r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6527
Expires: Tue, 04 Oct 2022 12:03:14 GMT
Date: Tue, 04 Oct 2022 10:14:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 09:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: t41yexCiNn18KK0SrGwfQFM08lkfcFTzrbqP-DAgEir8FISquZST4g==
Age: 1643
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dEqoM6xLznHSHEMldivP9wFiUkvsiFdgnpDe-iOY11PEUsq0AQTdxQ==
age: 17160
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 10:14:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.spl-notice.com/etisalat/Care_files/googlefonts.css
200 OK 593 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/googlefonts.css
IP
File type ASCII text, with CRLF line terminators
Hash 86b88ecc9cbc692944f2d317df7648ea
cc11b977b1e61bf1ebb28a96a76699634f184c19
9934a824e285424be1f10e7c05b29d32c0d5e7c3eff0ef519710cf0fc5d9d50d
GET /etisalat/Care_files/googlefonts.css HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: text/css
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-a82"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/hmd.css
200 OK 8.1 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/hmd.css
IP
File type ISO-8859 text, with CRLF line terminators
Hash 9d0dd408ff960369f65008807faaf078
d2b350c9165c770ba043df49b034ac2b68e5f292
37d7e5a63768db08cda048022f4b8928a8e650d75e94f809d3d05014296eea57
GET /etisalat/Care_files/hmd.css HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: text/css
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-a338"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/interceptor
404 Not Found 179 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/interceptor
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/interceptor HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 04 Oct 2022 09:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 04 Oct 2022 10:27:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: meJVOzdqkPg4Enb_4TplfnztLSvizqNQt4rnUCpB4uDx8Ng94jEkSQ==
Age: 2694
www.spl-notice.com/etisalat/login.html
200 OK 126 kB URL HTTP/1.1 www.spl-notice.com/etisalat/login.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19074)
Size 126 kB (126252 bytes)
Hash 2980fc1ea5a315e86419de42b9923514
9d4a1b666b9472fb5fec8c2f3064e915a4319c13
f80bd5bed6bd023e233ffc504106afde315dfb5c71b74f14d7732f7956399526
Analyzer Verdict Alert openphish Etisalat
fortinet Phishing
GET /etisalat/login.html HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 03 Oct 2022 18:06:30 GMT
X-Proxy-Cache: HIT
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/labels.js
200 OK 4.8 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/labels.js
IP
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash ec42fba582b3c5841776d9fba8d31101
cc8e1a00426e8487517e61a25ef361065dd0c16e
f2bd6d1a47c3a0a77ed7b1fe3f3b1b6ab429050123f05c3d2889f226287e6416
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/labels.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-3a2b"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/engine.js
200 OK 13 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/engine.js
IP
Hash 9d4fe5094b38a3c6787a890b021b6b6e
9eee8d573ced71c19da6145090ad85ce300f0416
3f62b82f69f2c7332a106d2578cef895f82fdd295e21e5b1cf2e4e0f03662c7c
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/engine.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-b3e6"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/util.js
200 OK 12 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/util.js
IP
Hash ed00e6ef219e8d53569f8b6367e3dcb3
df945fa76689503b2837efe9dce79139da2ae26e
6aeadfd91bda1d49901ee146e685bb43b045de0f01d8c72082d50d11fcbac611
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/util.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-b49c"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6161
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:28 GMT
Last-Modified: Tue, 04 Oct 2022 08:31:47 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
www.spl-notice.com/etisalat/Care_files/CaptchaServlet.txt
404 Not Found 179 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/CaptchaServlet.txt
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/CaptchaServlet.txt HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/api.js
200 OK 467 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/api.js
IP
File type ASCII text, with very long lines (729), with no line terminators
Hash 17047fcf7f8f530cae0b0e6e93db208e
e6c20cab18ba0bdf57e8773776dd35fb775e04db
48ba4d0bd9c6660223558120266f9beac9dce9656fdeb1e725efca31306d2c4a
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/api.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-2d9"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/b2c-routes.js
200 OK 74 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/b2c-routes.js
IP
File type ASCII text, with CRLF line terminators
Hash 5afd8fabfbb11722b9cc57e09e18e0b7
e7261d82fc7931a323608add8d674af11262406d
f77f91f7b30a030ee8af5d3741c0494d4d46c33ed3cc12aa163460592f4a47e5
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/b2c-routes.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-749fd"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iqMyojHbMLU7bJCVJpJIOA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4k6WGGNN45RgnxlM5R1d103vI7Q=
www.spl-notice.com/etisalat/Care_files/app.css
200 OK 290 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/app.css
IP
File type Unicode text, UTF-8 text, with very long lines (62701), with CRLF line terminators
Size 290 kB (290339 bytes)
Hash f9fe80e89f73823b5300fe07d9531804
031e1880d886e8b28cc1095ae775bb6dd15d2a2e
e14230d74cbf213cfbf34e6b52ad2925328526266bef87bee5299d82878696b0
GET /etisalat/Care_files/app.css HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:27 GMT
Content-Type: text/css
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-1d803d"
Expires: Tue, 11 Oct 2022 10:14:27 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-TSZ46Z
200 OK 117 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TSZ46Z
IP
File type Unicode text, UTF-8 text, with very long lines (35218)
Size 117 kB (117323 bytes)
Hash 085c20b378ec9a64eea130760f5a989a
c518cdd7ca7feb5423a009938d09ed7268081159
cdf0b1a168e088bb0e06f2e6d89441b404348a7d86a534b845f1434cfe41fd3d
GET /gtm.js?id=GTM-TSZ46Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 10:14:28 GMT
expires: Tue, 04 Oct 2022 10:14:28 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 117323
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.spl-notice.com/etisalat/Care_files/loading.gif
200 OK 76 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/loading.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash 032bf6d985eb0dfb558fddacf39006c7
c089052df1f20017f7273ef9702620d3e54c0278
af2d8b18228e5de40356984301eba416c02bdb4a9f4a3946e1a157abb3b16d94
GET /etisalat/Care_files/loading.gif HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: image/gif
Content-Length: 75841
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Connection: keep-alive
ETag: "5d8e3072-12841"
Expires: Tue, 11 Oct 2022 10:14:28 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Accept-Ranges: bytes
www.spl-notice.com/etisalat/Care_files/anchor.html
200 OK 11 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/anchor.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11769)
Hash 3969f9d0fefdc878b1b4e093ee095b43
43a67867f7f9a361143b3cd7492e92545fdc4c91
d6062a110cae54529a10bdaebdccdecdb1d105a44a55f13327ea51da48168d00
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/anchor.html HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 27 Sep 2019 15:53:24 GMT
X-Proxy-Cache: HIT
Content-Encoding: gzip
www.spl-notice.com/etisalat/Care_files/CaptchaServlet.txt
404 Not Found 179 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/CaptchaServlet.txt
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/CaptchaServlet.txt HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
www.spl-notice.com/etisalat/fonts/neotech-regular.woff
404 Not Found 153 B URL HTTP/1.1 www.spl-notice.com/etisalat/fonts/neotech-regular.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 841102042dfedb8a9dcc0e6a9966307f
313ea8da3498deebf7f443093638df7501ce60c6
6ad407809dc8e6d079dfbd21823508dffb897b97a27eb8ae43acbea1b7c8df0d
