www.carheel.sa.com/pbsdwhsbgd/knuknu875375rwdlg/t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
200 OK 526 B URL HTTP/1.1 www.carheel.sa.com/pbsdwhsbgd/knuknu875375rwdlg/t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9cb2556c80c4e7e9505330eaf4728317
4d1394bc9a4424e3c9a8b90387fcd3477d92c2c1
bfed56207946e7bdccd4fa0155c6c4dc727e6e9172cff76842917fb1c6f2208b
Analyzer Verdict Alert fortinet Malware
GET /pbsdwhsbgd/knuknu875375rwdlg/t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fcCOrI%2FT8zD0N%2BnSLaE6tjgCzcrm7TLG%2BJw6QDHk28FZhr9xWhGU35gJ2tHrq0fZX0XUAaXPthSR71eoVVAPy9u7AtdIjXq7hwdwJnqvg6qiX9VvIh9AFaehs%2FYX00r%2B7Z%2BW%2FPE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bca3b6db512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 17:53:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nEEh_clodyeWooPLbDMlfl1T8UNldInr2ILm52ZfBbByMQHwq8DbUg==
Age: 2435
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash adb43321efa5cd1662993b701ff25fa4
1299dcea7e9c59d9f22f39d69025484fe71098c1
2c25a6717245be3746f1412af9dd1c351e12dbb93e8e08c3ddcdacf35e419514
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C25A6717245BE3746F1412AF9DD1C351E12DBB93E8E08C3DDCDACF35E419514"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6059
Expires: Sun, 18 Sep 2022 20:14:36 GMT
Date: Sun, 18 Sep 2022 18:33:37 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kubdiAO6g6eobtgC_mGEk1Z12BCFAF00YhA6sQeg0FqVG08mPVAfOA==
age: 50304
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 18:33:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9b19d20af774aa4c4de18c09845d54b9
cd0d41b4957edf5b2f7f66df082b7d1010acceb8
067f454a8ba17fba5f10b67b6a594edd9d9775beb5fb87cb6c98ff462a9f2fe1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-22484186-3
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
File type ASCII text, with very long lines (1720)
Hash 7adfebe4715da07da729b2d65aedbb53
2e4eaf9449d28a0fd8a71257612686ef28223137
e0da05b512a5b5997a43aebf511a15763eb2f482df4a872afb1d94c61305a86a
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Sep 2022 18:33:38 GMT
expires: Sun, 18 Sep 2022 18:33:38 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42380
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9b19d20af774aa4c4de18c09845d54b9
cd0d41b4957edf5b2f7f66df082b7d1010acceb8
067f454a8ba17fba5f10b67b6a594edd9d9775beb5fb87cb6c98ff462a9f2fe1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.carheel.sa.com/jquery-1.11.0.min.js
200 OK 33 kB URL HTTP/1.1 www.carheel.sa.com/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
GET /jquery-1.11.0.min.js HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/pbsdwhsbgd/knuknu875375rwdlg/t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:03:39 GMT
ETag: W/"62e8238b-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rJvsVorL6ohm1PjRb3w7DFVDUR%2BE9HLQ3N3mlz5UnZNUWdQBcz%2BQHL9l%2BGFKF4PDQL9M0wnxIaLZvrd5XC0U9lC5E0U%2FgcMrE7G9VV3uYgRnmj3TmtPqVMfq9XddkfrogRzmY3Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bcc5edab512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/offer.php?id=213&sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
200 OK 332 B URL HTTP/1.1 www.carheel.sa.com/offer.php?id=213&sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (318)
Hash 09b4951b38cb4de8c64c3c6010739c17
eff7d3dd05488e916b4837a8965251bd62ec34b3
6c55994848337dd64f43bc003fbc43b41bb1c8d58e7af44468614276bec37e5e
GET /offer.php?id=213&sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/pbsdwhsbgd/knuknu875375rwdlg/t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wp2TmdSN6UFWyQe66NOwqAjf2%2FPkcvJpVQAy1My2qHFhyhROGWvVh6xXQWFjraYAaQUs%2Ft%2Fic4w5zIXyZ%2F1d0B6xAaRL1HYY0Whu5dflA2DIfsM152kag4hD5g0efmUe8uIMZdw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bce595db512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 18 Sep 2022 18:03:22 GMT
Cache-Control: max-age=3600
Expires: Sun, 18 Sep 2022 18:45:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: i2ihdmf8Je8etljkrN9_74RaxUkkYpx5_uU2l3glDiiviz6LnolUFQ==
Age: 1816
ocsp.digicert.com/
200 OK 471 B IP
Hash 5fd1174f35b25298fc44a6de1af3f3d6
d45a47995ec34c7df480b3efafb13f55d9df7eb8
f60573eff255ef3d7603ca813f410c30588931b4018ffa0e07fa0bb2653c47af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3975
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:38 GMT
Last-Modified: Sun, 18 Sep 2022 17:27:23 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
200 OK 14 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42825)
Hash fb847a029a800d9621da540a62db0651
439e819e563a854aef5006b445598911d8aa55cf
3e4733f441da545bc71136c073ba6899756fdb218b0de58dc0a554c0c3d81a3d
GET /clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zVuN1N5h0E7iG9%2F5uKCWwNQQubyp%2BQILjpZG5XGBsH1bVhk%2FeESh5cCnyDoXecGzjEOu0hevjm8F4RFRTB2y2SxICMfKnAPLh0KSbv7%2F5NG9N%2Fs%2BP5rTQAsLyShCv1VkcAwL5wE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bcfbbcfb512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/obtp.js.download
200 OK 6.2 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/obtp.js.download
