed-4d9f-8a3f-12add9091ae1&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7tPkCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJLBw-HYLj2Ot2q1MbtHIOXMLF56ZWzFZmEzOwXKxcDmGQAILh2-38DjWqt3K5BaNnDO3cOGZuRWThcnkHCwXC5djChE3GQ6fg4Go6Hpb7A6n2fMGFDSdDp_rXq92-Fwm58PrN93mkqfPYXbY5S7TX3QZrEV_w9NjBwAAAICH____fwgAAACACAAAAAAJAAAAAIqAin8LgQsAAAAAjP___38NgE8Ogvec_f4AAAAAAAEAAAAgARhYDSgB-DhfOfn_________jxmgz7yR-f___78x6AF48AF4EAIAALgYKvIYHZ-2vHYmKuAsYgQAAACwpaWieTSpEyqLqv___34rgCsAgADCT1p0iizdQYm3MAAAgICxBXpY_H6zw67xu132_________2_2f_aPJvQ2ep0WxDJ6rfYLCACw9gsIAMCmbgAAbwFwQUfQisFgdQqxG84Wu9FsM5odAAAAwN3___-_Hki4FpvhaONcbZaz5Wbmchlmw81sZjGMFrPJwmbaXlsiz6sZ6SNlX8RNhsPnYCAqut4Wu8Np9tyPoiXL3XK3Gk0Wo9FyudkNN6PB_gZisBrgRAyWy8lkMdmtRqvRZrgbzQYLFIjBBClasloul6vNZrXajRazwWY53GyQolWr2WgzGK5mk9lutxoOhsvRCClastwtd6vRZDEaLZeb3XAzGgwRpiyzkXE4sbllo9liLVo5V26Fb7dwq4zDkW_kW00mJsta9PqYHr7ZamYyblEwQGMvkqdFOhEZJ87RbrNwrUw228gzGllWu4nJNDHuVsPBzLKciCWak0U6kV32DddiMxxtnKvNcrbczFwuw2y4mc0shtFiNlnYTPuWZTYyDic2t2w0W6xFK-fKrfDtFm6VcTjyjXyrycRkWYteH9PDN1vNTMZ9YzZbLiaz3Wi0b8xmy8VkthuN9h06w3f1ORudwfHEY9PdhH1nyuYwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwQX6UTmt7zeftPTb3crLBexRGm6SCd60WWwFv0NT49FLBGcLtKJ6GU8XdR_ZMjFXDmYiyZzxWq0SgAAAAAAAAAAS5gzbwIAAABwGshosBmu1nkgg-Vgt1wtFwDC2Uv3h68ikbrMPHJXGyDQNqelzKO48eMG81teb7_p6be7FZYrAzxQkzNv_kwQa7Va1gAAAALYAAAAAdy6eQvAZuL_____4wAAAGTk6AEAAMT3gaLijlwp9MIB!&cmcv=&pix=undefined&cb=1669126744884&uv=3243&tms=1669126744884&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=0aa77ac1-57ed-4d9f-8a3f-12add9091ae1&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126745.114725,VS0,VE24
vary: Accept-Encoding
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1669126744966&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-398613867&tz=0&viewable=true&ddast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1669126744966&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-398613867&tz=0&viewable=true&ddast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1669126744966&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=-398613867&tz=0&viewable=true&ddast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&mPre=0.025&cirf=https%3A%2F%2Fmagedyakot6.rigala.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://magedyakot6.rigala.net
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1466
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://magedyakot6.rigala.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126745.212384,VS0,VE96
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=k4AnUF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTFXYVdOQm5Ed0ZTaTdEcCUyRnlRWjlodQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:03 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=lb17dF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTNub1RLUlNjWnM1azJsWnhDeDZtelU; expires=Sun, 17 Dec 2023 14:19:03 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 431326
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/jquery/cookie/jquery.cookie.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/jquery/cookie/jquery.cookie.js
IP