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/fonts/neotech-regular.woff HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/app.css
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html
Content-Length: 153
Connection: keep-alive
Vary: Accept-Encoding
www.spl-notice.com/etisalat/Care_files/1YwB1sO8YE1Lyjf12WNiUA.woff
404 Not Found 153 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/1YwB1sO8YE1Lyjf12WNiUA.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 841102042dfedb8a9dcc0e6a9966307f
313ea8da3498deebf7f443093638df7501ce60c6
6ad407809dc8e6d079dfbd21823508dffb897b97a27eb8ae43acbea1b7c8df0d
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/1YwB1sO8YE1Lyjf12WNiUA.woff HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/googlefonts.css
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html
Content-Length: 153
Connection: keep-alive
Vary: Accept-Encoding
www.spl-notice.com/etisalat/Care_files/H2DMvhDLycM56KNuAtbJYA.woff
404 Not Found 153 B URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/H2DMvhDLycM56KNuAtbJYA.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 841102042dfedb8a9dcc0e6a9966307f
313ea8da3498deebf7f443093638df7501ce60c6
6ad407809dc8e6d079dfbd21823508dffb897b97a27eb8ae43acbea1b7c8df0d
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/H2DMvhDLycM56KNuAtbJYA.woff HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/googlefonts.css
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html
Content-Length: 153
Connection: keep-alive
Vary: Accept-Encoding
www.spl-notice.com/etisalat/fonts/ge_ss_two_light.ttf
404 Not Found 113 B URL HTTP/1.1 www.spl-notice.com/etisalat/fonts/ge_ss_two_light.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash fa654187ff3fa5d00f447d5c53990518
0c996af2521a1c3fef0a0738dcc9bbd00e6bee1d
2a447af4bd6b0dddf926fcde3f29c0464cddd299ce4bbcffa97804efd6f33693
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/fonts/ge_ss_two_light.ttf HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/app.css
HTTP/1.1 404 Not Found
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/1.1 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57443), with no line terminators
Hash 1e9c4d503a9e162d8b549dc3d9c040e2
1fa99d7d7e878cdd45567af4b0c3c65542036c1d
f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 15317
Last-Modified: Tue, 30 Aug 2022 20:19:10 GMT
Cache-Control: no-cache
Content-Type: application/javascript; charset=utf-8
Content-Encoding: gzip
Etag: "d4de8398858246712016031c834bb061+gzip+gzip"
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 10:14:28 GMT
X-Served-By: cache-iad-kcgs7200165-IAD, cache-bma1627-BMA
X-Cache: HIT, HIT
Vary: Accept-Encoding,Host
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4095
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:28 GMT
Last-Modified: Tue, 04 Oct 2022 09:06:13 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
www.spl-notice.com/etisalat/Care_files/anchor_data/JBwSXsc__bL1AIIwyKh3QnwBHg7D-WM3_5_AwioMKBk.js
200 OK 5.5 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/anchor_data/JBwSXsc__bL1AIIwyKh3QnwBHg7D-WM3_5_AwioMKBk.js
IP
File type ASCII text, with very long lines (12267), with no line terminators
Hash 35e3c7284d93a4d278b2a04aa551be1b
a56f2d58e6762cba8a704066ede2aa370f031410
85879fca6c6c509c575db95efe3fc3da958743201a0cb42aa2a5f8a6e055b536
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/anchor_data/JBwSXsc__bL1AIIwyKh3QnwBHg7D-WM3_5_AwioMKBk.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/anchor.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-2feb"
Expires: Tue, 11 Oct 2022 10:14:28 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 04 Oct 2022 08:41:09 GMT
expires: Tue, 04 Oct 2022 10:41:09 GMT
cache-control: public, max-age=7200
age: 5599
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.spl-notice.com/etisalat/Care_files/bframe.html
200 OK 1.2 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/bframe.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a04cf9b4ff547671c6062a5580e5f984
a5c4fae7b3178e3f080d50a430b7797b65b1fb5d
86cff9c4f02968466328fe80bb7de58b349182bf643041eeb2bf378251ea51e8
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/bframe.html HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/login.html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 27 Sep 2019 15:53:24 GMT
X-Proxy-Cache: HIT
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9157623.fls.doubleclick.net/activityi;src=9157623;type=remar0;cat=etisa0;ord=7825439033215;gtm=2wg9s0;auiddc=1064115453.1664878468;u1=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html;~oref=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html?
200 OK 373 B URL HTTP/1.1 9157623.fls.doubleclick.net/activityi;src=9157623;type=remar0;cat=etisa0;ord=7825439033215;gtm=2wg9s0;auiddc=1064115453.1664878468;u1=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html;~oref=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (528), with no line terminators
Hash bbdad113b61ccee756c1052a2129aa89
28881fdf7ff878ee8c321a7a2395fece43058c7f
68ef6026b24bc1882a6f375ce985c4c9ac5beebb33cbf19f72f255d7505950f1
GET /activityi;src=9157623;type=remar0;cat=etisa0;ord=7825439033215;gtm=2wg9s0;auiddc=1064115453.1664878468;u1=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html;~oref=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html? HTTP/1.1
Host: 9157623.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 04 Oct 2022 10:14:29 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Strict-Transport-Security: max-age=21600
Content-Type: text/html; charset=UTF-8
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 373
X-XSS-Protection: 0
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: EpDYTciqPofIvTa055qkjOkrGpmsuwkXvactWQue0R4P6NRDVO0hJxtXT5ZtD5dVXug00ixH8/Mib04LFr5VRQ==
content-length: 26840
x-fb-trip-id: 1904183273
date: Tue, 04 Oct 2022 10:14:29 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=68193
date: Tue, 04 Oct 2022 10:14:29 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b45b15bb651cc185ea82d91a51f06b5a
44987727be72bb12b4e4fc4fac50145835512750
f0b61426de169cf2efde87ac98d5123ea785004ad05c05932a099b644b2fdf64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/gtm/optimize.js?id=GTM-T57KNFL
200 OK 49 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=GTM-T57KNFL
IP
File type ASCII text, with very long lines (21890)
Hash 13ea8ec3a452ac8399b9f1f53b624799
473d2d45c3be8e9eef3d3732f3bc26f0628a1925
8c8a5d39a814c31d4054b6516b9763fb200597fdcdd9fb4b1f00ebe46d673085
GET /gtm/optimize.js?id=GTM-T57KNFL HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 10:14:29 GMT
expires: Tue, 04 Oct 2022 10:14:29 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48739
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=1831CA5EC1786FAB05C0D86DC02F6EDB; domain=.bing.com; expires=Sun, 29-Oct-2023 10:14:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0CD51A2D65B54D5086C7CC3B3221E9EB Ref B: OSL30EDGE0407 Ref C: 2022-10-04T10:14:29Z
date: Tue, 04 Oct 2022 10:14:28 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 904a0d87402d9eecfec00481cdb28d62
6b37e41d4321718433996e4c1f4eed2f8f1727fc
e0884556a581a67e0e212887e97ca7f4438ef644fea7a0efd10175902f5e77e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2511
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 09:32:38 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
www.spl-notice.com/etisalat/Care_files/bframe_data/styles__ltr.css
200 OK 95 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/bframe_data/styles__ltr.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 72a474ec197d8624a6bd08f71efc2d48
7d826404ea82e5465b0d5e14477ea3724d5dfc38
915be588ff87bc3be2829410f572cd4cfd442f43052439e1a6efc9cb86c7c5d3
GET /etisalat/Care_files/bframe_data/styles__ltr.css HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/anchor.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: text/css
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-227e9"
Expires: Tue, 11 Oct 2022 10:14:28 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 04 Oct 2022 10:14:29 GMT
expires: Tue, 04 Oct 2022 10:14:29 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4096
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 09:06:13 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 38ea1e4d24ca95b2f1da26f24df03559