IP
File type ASCII text, with very long lines (6169), with no line terminators
Hash 522e4451790939ca385c10f4b474de63
23027181eea39e5fc338694c98602baaae0944a4
8bd397636ecd49c36d687ad591807ea5ee621b1e11888657827902a5003fc4bb
GET /clicks/chapter2/GX-watch_files/obtp.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: application/octet-stream
Content-Length: 6169
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1819"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CxqJC7bt34n%2FpDzmThCVmTmxaNsk8%2Bd1eZsYDPDE5g062POeySOSidzqO6BDKeh7FiVLZVPV6Bcr3UOGe2w32rGGMmivZBKYcxl0585dLfPAy5WZFQ4911sErHR6sho91ezEzbE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd06b291bfe-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
200 OK 11 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
IP
File type ASCII text, with very long lines (62929), with CRLF, LF line terminators
Hash b8bc5aa36f686ee04208c9686195edab
e020d345db7efa2dfe4ebf4b888ccdb560372b8f
0b1aa036cd4b64c7b1462f92833e4f54cb98850db23bfbf42d35b3b2ff192f4e
GET /clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: W/"62e823e4-11e86"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4wVdt0ZinN%2FdXxe0PK8sajLqiAhkKvq8cLuoWcM6cI0k%2Fwl6t5a9HZ0xhYjhCMJTQKBPMJx%2BNtEKpSlY8KdhNsapOwYAmhDHLE5NI8RysqUq9z%2FHQBTxsK%2FkBQURDdJTY90IL74%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd06c9ab512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
200 OK 699 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download
IP
File type ASCII text, with very long lines (699), with no line terminators
Hash 0997f48838ce432db6b37f72c8fdf1f2
c9b2dc8a68ab46b5b36c96d52ef6c6de1084c6e6
646f01731972adb62a05fbadddee4f1760499bd01e6c2162d889ba47d160b6c5
GET /clicks/chapter2/GX-watch_files/2-es2015.478e249f6ca420649117.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: application/octet-stream
Content-Length: 699
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-2bb"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uRiY5L6rhgI331deXzpfp8KDUMRp4iAYl8hwlhzRyvN2xo9ORk4dS8mDFD4C%2Fgg81PODmHhdPJ8xUPZ8pUY%2B8MfYmyH9uAA0hdl9iw7nxUqbKsr50oXLoa4o%2FsQfF3h%2F23JdkbM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd16c041bfe-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/gtm.js.download
200 OK 84 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/gtm.js.download
IP
File type ASCII text, with very long lines (1721)
Hash 7eb0a1bda269d3087b8bc748e696f147
3ba33c1c1c3374837f373637041bdb33e7b41d3e
f28faa623ecd340179ec27e8a8288a7f75be69f9335c15e0d28055e372009bba
GET /clicks/chapter2/GX-watch_files/gtm.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: application/octet-stream
Content-Length: 84387
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-149a3"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HR2xEVt5Bxm7TvrooP1w2gU%2BimVXrOEdB1YKP0E%2FCXiigSjS77XJZSOZE9nOhvMH88%2FXgh1s6YzZFf7iMWkVUCfGDlxn2kbAthCfAHLhdhkgtDQ3NC8lTQ9r4tyWGLf2GLXfkpo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd07d370b51-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/fbevents.js.download
200 OK 129 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/fbevents.js.download
IP
File type ASCII text, with very long lines (33256)
Size 129 kB (128769 bytes)
Hash 9d939cad64375505e4dce7469a82e4ee
c0d0919210cb8dc763acb3de97a6218020caaa8d
5a91c6d3e635c0bd1551a53cf0769328132151a7732039170280d500dbcb4685
GET /clicks/chapter2/GX-watch_files/fbevents.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: application/octet-stream
Content-Length: 128769
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1f701"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N0eU2RX%2FNdije4Qgf7UFCUPZPKvq%2FBs7YK9Ok85lfu63AhnlrU7d5kUeQO7tXElifDhziVt2aA0Eu1zt3UKhhHrJfTcn9WAR7RcUCzoZEVpPSP0dpYV6Yb%2BjqNSNSwDXgcINjQA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd068c10b61-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: yH7CYAiPOBAbsDJKNU0YwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 77byf6zZ2jiOa3dUKYFp9QatTM8=
www.carheel.sa.com/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
200 OK 2.3 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download
IP
File type ASCII text, with very long lines (2339), with no line terminators
Hash a5fd49d9f6995d297d975ff767b07693
6e62ba7c1e1b5683480f0359c5daa96f7f602ef4
74feece712f2d426ea2f9f682eec3d74f4474a31222a62de4778f2670cd2c2c7
GET /clicks/chapter2/GX-watch_files/runtime-es2015.9502c56c7b8ec72c1df4.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: application/octet-stream
Content-Length: 2339
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:07 GMT
ETag: "62e823e3-923"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B5ILnGM%2FGCA37Y6uoUJySdRqAkjMy%2F0yPK%2Fdoall91%2BNro6Ur6XDtAaOb2c0YB%2BJBdtngYxXj1I%2FsJOe2bCT2nyEnpb0Fht1Qi9Fq1MEHT0TwxJHps4vSuHqdg4cSVvBGHPiqm4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd1de84b512-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
200 OK 115 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
IP
File type ASCII text, with very long lines (60347)