GET /rs3/64/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:02 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:48 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1317134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wuNv1nhV9ASV%2B7uQvmGNoyNYXemXElJX2GHhqJJFUTaFs50%2Fhj1ALP5JBR%2BQdRCpFyfg%2BuRG%2BTYC4Zepm43OVNQ9N%2BnYi4%2F0ihBJFVfufHjv177RlA03e95nJ5pwhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e24c3f3a4eb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&cmcv=&pix=undefined&cb=1669126744962&uv=3243&tms=1669126744962&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=30899e41-a07f-43b0-bb56-5f96d8e416b5&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&cmcv=&pix=undefined&cb=1669126744962&uv=3243&tms=1669126744962&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=30899e41-a07f-43b0-bb56-5f96d8e416b5&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7yhwCFgMTE7_xuABVNgQTE7_xuABVNgUAAAAGBuIHJDMYLpcr02KtMOxmbtFmYlhLLK7ZWjVzzkbGlWkxm7iGQALLjW0528zWKsdyuRbNhpu1wrJbuGUL18Y1sXkczs1qCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjegoOl0-Fz3erXD5zI5H16_6TaXPH0Os8Mud5n-ostgLfobnh47AAAAADwAWL1lQvwAAgBEAAAAAEgAAAAAUARU_FsIXAAAAABgABiQXGgAfHIQvOfs9wcAQMMWCACAAAYJwMBqQAnAx_nKCQAAAAAAAAAAy____38MwB7WmAzAyP5OD8CDD8ADUYFhESMAAACALS0VzaNJnVBZVAEAEKRbAVwBAAQQftKqu4UBAAAEjC3Qw-L3mx12jd_tMgAAAAAAAAAAs_-zfzSht9HrtCCW0Wu1X0AAgLVfQAAANnUDAHgLgAs6glYMBqtTiN1wttiNZpvR7AAAAADu_v____VAwrXYDEcb52qznC03M5fLMBtuZjOLYbSYTRY20_baEnlezUgfKfs8hGX2-w4iludr-hsOMr7l9TaIiq63xe5wmj33o2jJcrfcrUaTxWi0XG52w81osL-BGKwGOBGD5XIyWUx2q9FqtBnuRrPBAgViMEGKlqyWy-Vqs1mtdqPFbLBZDjcbpGjVajbaDIar2WS2262Gg-FyNEKKlix3y91qNFmMRsvlZjfcjAZDhCnLbGQcTmxu2Wi2WItWzpVb4dst3CrjcOQb-VaTicmyFr0-podvtpqZjFsUDNDYi-Aincj8ltfbb3r67W6F5SKWaE4W6UR22Tdci81wtHGuNsvZcjNzuQyz4WY2sxhGi9lkYTPtW5bZyDic2Nyy0WyxFq2cK7fCt1u4VcbhyDfyrSYTk2Uten1MD99sNTMZ943ZbLmYzHaj0b4xmy0Xk9luNNp36Azf1edsdAbHE49NdxP2nSmbw6BwGSze3-cibUYbN6NKG7ZYVNfizjWx6rSxk7FzMBsUvuE1Mfz91M9rN3s7iA0GRSwRnC7SiehlPF3EEsnTIp3IHI7JZGWajAYjy8zj8S0WxuVy41hYPAvXYuSyTMQSpekinehFl8Fa9Dc8PRb1HxlyMVcO5qLJXLEarRIAAAAAAAAAwBLmzJsAAAAAnAYyGmyGq-UCQDh76f7wVSRSl5lH7moDBNrmtJR5FDd-3GB-y-vtNz39drfCcmWAB2py5s2eCWKtVssaAABAABsAACCAWzdvAdiM3D5QVNyRK4VeOA!&cmcv=&pix=undefined&cb=1669126744962&uv=3243&tms=1669126744962&abt=dfrc_vB!id5mc_vA!iiqrc_vB!mprdctdt6_vA!Noappq22_vB!ntvc_vA!smbs!t45!t45!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=30899e41-a07f-43b0-bb56-5f96d8e416b5&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://magedyakot6.rigala.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 14:19:05 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669126745.193388,VS0,VE26
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=lb17dF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTNub1RLUlNjWnM1azJsWnhDeDZtelU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 14:19:04 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=4e36M180M0RITmhlJTJCZkMwOUJGQlhaMUN2czdCUnA3dWJzVGt1NUlWcmlJeHk0RTFBbXFVMkJiM1FRY1ByNHp5aVBsY1k; expires=Sun, 17 Dec 2023 14:19:04 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 370872
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
94.23.159.185
104.21.235.175
142.250.74.174
178.250.2.146
2.23.134.137
23.36.76.226
141.226.228.48
3.66.124.166
157.240.200.14
185.106.33.48
34.241.86.223