bd5d4ca979822e0bc5b3e8d5e4a4617f276057e0
82123bf409adc45c0a830654ad76d954f44e4a8aae01ecebbfe769259096cdf3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5999
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 08:34:30 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
i.l.inmobicdn.net/helix-cors/custom/js/idspPixel/v4/min.pixel.js
200 OK 651 B URL HTTP/1.1 i.l.inmobicdn.net/helix-cors/custom/js/idspPixel/v4/min.pixel.js
IP
File type ASCII text, with very long lines (1187), with no line terminators
Hash c9cb059b770cede9e829b73ae0573569
0598460c0a35f18278dbcf7b02aa95ee9d680d4d
5f6f298a1b1354f37bd68a9b91d5cf9629ff8c8e1686a191864184e3de7b5d20
GET /helix-cors/custom/js/idspPixel/v4/min.pixel.js HTTP/1.1
Host: i.l.inmobicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 10:14:29 GMT
Connection: Keep-Alive
ETag: "1638450682"
Cache-Control: max-age=38716
Content-Encoding: gzip
Content-Length: 651
Content-Type: application/x-javascript
Last-Modified: Thu, 02 Dec 2021 13:11:22 GMT
Accept-Ranges: bytes
X-HW: 1664878469.dop222.sk1.t,1664878469.cds215.sk1.shn,1664878469.dop222.sk1.t,1664878469.cds235.sk1.c
Access-Control-Allow-Origin: *
secure.adnxs.com/seg?add=29637970&t=2>mcb=383653340
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=29637970&t=2>mcb=383653340
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=29637970&t=2>mcb=383653340 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 10:14:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D29637970%26t%3D2%26gtmcb%3D383653340
AN-X-Request-Uuid: 1def845a-fe0a-494a-8607-789996a554e2
Set-Cookie: uuid2=4636917018047729025; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 10:14:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 312 B IP
Hash ea112afcbc5159581c7a2ab15f91d4b8
d4bc73c7ba1db71f58366b3f243b0c1fea9eac7b
56d1f4941f66992387fe5cd926e73414484810726724291a46e19441090933a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6147
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 08:32:02 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 312
www.gstatic.com/recaptcha/releases/Zy-zVXWdnDW6AUZkKlojAKGe/recaptcha__en.js
404 Not Found 1.6 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Zy-zVXWdnDW6AUZkKlojAKGe/recaptcha__en.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash b7490d04083b4367d72cfa06c3a0f237
df095435455df237659750f238808e967c7ce370
13cd32d35b43fbac0df38d403f2f7ecefb10e47719bcfbbba510c9445154e975
GET /recaptcha/releases/Zy-zVXWdnDW6AUZkKlojAKGe/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Tue, 04 Oct 2022 10:14:29 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
creativecdn.com/tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524
302 Found 0 B URL HTTP/2 creativecdn.com/tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:14:29 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=rmFH8wxag7TDglisDIr5;Path=/;Domain=.creativecdn.com;Expires=Wed, 04-Oct-2023 10:14:29 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1664878469;Path=/;Domain=.creativecdn.com;Expires=Wed, 04-Oct-2023 10:14:29 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524&tc=1
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=9157623;type=remar0;cat=etisa0;ord=7825439033215;gtm=2wg9s0;auiddc=1064115453.1664878468;u1=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html;~oref=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html
200 OK 373 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=9157623;type=remar0;cat=etisa0;ord=7825439033215;gtm=2wg9s0;auiddc=1064115453.1664878468;u1=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html;~oref=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (527), with no line terminators
Hash 719824073e42a76afa352583dd58c369
5ae96030ced555ee940cf5dc84049b7cbbccea12
84b801a27f403c96b866265bea98f48a261bb0b16cb7d92d5bd0995a493f375f
GET /ddm/fls/i/src=9157623;type=remar0;cat=etisa0;ord=7825439033215;gtm=2wg9s0;auiddc=1064115453.1664878468;u1=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html;~oref=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://9157623.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 10:14:29 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 373
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
creativecdn.com/tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524&tc=1
204 No Content 0 B URL HTTP/2 creativecdn.com/tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524&tc=1
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?type=iframe&id=pr_Wu0DIU5lLy56UZdgqCMM&id=pr_Wu0DIU5lLy56UZdgqCMM_custom_lang_undefined&id=pr_Wu0DIU5lLy56UZdgqCMM_lid_oSY07Kpa4Q7eigFStjke&su=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&sr=&ts=1664878468524&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.spl-notice.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=1cec4518-0488-441f-9c7e-4284c440b7a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=1cec4518-0488-441f-9c7e-4284c440b7a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=1cec4518-0488-441f-9c7e-4284c440b7a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=69499e97-0adc-4d63-a8f5-00f48b4ee341; Max-Age=63072000; Expires=Thu, 03 Oct 2024 10:14:29 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: d8f73f704b226f0f
strict-transport-security: max-age=0
x-response-time: 103
x-connection-hash: e3e03a5588e88845c0b9eb0edbb8c1a7d6fe072b8e962999e1d9217e91019e10
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=907833b9-1cad-4f9a-a408-592b6037fbf1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=907833b9-1cad-4f9a-a408-592b6037fbf1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=907833b9-1cad-4f9a-a408-592b6037fbf1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:28 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=fcad1e4d-24fe-42e8-942e-fce07c4ca7fc; Max-Age=63072000; Expires=Thu, 03 Oct 2024 10:14:29 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 5c9bf44cd6109e12
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: e3e03a5588e88845c0b9eb0edbb8c1a7d6fe072b8e962999e1d9217e91019e10
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1432586.js?sv=7
200 OK 3.0 kB URL HTTP/2 static.hotjar.com/c/hotjar-1432586.js?sv=7
IP
File type ASCII text, with very long lines (3790)
Hash 98354237fb7db3b7c31da3bcf9ca810e
d45490ace924a4aa559d3a6bd07073e561b35690
b781de7f45ce45b3be79e54440f3d4d6c1241299e60f7b0c1265a82b4c6d5832
GET /c/hotjar-1432586.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Tue, 04 Oct 2022 10:14:06 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/2c52b2de41aac9c5533d249b1eac13fc
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rbCi7n4t-d2U1eNWKZlLO7XNAsbWnuvBAz0mmud374evjfc3Bpf6BA==
age: 23
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C5NC3CLQ5ECR7VU42P60&lib=ttq
200 OK 37 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C5NC3CLQ5ECR7VU42P60&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65464)
Hash ffbb0003685ecefe62596e0bb164fc74
774fe4428a3a0a31931c2d3cb978c7ca654f9958
d871a7dde3ed86e72236be761b87941b91e622f3be2e18f950dc69b59523e90b
GET /i18n/pixel/events.js?sdkid=C5NC3CLQ5ECR7VU42P60&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202210041014292F30B46329395025C1F7
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465b15d10091ccaecd9e934516b57fa0694b4f33c66ba5a21be4e56ae47cd66279d3e2bb294234bb811665e59190a33ec4e9
content-encoding: gzip
expires: Tue, 04 Oct 2022 10:14:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 10:14:29 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=1, origin; dur=107
x-origin-response-time: 108,23.36.79.28
x-akamai-request-id: 5168c9f
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5aa6118ac8308288d21744b863e581c7
c60ff431fab303691622edbf3cb4977b231c3c5b
4ed957d024c0ff27187e0c0b47c3788e90250ec1d4b4e7b3f0e5f5ce8d6cee76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3008
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 09:24:21 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.tiktok.com/i18n/pixel/config.js?sdkid=C5NC3CLQ5ECR7VU42P60&hostname=www.spl-notice.com
200 OK 347 B URL HTTP/2 analytics.tiktok.com/i18n/pixel/config.js?sdkid=C5NC3CLQ5ECR7VU42P60&hostname=www.spl-notice.com
IP
ASN #20940 Akamai International B.V.