Size 115 kB (114854 bytes)
Hash bf79ae58d383b0bfd5aa04fa527ae59d
76141d2acb1acbfd7c2fc2a050dde381e4b0b25d
e7966e88811b0480c1f74fb9c2453deb97ad7a1d2c3a70e75cc69c9ca6a65e2d
GET /clicks/chapter2/GX-watch_files/semantic.min.css HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: W/"62e823e4-c055e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tG8gDWbZdIwSrfxzfVM%2BgIKXibFFMfa%2FtTBv%2B8W3uErKKpwExOLgExtNcWXJlQs%2Bksehd1ptDG9cgdUPtp%2FG6C40RkVQTsZ1HJPvS4qB9j3cKLJJsAjgh1YL8z%2BhIMStzybtq6E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd06aa3b4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
200 OK 593 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 593 kB (593023 bytes)
Hash 67ced67786c2faf02230249ebfca68b1
43248fe8f624ea47d7ee8bd71d47691bd3b836d1
fcde07bab3999ff73a36dfc92c42ee7d1966cebe0246e6601923410ad0ae3cbf
GET /clicks/chapter2/GX-watch_files/0-es2015.ca3005822a3d933170a8.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:38 GMT
Content-Type: application/octet-stream
Content-Length: 593023
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-90c7f"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6hUaeQN3tESP0P%2B9TYYEQsk%2FswiCL%2BsZr8R9mOXbNpn8DckVqJCKy5n61ixb%2FtMC59ILBIJYPrDt06Okk3StzmCwaJ9H8y4DUnq%2B%2FDg%2BPe14sclq9VilH6TIMOACO8OwemB1IuI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd0ed59b512-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eaa8b4aa123f9dd7237c5c51d2f848d9
1082f5f6ef7229ec76f94f3d236f273b26294563
d1ad33dae2fcab5c7d66875f0e7a01cc30e0b3a031606917fa5448c54f84e20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap
200 OK 920 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap
IP
Hash 2d2e95870e0c9e206da93456770490fb
58583c3e249ca073652110c988ce2953eb1f78d9
297b91a9a395f3d5e070f29658ea4ed7cf850b00ab30fd136a5a23138d35fd8e
GET /css?family=Lato:400,700,400italic,700italic&subset=latin&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Sep 2022 18:33:39 GMT
date: Sun, 18 Sep 2022 18:33:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.carheel.sa.com/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
200 OK 741 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 741 kB (740762 bytes)
Hash f161116229f6f63b22161c5ec9a1a8fc
ce6e944ba1abcdd06a017378e2193250650b808e
1021043813945667ae55767c0a2e6a1857ec66cc7673ab97c660086474c1b79d
GET /clicks/chapter2/GX-watch_files/scripts.f7764ecf794a9df7be6b.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: application/octet-stream
Content-Length: 740762
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-b4d9a"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z0cElOZSI4DKav9HwyUouN5B7LgJ%2B7Qt0E2I9ZOYyzbj1zPMuJqTfgk3WMoz9t7yI65BM38Pai%2Ff9IckJd9zwW1Yb97%2FAGfmEj2%2BcmN8hWo%2FjS6MtSnqYuhfQAbmE6T4Rg0Y4Go%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd20fae0b51-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab87e1e4dc6abd919cf683dff901fe8
07cfbf03a72cb316844c48669a10484e63b7f887
d68b40168e5c06bd69b83e8529ea0b15996e7124d2c8b3c5b0be81c8946f04c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab87e1e4dc6abd919cf683dff901fe8
07cfbf03a72cb316844c48669a10484e63b7f887
d68b40168e5c06bd69b83e8529ea0b15996e7124d2c8b3c5b0be81c8946f04c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data
Hash efee2d080d7bebdd2e0aeb2e030813a0
f8d38f9f9584e48c2e469877ebd94232265585f1
bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.carheel.sa.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Sep 2022 20:02:00 GMT
expires: Tue, 12 Sep 2023 20:02:00 GMT
cache-control: public, max-age=31536000
age: 513099
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.carheel.sa.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 17:10:21 GMT
expires: Wed, 13 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 436998
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24448, version 1.0\012- data
Hash 865e46af816320c9f32234e8968558d0
6791e9f732fcbde0f375f84ccbc14c4ac72795a3
6c84348296ebe2e2a0830c3962eb02156419d9bc76371c2eadaf7329d827d550
GET /s/lato/v23/S6u_w4BMUTPHjxsI5wq_Gwft.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.carheel.sa.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 17:27:45 GMT
expires: Wed, 13 Sep 2023 17:27:45 GMT
cache-control: public, max-age=31536000
age: 435954
last-modified: Tue, 26 Apr 2022 16:41:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.carheel.sa.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 17:10:21 GMT
expires: Wed, 13 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 436998
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab87e1e4dc6abd919cf683dff901fe8
07cfbf03a72cb316844c48669a10484e63b7f887
d68b40168e5c06bd69b83e8529ea0b15996e7124d2c8b3c5b0be81c8946f04c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg
200 OK 80 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash 8c1c17dff8ed4ca1df320a8005f4860d
9cb0249e0b76ab6c6d81e53ccaf8b6a2f5687a0f
1df377f3d31d6b23fb51eb01bd038e8ad071e10e4f2a585246d1a2b0b794e4a3
GET /clicks/chapter2/GX-watch_files/1586100239946_banner__.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 79716
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:07 GMT
ETag: "62e823e3-13764"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zk4kzz9u5wIFw70ETLQFo67ZZiCga04rZccwIbTVaI2vsHGYsYnzxvf9muos8Hi7a7u2QS%2FizzKAtYRN2tev3RQK35DTfvFEhOsvrDk311grx3bVMLljansClYjPlEMM8nZ6fq0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd388d1b512-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
200 OK 58 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586103152860_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash a5724ec80fd0ba3912854045e0a5dca6
1f1bdb6a41f67feb941c5d2824ea354c5685011d
d476034f617682becd5ab468c20d5f713578c0b70ee30ece4e5b4978c8e2e541
GET /clicks/chapter2/GX-watch_files/1586103152860_review__.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 58359
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-e3f7"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fa2IuFT1zAxDfmEsZoUJh7CAXQTfAmk6Nhu%2BSfiAvwDklxG0ryt4jDLFI398Y8WwOxdwAgYiU76X0N7irZbAYY1QGgYkmWO3G9ONKMY%2BzpyiQPZS0dBBnRu0lZxrMUQwvAHYKnY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd38fb7b4eb-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
200 OK 50 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586101192223_laser.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash fca31471671ea05f0f7162fa96bcad2a
451be53621ba63467a0203c532010653c6cc0618
a50afa03f5efe4300e805950def99f32a26b5c01f81ba6fbe552718a21bb1ecd
GET /clicks/chapter2/GX-watch_files/1586101192223_laser.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 49717
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-c235"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=prorS3JMhbJtcR%2FMFJ3zjFzlHrPmzcdLRtaWrS%2F1fBC8K5qSThczBvfbI1RmTP%2Bzwy3uRzEVsaz4WsEAB2xR0PAe44AK0Y32UrPTs4hTDzVWdv3MgVGOYRSXKm3L3IyGgFEnpq0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd3f9e60b51-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
200 OK 82 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586103483138_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Hash 277d28a5ee15b503ba507791bc9d0e60
a7279b9889c6e1f13c2aaecd03bc6960ec54a1bb
712eebff95f07402bc0884e094e06bbcd538881832ef6936cf566a86942e5dad
GET /clicks/chapter2/GX-watch_files/1586103483138_review__.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 82345
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-141a9"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e43CwlzCFF60X6RGAh%2FNr6D7eG39TiEbmP9WXoyi11PzKvU1jNN96T0WZ82%2F84cmOFisF0qetxM1BElv2AiVI5oZ6CsMzgfm6QnBCog2nDwZvEtRj%2Fexc%2FynYRQwckABq%2BbCIKc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd38956fac4-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.js.download
200 OK 346 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.js.download
IP
File type ASCII text, with very long lines (65324)
Size 346 kB (346199 bytes)
Hash 132bab8897a9ced6fba8df024ff44c61
5389aebace491d696e63b2747da38441e992de44
ddb165eba6b445a6c460fc57ea5f15de11383b6b75bf9259eb35ad34d442b124
GET /clicks/chapter2/GX-watch_files/semantic.min.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: application/octet-stream
Content-Length: 346199
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:07 GMT
ETag: "62e823e3-54857"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2F%2Fuub%2FMqKNbnFpHw%2Fmj9o9tEaD3G1jtQ62JmXnR0vr%2Fc%2BAp7Wab66RdarL5378Yzc2mSyMP9cOkjT9Pne8K%2BN%2FXTptUSp9SZF0Kxl2l9%2BXkALkNXRDg0UMtCb2wUjBwTg3f4Ws%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd2dfd8b512-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2
404 Not Found 153 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff2 HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DxWkSGxGZl%2Fr1sopcecAWVksMw%2FOuBofBaEpCDnLorvXSzgeU%2FVbaWqDUNQNjOMz%2Bz0KaYxgFXENPPLRimKYrxVPB2nrVH1OJsm9vpBsoIg0%2FpCP%2BHuV9UvoFA5WoH3%2BiQSCRok%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd4fb700b51-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
404 Not Found 116 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/OpenSans-Regular.5a798cdadc7cd321e3f7.ttf HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CeJGIcFxLKNQS2AP8eYt6OIschPcXYxW3kSuNQHlpe0d92qhTYWODOcCPNuRXZLQi7uzUwHMrYYMVDQVdGQ8evD27V9RKT8ATt0fl%2BrVCz6H0rOogzD90gsNuSWqPt9n9hGU%2BRw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd4e99bb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf
404 Not Found 116 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/OpenSans-Bold.0062c34665a3fc0f2278.ttf HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/styles.980a546aa37addf3afdf.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ui2WJDdLaiZDoqngD0kfUnx0GftcgiXasJzhysteWO9mjYT5USq%2FZSjrUsz7ab18aSb5Hej6R3a4AkNsriMfb4yXDxCjrMsjbpKa5dVDLkME3cdyX72UPUgyogDhBcGUL7pLt00%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd4eab5b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2