Hash 448614da126fefc770fc81ca233ceb1a
2587a06dea65fffaa97ee64d065e07006c6e440a
0fe7ab9bb7d80934fa4996ffaef3b70b0b69fdf3afe0018d2664d9f0917c0d0f
GET /i18n/pixel/config.js?sdkid=C5NC3CLQ5ECR7VU42P60&hostname=www.spl-notice.com HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 202210041014292B978AD2410CAE2872F2
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465bc617f92a7fe33f79d8f58a39e7db59806842bd2e488e807292af1ac582ed630898c461fba51f27ee03d9196ead86b868
content-encoding: gzip
expires: Tue, 04 Oct 2022 10:14:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 10:14:29 GMT
content-length: 347
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
set-cookie: _ttp=2FfM1P0GvxLmhTCy98EV3zUr27I; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=4, cdn-cache; desc=MISS, edge; dur=1, origin; dur=99
x-origin-response-time: 99,23.36.79.28
x-akamai-request-id: 5168f70
X-Firefox-Spdy: h2
www.spl-notice.com/etisalat/Care_files/recaptcha__en.js
200 OK 102 kB URL HTTP/1.1 www.spl-notice.com/etisalat/Care_files/recaptcha__en.js
IP
File type ASCII text, with very long lines (538)
Size 102 kB (101913 bytes)
Hash ddc0ddeeb878f6f58fdbff16def83f1d
c8ca88c75baf6cd1f777ce3eb0d2644107bf0576
83c13f1008d5805c8ba63e1dad794dc852c0b7e5ed2bcbd793beeb7f82ee7336
Analyzer Verdict Alert fortinet Phishing
GET /etisalat/Care_files/recaptcha__en.js HTTP/1.1
Host: www.spl-notice.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/etisalat/Care_files/anchor.html
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 04 Oct 2022 10:14:28 GMT
Content-Type: application/javascript
Last-Modified: Fri, 27 Sep 2019 15:53:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5d8e3072-418bd"
Expires: Tue, 11 Oct 2022 10:14:28 GMT
Cache-Control: max-age=604800, public, must-revalidate
X-Proxy-Cache: STATIC/TYPE
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 281 B IP
Hash f5705f09ae6e32d96ae50881bf2812ba
72d4ce90bb5c77ecd3849d6c64d5deec5e30aa03
5229e0e37c791347261d59e51539a66afea742b694bed01b03f6f475f9aa31ed
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 10:14:29 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 23:56:29 GMT
Expires: Mon, 10 Oct 2022 23:56:28 GMT
Etag: "72d4ce90bb5c77ecd3849d6c64d5deec5e30aa03"
Cache-Control: max-age=567118,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754d26a1fca9b4f4-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12897
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:14:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12897
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:14:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 488ec5b4267ccb1cdc4e6e08556f7f3b
42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88
d9b05fe92962a58b9a8e8dbd4757969aa361be12018107ae649ffcdb8a0f8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3430
x-amzn-requestid: 22a0e400-1567-4c9c-aca9-782f3f81a8ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKLCrEn4IAMFZWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f210-11fa888c78719c44160accf8;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: czAJIO54qhc57-FC2v3o_6iUysen6MFHxo4KWJL7Uhs3ZBmRalqgMw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 09:44:26 GMT
age: 1803
etag: "42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae824db4a95391149198a4b6b8556c70
db07d58d8feff4ea01866d095e5264ee5c8e1ca3
19e96d204813247697e1858daf9e07d6c4cafd9ab1175a3bf39a7f07f6991521
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11101
x-amzn-requestid: f98e84d9-1e66-4436-b793-219a777f2ba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqcvE8JoAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5784-25bd2b234c1093de70074c92;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: becOxfqUowywFrxzDSeK7F1lFdDVTSHIF1TLC5k5aSlLPpsR6F8gjw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:42:37 GMT
age: 41512
etag: "db07d58d8feff4ea01866d095e5264ee5c8e1ca3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c6882c60d7ca6f918c77104e3ad1d52
20ef861be49c652a938e0145e4ca3a60159367e2
861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: O1yNc4H21kixhUEE7099oNqs7a5ZnJBBjlZbsbmLvaXyzXzrK0dL3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:33 GMT
age: 44996
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bec66cf-b911-4eb8-95d6-27e5f2afb6c7.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bec66cf-b911-4eb8-95d6-27e5f2afb6c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash de29d0d95d22e4e246a90feed644baf0
4ac6c5691df804078d5da54233cf4d8e7012f9ca
8e34ad07e098df14f7001d1ee538479de11afa4c255006cb6e8e2207c0e50a47
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bec66cf-b911-4eb8-95d6-27e5f2afb6c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8308
x-amzn-requestid: 3348b2e8-915a-492b-8241-89c13a21232c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqFlFyyoAMFz_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b56f0-2baf7ac2213c31fc384e8317;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 50AX7dGWRTOAi1Z4dP9cROGeKlz-g0oXDncFUYmuPOSwpZRWWcNo4g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:32 GMT
age: 44997
etag: "4ac6c5691df804078d5da54233cf4d8e7012f9ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c459c91-b5cc-492c-9573-3101e5df6b51.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c459c91-b5cc-492c-9573-3101e5df6b51.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34f2dfb2faff276db1d4a57739db2450
f5ce815082043a4efce28fc790ae7d8b3a8531f8
e02ea92f0be524ccfe26eee61a77e39a13d852d1ba3696f729e0f61812028667
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c459c91-b5cc-492c-9573-3101e5df6b51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5083
x-amzn-requestid: ed99df03-5d15-4e09-9aea-bbf77a705323
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpI0HT0IAMFxvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556b-422197147d76caac6e910664;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:35 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ZFVTt0eV3kpIaS4KAIZlgaTJxHb2hPxyP4BBRAZCE-cCAWJM44fZxw==
via: 1.1 946b9edb2009c5508a0fbbd636f95014.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:38:28 GMT
age: 41761
etag: "f5ce815082043a4efce28fc790ae7d8b3a8531f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6779181f9c06975f2a662da743893939
585e7146fd24cdc2496b05baafea04091dc541e2
8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SGeDEPoXxsTV5UwkZnn3MJPbjhHhrKSsueHPxVapV_7Icl6daFk3oA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 45009
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 4e5b1c18b41c244135794b09f34ef8c0
954b38d1eca6896a15c88cae2ebd5b791d32cc91
459d21039ffbad3ea5274c2d0df28e4b684bcbc6c306b0ae7d977aa782b8dffe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1636