404 Not Found 153 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff2 HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RXgtd8ysWjdC%2Bw054Azo1oky1pT7WDwfsNWEZPvxLWPsDDua6nzfIxyfV4PIKv4KUdMsm%2BEikBFuMG99NKyKYe1YdpBjc7pUP0UlhrKCmhqJ5i%2Bb6lqTu3hcTBo36mCvMgfqtjg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd51a7bfac4-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
200 OK 130 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 130 kB (130041 bytes)
Hash 376d40a13fb314f6348c39ac3b14ed6f
83fe6feebe524666e39a8f201ba10a3f4ce5f78b
458b44113e09b0eb516e6b13fd90d138b1ec195cee7cf02f7c415e2a4df37f24
GET /clicks/chapter2/GX-watch_files/1586100334702_multi_view.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 130041
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1fbf9"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sAuQIvYfNL3n%2BQL7YCkgH%2BY8kCm6ZlE9Dov74rFbLn1iz9BUJvXY5kunE4QqEZs2rOE0s0QQVfy%2BW9PahjnYFfPioJ6uGv0ORTDGqfyARAriWl6%2BnE4qMqEBSmDu27cQiJPkMkI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd38de0b4e8-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff
404 Not Found 153 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.woff HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VQupoi7Aql%2FqkQu12%2FmrrfWIfV72oAsN%2FvorGA5Cr7x7Ki%2FGHg052WGyAajmkFCNMoHcPBE97%2FLxU7limbYK6Gq4%2BMgFPWNTkNizXDzwMdH%2BdgbiSpOyEphcVss3qiDA5DUC3xg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd57a85b4eb-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff
404 Not Found 153 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 706a98254456810d3e849c3957af9d01
e461d072a6ba8f0082d6f187eba7f053343529c6
8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.woff HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QJUQnV6WsP%2FWBlrqKgFQka%2FlvOUq7fz63JGq4ZvC58jPHxdR8WN3I2JaR07dJaLT2EZ7KoKbHpvb1EnUoicrUDMZzN869gayAcdAZgDfODr216TV7UvXfkdGKUMWZvYnVJYUI9s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd61b55b4eb-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
200 OK 25 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x270, components 3\012- data
Hash 5ac031f2695f2f0c0223d7e7e245f3eb
fcf0766c41f347ecac0e74310b70d78b20044dfe
f5091a260a7a625a373fda20c1dac57b734a346dcb0656a0be836f61a09b0276
GET /clicks/chapter2/GX-watch_files/1586100728425_sidebar.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 24980
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-6194"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EkjX03xa0KI%2FxRpPtVSxE9SqflKwwL6bEpdwXYVEBp8TrVQ0NVrZlvP9BbEixXsmnm4ghg74239KpwI7dC84j3Ybs1KZl49BIVc8DZ6v6klFVrXZDUhsRDZNqZq5wQPWuUjuLUE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd598c4b4e8-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf
404 Not Found 116 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/brand-icons.ttf HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mXuhNB2Y3YLZV1k9kWujef1DtFyIj%2FG3%2FWanWjV1AkGMOH6GK7KDB9ITVFNJNqr%2Bw%2FQ%2B12An0cNs1PgZsrtdq6QfflNY6yeH%2BKokfz%2FlAsxt4gI3hB0u%2BDmiEtR099qGpxe1AiU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd6bc37b4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf
404 Not Found 116 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
GET /clicks/chapter2/GX-watch_files/themes/default/assets/fonts/icons.ttf HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch_files/semantic.min.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zoTC5gbLI9kD7KGIE5%2Fj2hwfrIo4c1FyVcHkeMqqf19tI3byiiwv02d%2FgsHOxNREKkjomMsS3%2FFgJOCYusu6puBbJQeOJpFvnYap7%2F6bMsd9Gh8W7ydhn8FtoyJiqvIJkTR6JiI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd6cac1b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
200 OK 111 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586102937853_review__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 111 kB (111187 bytes)
Hash b559717db701371ec085ad351c4c5baf
de55a086bc86879864832d6038034aa9c131ffce
dc06f10b5152b28f2f8a1638e67b18025f22091259673cde91ce4921bd6b3bb3
GET /clicks/chapter2/GX-watch_files/1586102937853_review__.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 111187
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-1b253"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4BKWUaubZO7od12flTXGRJ0aCMsYcgi8%2F38RdXNgSkp1HX0gBtgOF0MytBP8Wgt7BS3oA09oM%2BpmOO6P63oRav6AEeLOzYMdhH2%2BpK3Yd%2F%2B4AUAY5nnp6uhF8F8L6UGnoqjPE6c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd57bacb512-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586101527005_heartbeat.jpg
200 OK 94 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586101527005_heartbeat.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash a0ebed5174260feaa33a4915bb96a491
777aa895cd21a81a88329387ed7a2de0f07c9a4d
9a80903f13d0921fd3cdf9ed17eba80bc42b64eebb9dea38a5544659ec4b7c92
GET /clicks/chapter2/GX-watch_files/1586101527005_heartbeat.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 94011
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-16f3b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uYEMIoVxj2YvqUDup9mgjDnwqoAbXWcQE17E38LYITtX3fsovfOM2tF0OxGUb7ht1vE7%2BWwDe5dgGjKkyql0EA49Z2cpZF5vZGSwlvbN2QfVu2O%2BrEncgQejT6WrnXfx3WUQIq4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd52b10b512-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