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 09:47:13 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
www.google.com/js/bg/JBwSXsc__bL1AIIwyKh3QnwBHg7D-WM3_5_AwioMKBk.js
200 OK 5.3 kB URL HTTP/1.1 www.google.com/js/bg/JBwSXsc__bL1AIIwyKh3QnwBHg7D-WM3_5_AwioMKBk.js
IP
File type ASCII text, with very long lines (12267), with no line terminators
Hash ac29b12ed0c9fd43246eb54f153d01cd
9ee7f00622c5c445371a33e24a4a5ca68041712c
dcda8c5625df767c55436f2f9db45ed9c9b58057007175e1c7a5e915fd145bdc
GET /js/bg/JBwSXsc__bL1AIIwyKh3QnwBHg7D-WM3_5_AwioMKBk.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.spl-notice.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs"
Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
Content-Length: 5282
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 11:19:49 GMT
Expires: Fri, 29 Sep 2023 11:19:49 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 17 Sep 2019 16:00:00 GMT
Content-Type: text/javascript
Age: 428080
bat.bing.com/p/action/52018639.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/52018639.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/52018639.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=22D9AB39E080610023F7B90AE1D7606D; domain=.bing.com; expires=Sun, 29-Oct-2023 10:14:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 03A5D5AF9B3E481282553CBF9094D828 Ref B: OSL30EDGE0407 Ref C: 2022-10-04T10:14:29Z
date: Tue, 04 Oct 2022 10:14:29 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=52018639&tm=gtm002&Ver=2&mid=650ed172-a9c3-421d-a6b8-4abddf1f941d&sid=54d936e043cd11ed84808984ecdd84f2&vid=54d95da043cd11edbb5cc55c36494f57&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=My%20Etisalat%20-%20Self%20Care&p=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&r=<=1814&evt=pageLoad&sv=1&rn=674626
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=52018639&tm=gtm002&Ver=2&mid=650ed172-a9c3-421d-a6b8-4abddf1f941d&sid=54d936e043cd11ed84808984ecdd84f2&vid=54d95da043cd11edbb5cc55c36494f57&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=My%20Etisalat%20-%20Self%20Care&p=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&r=<=1814&evt=pageLoad&sv=1&rn=674626
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=52018639&tm=gtm002&Ver=2&mid=650ed172-a9c3-421d-a6b8-4abddf1f941d&sid=54d936e043cd11ed84808984ecdd84f2&vid=54d95da043cd11edbb5cc55c36494f57&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=My%20Etisalat%20-%20Self%20Care&p=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&r=<=1814&evt=pageLoad&sv=1&rn=674626 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=19004A62930C627B121E5851925B6373; domain=.bing.com; expires=Sun, 29-Oct-2023 10:14:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A208D08B1DB948A5860F5CF3124471D3 Ref B: OSL30EDGE0407 Ref C: 2022-10-04T10:14:29Z
date: Tue, 04 Oct 2022 10:14:29 GMT
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 5.9 kB IP
File type ASCII text, with very long lines (16553), with no line terminators
Hash 2f6a1b8a4843f74a5ba54c055fcb3850
919a5f9166f3f9c73803cebd312ad016570a30d8
1b6439153633e4e2dc23c743e14218931c1b4912bc7a3ad64bfee1d2d6982f50
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PvY6Lho9a83e75x/bU//rPoYY1CC3LhMvkC9T4o6vMErUBbZSm8UipBZokUnkLGgwhVsqEDqt4k=
x-amz-request-id: P5WP0X6BC0K301D0
date: Tue, 04 Oct 2022 10:13:30 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
content-encoding: gzip
age: 60
content-length: 5929
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.etisalat.ae/b2c/assets/favicon.ico
200 OK 3.0 kB URL HTTP/1.1 www.etisalat.ae/b2c/assets/favicon.ico
IP
ASN #5384 Emirates Telecommunications Corporation
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 922df61e6ec27d89f0cc50b994e54a21
0aa5d55d50e5eff1ed68b9bfeaa43eff63f956de
98dc25b93b32e18c525a5ed35597bd6e89ded9265e36f9c1c102fa41e4962f45
GET /b2c/assets/favicon.ico HTTP/1.1
Host: www.etisalat.ae
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Accept-Ranges: bytes
Expires: 0
Last-Modified: Mon, 27 Jun 2022 12:59:12 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Channel, kiosk-id, transactionId
X-Content-Type-Options: nosniff, nosniff
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-XSS-Protection: 1; mode=block, 1; mode=block
Access-Control-Max-Age: 1
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors *;
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: image/x-icon
Set-Cookie: CMS-cookie=!hjMyvp2AvvpBuZSIOdgM8uplIfjDqIMAMDM7jvte3zDa6z2IBFbQ1ws9MA//1EN6NUTfP4cVAcha9ys=; path=/; Httponly; Secure
TS0196bc3e=012b7f183c1386ffca7521e015873b9b9bc6822ed7f2c1453fee62b888143162448017ec03f3814868db0979ac85a9159cc4406515; Path=/
Transfer-Encoding: chunked
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=OsLJ_l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlvMEE0RCUyQktZZXVRNHJyVEZWOU9EalFrbUpnQVYxWjJKb2RSV21mRERBUQ; expires=Sun, 29 Oct 2023 10:14:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 238506
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 748
Origin: http://www.spl-notice.com
Connection: keep-alive
Referer: http://www.spl-notice.com/
Cookie: _ttp=2FfM1P0GvxLmhTCy98EV3zUr27I
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 202210041014298C7F9E2CC2D8962B7F14
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf6044faeb2b99c092c97016c61fe0db1bebe7e661a354f1f783ec3bd22fa3fded4c3fe5b9e1ff370baae16c60a095e7ef433ca7c855113a06dd91b9ad2f77b99e3c1d121c592d14cd188657b6a617a11d88
x-origin-response-time: 119,23.218.223.15
x-akamai-request-id: 11d5d92f.51690c8
expires: Tue, 04 Oct 2022 10:14:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 10:14:29 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-cache-remote: TCP_MISS from a23-218-223-15.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=106, origin; dur=119, inner; dur=118
x-parent-response-time: 221,23.36.79.28
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D29637970%26t%3D2%26gtmcb%3D383653340
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D29637970%26t%3D2%26gtmcb%3D383653340
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D29637970%26t%3D2%26gtmcb%3D383653340 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.spl-notice.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 10:14:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: a0a1eb9c-22b5-4534-965e-8f83faf95e45
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2H`gs'nX[!@wnf-Te9(>wL5L!!':7$]27l; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 10:14:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
gum.criteo.com/syncframe?topUrl=www.spl-notice.com&origin=onetag
200 OK 6.1 kB URL HTTP/2 gum.criteo.com/syncframe?topUrl=www.spl-notice.com&origin=onetag
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Hash 9aef1653a8f6ec59bcc684c09a803430