200 OK 103 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586102542256_features__.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 103 kB (103271 bytes)
Hash 0309841be9f6c93b5163a6ab2cb19f2a
3abb34179b969dbabdb120d51ba02ac5151b1de7
bebc224b22cec1d226915bd2118a0fc9a53d50a9f369920b30ac0eb6495a0538
GET /clicks/chapter2/GX-watch_files/1586102542256_features__.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 103271
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-19367"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cmNaA9qq2bTzqANs%2BqRQt%2BSI3MuavDAnR8Qj07NyjUXByUPZVFAlc8gp1dDUYIL0rQxspIehmdl8UKTkYl7JfCevYOoWuNIhYBfk%2BThypNmXNJCvWD0B6teQL2c1Bq54U%2BvTRcg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd56c070b51-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg
200 OK 234 kB URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x600, components 3\012- data
Size 234 kB (234504 bytes)
Hash 53204f36d6c135106517cbd07e1ea300
3b9db691224b222ebe4456b5cecce91ee382cb10
7bbae81b7732bd696dbcd5cae1079f699c9f6b09b731584c55e4a98497359c30
GET /clicks/chapter2/GX-watch_files/1586104576554_realx_.jpg HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/jpeg
Content-Length: 234504
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-39408"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zJmLyMI%2BP2bRFpDYY4cV7s3xPlkPFXig%2BP12A4K5s3kr4%2BjXcm%2BSDw5rjGEW8eodq%2Bj5aOvos7JpDDjTujlg8P2u7NZ45LtJlM4wm6nk3khdqqFREXAyxrl34PhRGvnnk9aRBTE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74cc2bd58abafac4-OSL
alt-svc: h2=":443"; ma=60
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Sun, 18 Sep 2022 18:53:39 GMT
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Length: 3249
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 38e7657af6b426db96e62cd44eeac911
b4d04a3abfd994a7eec215cbf57a08f060cea29d
24b0ee3343ba885318db8e2fc0bdbb63bad3c1bd81c09042c21a5aa93db98487
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6283
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:39 GMT
Last-Modified: Sun, 18 Sep 2022 16:48:56 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 18 Sep 2022 16:41:12 GMT
expires: Sun, 18 Sep 2022 18:41:12 GMT
cache-control: public, max-age=7200
age: 6747
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 9ecd89752214ef749272eef344b9089a
70a58a49c08934265ee34c74efb01d6b3124095d
f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: qVk9hdR7YfZmLmJd7k0Y2BSY2+k71xYgFH38ILt5TRz8Se0EP/Vo2q9vuJWqIjcMds4vqs3oitPu72HyPlfwhQ==
priority: u=3,i
content-length: 26839
x-fb-trip-id: 1679558926
date: Sun, 18 Sep 2022 18:33:39 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 38e7657af6b426db96e62cd44eeac911
b4d04a3abfd994a7eec215cbf57a08f060cea29d
24b0ee3343ba885318db8e2fc0bdbb63bad3c1bd81c09042c21a5aa93db98487
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6283
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:39 GMT
Last-Modified: Sun, 18 Sep 2022 16:48:56 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
tr.outbrain.com/unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&optOut=false&bust=03219439783005055&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&optOut=false&bust=03219439783005055&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&optOut=false&bust=03219439783005055&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: b982d73b33ae45e77c2d70c5ae272a4d
content-encoding: gzip
tr.outbrain.com/cachedClickId?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=00d6f88dd9fc53a7a314e8f968d681ae2a HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: db1270b05b7ed4ee47accad6a548ac96
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f0747f732f05e110f9fe9938de620d3
d4e9a55014187d0d2af174e5c27d03cc10c6cb05
32a866308c9d930c425a8ced1974039a409528cb4a0bd07bfbe4d8cd39be9742
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c2900cacb3e6b33190e657a697ca589b
102eb3b32fc710cef2b7053100454c30d097bab3
d5bad2878173240c5dbcef360dd701c4f13de4576ba5dedbe882745ae7ea2fb0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=2517737108351885&ev=PageView&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&rl=&if=false&ts=1663526001456&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.2.1663526001455.1406993746&it=1663526001352&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=2517737108351885&ev=PageView&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&rl=&if=false&ts=1663526001456&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.2.1663526001455.1406993746&it=1663526001352&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=2517737108351885&ev=PageView&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&rl=&if=false&ts=1663526001456&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.2.1663526001455.1406993746&it=1663526001352&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 18 Sep 2022 18:33:40 GMT
expires: Sun, 18 Sep 2022 18:33:40 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2517737108351885&ev=SmartWatch&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&rl=&if=false&ts=1663526001460&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.2.1663526001455.1406993746&it=1663526001352&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=2517737108351885&ev=SmartWatch&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&rl=&if=false&ts=1663526001460&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.2.1663526001455.1406993746&it=1663526001352&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=2517737108351885&ev=SmartWatch&dl=http%3A%2F%2Fwww.carheel.sa.com%2Fclicks%2Fchapter2%2FGX-watch.php%3Fsid%3D993916%26h%3Dt-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8%2F6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w&rl=&if=false&ts=1663526001460&sw=1280&sh=1024&v=2.9.83&r=stable&ec=1&o=30&fbp=fb.2.1663526001455.1406993746&it=1663526001352&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 18 Sep 2022 18:33:40 GMT
expires: Sun, 18 Sep 2022 18:33:40 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&gjid=6468092&_gid=471092543.1663526001&_u=YEBAAUAAAAAAAC~&z=910423322
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&gjid=6468092&_gid=471092543.1663526001&_u=YEBAAUAAAAAAAC~&z=910423322
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&gjid=6468092&_gid=471092543.1663526001&_u=YEBAAUAAAAAAAC~&z=910423322 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.carheel.sa.com
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.carheel.sa.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Sep 2022 18:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-126905093-1&cid=1858604051.1663526001&jid=267771984&gjid=255460218&_gid=471092543.1663526001&_u=YEDAAUABAAAAAC~&z=902905412
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-126905093-1&cid=1858604051.1663526001&jid=267771984&gjid=255460218&_gid=471092543.1663526001&_u=YEDAAUABAAAAAC~&z=902905412
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-126905093-1&cid=1858604051.1663526001&jid=267771984&gjid=255460218&_gid=471092543.1663526001&_u=YEDAAUABAAAAAC~&z=902905412 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.carheel.sa.com
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.carheel.sa.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Sep 2022 18:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ab15a3557f2ae57a7f109decc7bf7f21
0c33ca1edabbf1d48fa57a8960756726970f0cd0
fdd5583dbe7e847871bc54e06cf850a0895719371ba087ba7f108aa380c12142
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6f0747f732f05e110f9fe9938de620d3
d4e9a55014187d0d2af174e5c27d03cc10c6cb05
32a866308c9d930c425a8ced1974039a409528cb4a0bd07bfbe4d8cd39be9742
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 846cbf15e676b7aa9477514a183675a5
a4d9089b67555c61684a7d0b9b58668a34a16c7c
bb8e766ec5696ec9fc878a7db1496cc5fc07ef046ce53092182c0fc98c927ecc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&_u=YEBAAUAAAAAAAC~&z=1262094508
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&_u=YEBAAUAAAAAAAC~&z=1262094508
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&_u=YEBAAUAAAAAAAC~&z=1262094508 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Sep 2022 18:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&_u=YEBAAUAAAAAAAC~&z=1262094508
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&_u=YEBAAUAAAAAAAC~&z=1262094508
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-22484186-3&cid=1858604051.1663526001&jid=555051599&_u=YEBAAUAAAAAAAC~&z=1262094508 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.carheel.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Sep 2022 18:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 306ca1345fdf0ca28498ad115cea782b
97f61ca341ad256d80ca5d18b534e16497a781fa
3c96cc4baa7a17c0c6319f91b533a568f474554bd402c399456fe99078d09f9d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8700
Expires: Sun, 18 Sep 2022 20:58:40 GMT
Date: Sun, 18 Sep 2022 18:33:40 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 846cbf15e676b7aa9477514a183675a5
a4d9089b67555c61684a7d0b9b58668a34a16c7c
bb8e766ec5696ec9fc878a7db1496cc5fc07ef046ce53092182c0fc98c927ecc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 18:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5e0d4379f6517fd75a29a3d94d9199eb
0d383b811ebe839400f04333d16a5c9d4d78f802
e64c0c03925bdfaa2520d90339c90d1f8d98c432441adb771dfe1e818220f06f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E64C0C03925BDFAA2520D90339C90D1F8D98C432441ADB771DFE1E818220F06F"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8700
Expires: Sun, 18 Sep 2022 20:58:40 GMT
Date: Sun, 18 Sep 2022 18:33:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56ade9172e883c777dd974ca879bceba
b2aaf019e083443a6404c262206ee2e981d3165c
c8407ad191143d2d947464b357d8426efb334cb165c4fa5ca01573d8f7ca7b76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5133
x-amzn-requestid: 01f39c0a-c86f-4057-a505-20200819203c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioKkFrFoAMFhMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420a9-5821f44144b61475180ec961;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: mDe4BYbMkqkO3wq6onH6c_YOfWn32Z4L9t-QW_5mwez4bcrVkrQBuw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:38:13 GMT