6b3a06c3376f73b05755ec3648416c124648480d
2a33a0598e2146c2d55a525b0690caf8d4b460d30d8e99390f1c8575f8bd013e
GET /syncframe?topUrl=www.spl-notice.com&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:28 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=ff75c4d4-3a02-4df9-9f51-95b1f875fa34; expires=Sun, 29 Oct 2023 10:14:28 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 607985
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 57571803fbcccf1d8d3f64d1d59ad3be
9309dbdac73523157341a8aacafa931a8c7306f7
2cfc4c813b7ac4d3e9ac437fdac58c0c1f86ee330accc220be070996bdfe5e2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3638
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 09:13:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 57571803fbcccf1d8d3f64d1d59ad3be
9309dbdac73523157341a8aacafa931a8c7306f7
2cfc4c813b7ac4d3e9ac437fdac58c0c1f86ee330accc220be070996bdfe5e2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3638
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 09:13:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 313
advertiser.inmobiapis.com/tpce/v1/events/pixel?impId=&advId=be74c68eaf2f4481a2c389f9ca07dae8&bUrl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&ckId=d3534775-5eb2-41d9-ab03-567ab23e25e7&eventTime=1664878468764
200 OK 88 B URL HTTP/2 advertiser.inmobiapis.com/tpce/v1/events/pixel?impId=&advId=be74c68eaf2f4481a2c389f9ca07dae8&bUrl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&ckId=d3534775-5eb2-41d9-ab03-567ab23e25e7&eventTime=1664878468764
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash e7678ac3f7a902ba90d58d911144a1c0
5c9d4109e3cef3d13ead5f9a5c07aba11311a5a6
4e3339303600d8e60df9b80f23e00f142f100ddc136fa09a841662f6b317c352
GET /tpce/v1/events/pixel?impId=&advId=be74c68eaf2f4481a2c389f9ca07dae8&bUrl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&ckId=d3534775-5eb2-41d9-ab03-567ab23e25e7&eventTime=1664878468764 HTTP/1.1
Host: advertiser.inmobiapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
content-type: application/json
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
X-Firefox-Spdy: h2
tags.bkrtx.com/js/bk-coretag.js
200 OK 16 kB URL HTTP/2 tags.bkrtx.com/js/bk-coretag.js
IP
File type ASCII text, with very long lines (42581)
Hash 1d6730c68cb783c9b157fece2471f7b7
9c176c938a3567b446e02ccf1f919bf5bbccc921
32098d2ec6839522764c3c6c83b8427d8dca6bd041118e367b0ea6c7e1f05375
GET /js/bk-coretag.js HTTP/1.1
Host: tags.bkrtx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.spl-notice.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 21 May 2021 19:14:21 GMT
etag: W/"60a8068d-cbc2"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 16078
cache-control: max-age=604800
expires: Tue, 11 Oct 2022 10:14:29 GMT
date: Tue, 04 Oct 2022 10:14:29 GMT
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-76519932-1&cid=1435721302.1664878469&jid=261855911&gjid=1064094995&_gid=670012490.1664878469&_u=aGDAgEADQAAAAEAAI~&z=1567456653
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-76519932-1&cid=1435721302.1664878469&jid=261855911&gjid=1064094995&_gid=670012490.1664878469&_u=aGDAgEADQAAAAEAAI~&z=1567456653
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-76519932-1&cid=1435721302.1664878469&jid=261855911&gjid=1064094995&_gid=670012490.1664878469&_u=aGDAgEADQAAAAEAAI~&z=1567456653 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.spl-notice.com
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.spl-notice.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 10:14:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/900746231/?random=1664878468835&cv=9&fst=1664878468835&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tiba=My%20Etisalat%20-%20Self%20Care&auid=1064115453.1664878468&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/900746231/?random=1664878468835&cv=9&fst=1664878468835&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tiba=My%20Etisalat%20-%20Self%20Care&auid=1064115453.1664878468&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2242), with no line terminators
Hash b349885b22de15e6ceb74b83f4516483
f6c7be770375b72f054ebd8fe2c1c7c61f7a3d34
9f7510dc9bc02f033a380a8399838016f51ce9d2a5fc9c3934c1395ac06b3868
GET /pagead/viewthroughconversion/900746231/?random=1664878468835&cv=9&fst=1664878468835&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&ig=0&frm=0&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tiba=My%20Etisalat%20-%20Self%20Care&auid=1064115453.1664878468&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 10:14:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1033
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 10:29:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash e433fcb50acece9e71308bea3cae2176
2c0f6555dac211dede365146a74683d1e9dfd861
f857ceb2aa56ca52b06507625e2e52a4b27ff34f21fdd32a20048e9abf9a66b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5795
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 08:37:54 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash e433fcb50acece9e71308bea3cae2176
2c0f6555dac211dede365146a74683d1e9dfd861
f857ceb2aa56ca52b06507625e2e52a4b27ff34f21fdd32a20048e9abf9a66b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5795
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Last-Modified: Tue, 04 Oct 2022 08:37:54 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 314
analytics.tiktok.com/i18n/pixel/identify.js
200 OK 32 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/identify.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 811b7342f152b2c97504f35ac57755c9
28391abf68f8a395d0fdf4151295d7300bba6b43
84e656563ce628953c104369f131373bd35c5d2c8334f692cad76372e40f2d82
GET /i18n/pixel/identify.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20221004101429FFA9BCB859BBF72358B2
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60459c918a449af51d55daa38da0f8465bc617f92a7fe33f79d8f58a39e7db5980444b109b8554819866062171dda69be4df39026735988e17b60b0dab34bdafe3
content-encoding: gzip
expires: Tue, 04 Oct 2022 10:14:29 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 10:14:29 GMT
x-cache: TCP_MISS from a23-36-79-28.deploy.akamaitechnologies.com (AkamaiGHost/10.9.5-44356082) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=2, cdn-cache; desc=MISS, edge; dur=2, origin; dur=103
x-origin-response-time: 104,23.36.79.28
x-akamai-request-id: 5168f37
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/743986920/?random=1664878468837&cv=9&fst=1664877600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tiba=My%20Etisalat%20-%20Self%20Care&async=1&fmt=3&is_vtc=1&random=3777970450&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/743986920/?random=1664878468837&cv=9&fst=1664877600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tiba=My%20Etisalat%20-%20Self%20Care&async=1&fmt=3&is_vtc=1&random=3777970450&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/743986920/?random=1664878468837&cv=9&fst=1664877600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9s0&sendb=1&frm=0&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tiba=My%20Etisalat%20-%20Self%20Care&async=1&fmt=3&is_vtc=1&random=3777970450&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 10:14:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:14:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gem.gbc.criteo.com/newidsd
200 OK 511 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
Hash afff1bb4787786a8678d56dc500a3077
a1e95b083a5f556e2d78a0f9469b39c9ee1bf6f6
f894cefb014794a47e8f622670ea8b3b9695c085f47157b82130a98663c09cc8
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 116170
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=905934456228039&ev=PageView&dl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&rl=&if=false&ts=1664878469354&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664878469352.867489257&it=1664878468623&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=905934456228039&ev=PageView&dl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&rl=&if=false&ts=1664878469354&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664878469352.867489257&it=1664878468623&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=905934456228039&ev=PageView&dl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&rl=&if=false&ts=1664878469354&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1664878469352.867489257&it=1664878468623&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Tue, 04 Oct 2022 10:14:29 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D988171%26time%3D1664878468633%26url%3Dhttp%253A%252F%252Fwww.spl-notice.com%252Fetisalat%252Flogin.html%26tm%3Dgtmv2%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLQUl6_Dx8_NgAAAYOifWKwGcLlxM1VrNHDOqWR7JVSUs2VLavAGmMZyDyY5j7vvwyUFjSktqVN3w; Max-Age=2592000; Expires=Thu, 03 Nov 2022 10:14:29 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQK_Csp2lnbY8gAAAYOifWKwkAVXBUw6rgnOxrukbNx3qj3tLS5cGupl8gr2Y8EVRCmm4eW6_rbQz6WuDGk9Ow; Max-Age=2592000; Expires=Thu, 03 Nov 2022 10:14:29 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&45c3ca2e-a713-4e19-8ffb-0fe1ae412d77"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Oct-2023 10:14:29 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2354:u=1:x=1:i=1664878469:t=1664964869:v=2:sig=AQGhLmvFGLXaA_bVt0RHwHJcV9sB3Pxs"; Expires=Wed, 05 Oct 2022 10:14:29 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXqMrnJX/TOVeb5PMbfgg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0031A2C3654C43EA9103244B6FDBE87A Ref B: OSL30EDGE0109 Ref C: 2022-10-04T10:14:29Z
date: Tue, 04 Oct 2022 10:14:29 GMT
content-length: 0
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=1cec4518-0488-441f-9c7e-4284c440b7a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=1cec4518-0488-441f-9c7e-4284c440b7a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=1cec4518-0488-441f-9c7e-4284c440b7a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_82igON6IH5aB1jI760Lidw=="; Max-Age=63072000; Expires=Thu, 03 Oct 2024 10:14:29 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 9070970d93378b46
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: 7c066532ff27f6d8412da8527e81c1437675ab7ebeeb562fa01b986eafb1a0e3
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=907833b9-1cad-4f9a-a408-592b6037fbf1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=907833b9-1cad-4f9a-a408-592b6037fbf1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=907833b9-1cad-4f9a-a408-592b6037fbf1&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=325c242b-b78d-48d6-b2f7-a245708971d7&tw_document_href=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nv1sh&type=javascript&version=2.3.27 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:28 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_tnY2s4T11YiJvyBERbcu4A=="; Max-Age=63072000; Expires=Thu, 03 Oct 2024 10:14:29 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 240b671f6bfd18c9
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: 7c066532ff27f6d8412da8527e81c1437675ab7ebeeb562fa01b986eafb1a0e3
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10086711.json
200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10086711.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10086711.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.spl-notice.com
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: JWTRXSWVMF50VTZ0
x-amz-id-2: P2OqkqfLbccHemhtL87iTLYD6Idjrz3I+gtm4lrYFnorat1nact9yoavkrOVyZ+/FKwO1M/+Xd0=
content-type: application/json
date: Tue, 04 Oct 2022 10:14:28 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 1
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BPWBRZB9JK>m=2oe9s0&_p=1216750077&_gaz=1&cid=1435721302.1664878469&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664878468&sct=1&seg=0&dl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&dt=My%20Etisalat%20-%20Self%20Care&en=page_view&_fv=2&_ss=2
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BPWBRZB9JK>m=2oe9s0&_p=1216750077&_gaz=1&cid=1435721302.1664878469&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664878468&sct=1&seg=0&dl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&dt=My%20Etisalat%20-%20Self%20Care&en=page_view&_fv=2&_ss=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BPWBRZB9JK>m=2oe9s0&_p=1216750077&_gaz=1&cid=1435721302.1664878469&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664878468&sct=1&seg=0&dl=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&dt=My%20Etisalat%20-%20Self%20Care&en=page_view&_fv=2&_ss=2 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.spl-notice.com
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.spl-notice.com
date: Tue, 04 Oct 2022 10:14:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 131 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0092d987bbb78ea174c5e557af23b149
b7135458c43006510e85f2aacb5b7e0264a309c9
bba7a35770fe4fd849732cb3d25a2db6ce5e88fb06da270a24107a2a9510728d
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=OsLJ_l80M0RITmhlJTJCZkMwOUJGQlhaMUN2czlvMEE0RCUyQktZZXVRNHJyVEZWOU9EalFrbUpnQVYxWjJKb2RSV21mRERBUQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=0C_wg180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlvMEE0RCUyQktZZXVRNHJyVEZWOU9EaVZqVWo3OUVRcVo1NFNxWDg4bzYlMkZ3; expires=Sun, 29 Oct 2023 10:14:29 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 269626
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D988171%26time%3D1664878468633%26url%3Dhttp%253A%252F%252Fwww.spl-notice.com%252Fetisalat%252Flogin.html%26tm%3Dgtmv2%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D988171%26time%3D1664878468633%26url%3Dhttp%253A%252F%252Fwww.spl-notice.com%252Fetisalat%252Flogin.html%26tm%3Dgtmv2%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D988171%26time%3D1664878468633%26url%3Dhttp%253A%252F%252Fwww.spl-notice.com%252Fetisalat%252Flogin.html%26tm%3Dgtmv2%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.spl-notice.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&33a85b6d-cba1-4558-8b54-74b749938c38"; Domain=.linkedin.com; Expires=Wed, 04-Oct-2023 10:14:30 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&2022100410142909ea66d6-8776-4624-8958-bbaca48ee84dAQFPvhTJh9IYf9-NIULrJBNCAm0HO0mG"; Domain=.www.linkedin.com; Expires=Wed, 04-Oct-2023 10:14:30 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjQ4Nzg0Njk7MjswMjFVzJ2Mp8SdJuQFXtGYN0SDIQ0IKcyi9oV0bofSS7uo1A==; Domain=.linkedin.com; Expires=Sun, 02 Apr 2023 10:14:29 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2354:u=1:x=1:i=1664878470:t=1664964870:v=2:sig=AQGO7rOBBcbgoETLJgNKiULG_fODIzMT"; Expires=Wed, 05 Oct 2022 10:14:30 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXqMrnMYATOH4QvgswtPw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B6492542F0594E6CB523B72F7EDC5C00 Ref B: OSL30EDGE0109 Ref C: 2022-10-04T10:14:29Z
date: Tue, 04 Oct 2022 10:14:29 GMT
content-length: 0
X-Firefox-Spdy: h2
sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2004%20Oct%202022%2010%3A14%3A29%20GMT&n=0&b=My%20Etisalat%20-%20Self%20Care&.yp=10086711&f=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&enc=UTF-8&yv=1.13.0&tagmgr=gtm
200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Tue%2C%2004%20Oct%202022%2010%3A14%3A29%20GMT&n=0&b=My%20Etisalat%20-%20Self%20Care&.yp=10086711&f=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Tue%2C%2004%20Oct%202022%2010%3A14%3A29%20GMT&n=0&b=My%20Etisalat%20-%20Self%20Care&.yp=10086711&f=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:30 GMT
expires: Tue, 04 Oct 2022 10:14:30 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBIYHPGMCEGoSbb8mduSf1k5npNm3WnIFEgEBAQFZPWNFYwAAAAAA_eMAAA&S=AQAAAqoC_cd9LtISgunHz_d2DdQ; Expires=Wed, 4 Oct 2023 16:14:30 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=988171&time=1664878468633&url=http%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&tm=gtmv2&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.spl-notice.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&73c7306a-194a-4668-8fec-4548bd51566b"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Oct-2023 10:14:30 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2354:u=1:x=1:i=1664878470:t=1664964870:v=2:sig=AQGO7rOBBcbgoETLJgNKiULG_fODIzMT"; Expires=Wed, 05 Oct 2022 10:14:30 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXqMrnPgz+wDS/6XN8lSw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: A5FB85F868EA4059B2BBC7FB432A6975 Ref B: OSL30EDGE0109 Ref C: 2022-10-04T10:14:30Z
date: Tue, 04 Oct 2022 10:14:29 GMT
content-length: 0
X-Firefox-Spdy: h2
stags.bluekai.com/site/75460?ret=html&phint=PC_ProductName&phint=PC_Price&phint=PC_ProductCategory&phint=PC_ProductBrand&phint=PC_ProductID&phint=AddCart_ProductName&phint=AddCart_ProductCategory&phint=AddCart_ProductPrice&phint=AddCart_ProductBrand&phint=AddCart_ProductID&phint=Phone_hash&phint=__bk_t%3DMy%20Etisalat%20-%20Self%20Care&phint=__bk_k%3D&phint=__bk_l%3Dhttp%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&phint=__bk_v%3D3.1.10&limit=4&r=92200003
200 OK 71 B URL HTTP/2 stags.bluekai.com/site/75460?ret=html&phint=PC_ProductName&phint=PC_Price&phint=PC_ProductCategory&phint=PC_ProductBrand&phint=PC_ProductID&phint=AddCart_ProductName&phint=AddCart_ProductCategory&phint=AddCart_ProductPrice&phint=AddCart_ProductBrand&phint=AddCart_ProductID&phint=Phone_hash&phint=__bk_t%3DMy%20Etisalat%20-%20Self%20Care&phint=__bk_k%3D&phint=__bk_l%3Dhttp%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&phint=__bk_v%3D3.1.10&limit=4&r=92200003
IP
File type HTML document text\012- HTML document, ASCII text
Hash 988428fdc0079b85e995b96b0ed4b565
27aece4f871a936951d17de604853cddc9bfb5ec
53350525edba0b889e87ea52a16ed843a928a2557e9f8d6747acd7ff991c95c3
GET /site/75460?ret=html&phint=PC_ProductName&phint=PC_Price&phint=PC_ProductCategory&phint=PC_ProductBrand&phint=PC_ProductID&phint=AddCart_ProductName&phint=AddCart_ProductCategory&phint=AddCart_ProductPrice&phint=AddCart_ProductBrand&phint=AddCart_ProductID&phint=Phone_hash&phint=__bk_t%3DMy%20Etisalat%20-%20Self%20Care&phint=__bk_k%3D&phint=__bk_l%3Dhttp%3A%2F%2Fwww.spl-notice.com%2Fetisalat%2Flogin.html&phint=__bk_v%3D3.1.10&limit=4&r=92200003 HTTP/1.1
Host: stags.bluekai.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 71
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cache-control: max-age=0, no-cache, no-store
bk-server: 98c6
date: Tue, 04 Oct 2022 10:14:30 GMT
X-Firefox-Spdy: h2
dynamic.criteo.com/js/ld/ld.js?a=39527
200 OK 0 B URL HTTP/2 dynamic.criteo.com/js/ld/ld.js?a=39527
IP
GET /js/ld/ld.js?a=39527 HTTP/1.1
Host: dynamic.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.spl-notice.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:28 GMT
content-type: application/javascript; charset=utf-8
server: Kestrel
cache-control: public,max-age=10800
content-encoding: br
vary: Origin, Accept-Encoding
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=onetag&domain=spl-notice.com&sn=FirefoxSyncframe&so=0&topUrl=www.spl-notice.com&info=0C_wg180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlvMEE0RCUyQktZZXVRNHJyVEZWOU9EaVZqVWo3OUVRcVo1NFNxWDg4bzYlMkZ3&idsd=-1043456781,-634317532&cw=1&lsw=1
200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=onetag&domain=spl-notice.com&sn=FirefoxSyncframe&so=0&topUrl=www.spl-notice.com&info=0C_wg180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlvMEE0RCUyQktZZXVRNHJyVEZWOU9EaVZqVWo3OUVRcVo1NFNxWDg4bzYlMkZ3&idsd=-1043456781,-634317532&cw=1&lsw=1
IP
GET /sid/json?origin=onetag&domain=spl-notice.com&sn=FirefoxSyncframe&so=0&topUrl=www.spl-notice.com&info=0C_wg180M0RITmhlJTJCZkMwOUJGQlhaMUN2czlvMEE0RCUyQktZZXVRNHJyVEZWOU9EaVZqVWo3OUVRcVo1NFNxWDg4bzYlMkZ3&idsd=-1043456781,-634317532&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?topUrl=www.spl-notice.com&origin=onetag
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:29 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 983453
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:14:28 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 94139
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
198.46.94.17
185.89.210.244
178.250.0.157
23.13.254.202
93.184.220.29
23.36.76.121
213.42.214.53
212.82.100.181
185.184.8.90
0.0.0.0