age: 39327
etag: "b2aaf019e083443a6404c262206ee2e981d3165c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f003d8b6e12692fb16dddd6827deead8
786c333cf08456aea446a55c547520572e1c2df9
d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QgOb-hraq20XpHk_0Cyz2UMxaIEjP8ilIXt2VuhiRJWJAOG5EuAb5A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 05:49:05 GMT
age: 45875
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 29f4a52fb629dce4ef8038d4df7ea58a
4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0
32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5827
x-amzn-requestid: a30d5a61-ccb2-4582-8298-1abb79830dda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7VSF21IAMFvGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63257288-5b79117f185617fb0f37a845;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:08:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2cYYmknnm5GHRMA69N-dqXXKHb1-tfN1PuRYB5xxtRJK5Gk3-PO0Bw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:16:15 GMT
age: 40645
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62071590-e532-4ed4-a54b-1fb5a73d2f63.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62071590-e532-4ed4-a54b-1fb5a73d2f63.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 591051a00cb3f972934af2f5f945b9c3
4ae396f23a386b68ea35e348da9fdaabf973e978
ad4dbe49c25ca214af9c54466551826325e4b2d6db9346e812572be81f7e8133
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62071590-e532-4ed4-a54b-1fb5a73d2f63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13098
x-amzn-requestid: 5f4b3013-e2e5-4efc-bb37-ad3a48246c32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbTBxF3RoAMFkRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6321320b-146edea60890413e7ebac28b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 01:44:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: a0IVdWhkfwm-zx3d-0NhWnr9hrOxxOxyO0ZwbKA9COU_VHzAGHrTSA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:18:56 GMT
age: 72884
etag: "4ae396f23a386b68ea35e348da9fdaabf973e978"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc51940d1-99ea-441e-9490-3c863b1c3f7b.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc51940d1-99ea-441e-9490-3c863b1c3f7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 317bec00e52d8d6e4262f1012671398d
faff41cb28c468d04dd70fe08345eb592e761682
752624baf3cb635f20b641b2cc7e2e7a51314b1f78ffa9967e0670cb85ff7d45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc51940d1-99ea-441e-9490-3c863b1c3f7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6790
x-amzn-requestid: 000e1980-43c3-48ce-9713-879d40672144
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl8TWHjeoAMFTJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63257415-38c78207086a541735461fb7;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:15:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDcEPiXVElasC0RWKmDdB9_L2pd-Esvq_lEGGGUK14IDa-2LmQ5EGQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:17:16 GMT
age: 40584
etag: "faff41cb28c468d04dd70fe08345eb592e761682"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51d067e534c477ce996b3e806f6a132e
451c1f67948e45909e636828e3d2a3099de922f0
e13318949733eb7992695c61570cc8b2961d881a8343c677a77cd035e787bbaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6869
x-amzn-requestid: e4e424a6-6c79-405b-8d1b-d40749ae3f0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn5yLHi8oAMFpXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263cda-22f6dae17ded045177976eaf;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:32:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eSPLuSCIr6IOor8bQh1STKcy6i_bS6nPhndKrN_g7IrXl6U43TogYw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:29:35 GMT
etag: "451c1f67948e45909e636828e3d2a3099de922f0"
content-type: image/jpeg
age: 72245
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.carheel.sa.com/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
200 OK 0 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download
IP
GET /clicks/chapter2/GX-watch_files/main-es2015.a486239d1b6b56551079.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: application/octet-stream
Content-Length: 720806
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-affa6"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3LpwX9a8R80D9PWRYj7h3BSrAIDaqVBIq%2FulE2tdmEMYVihoiVmhI4GemDdZSntgNyfBy%2Fn5R2kR9H369hZ4yV45hW9nrWf71hiqUTUz%2Fn15hkKFlLZoYLFrb2Wl5xxYdCOWOY8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd23b130b61-OSL
alt-svc: h2=":443"; ma=60
www.carheel.sa.com/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
200 OK 0 B URL HTTP/1.1 www.carheel.sa.com/clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download
IP
GET /clicks/chapter2/GX-watch_files/polyfills-es2015.614913fbba11925f96b8.js.download HTTP/1.1
Host: www.carheel.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.carheel.sa.com/clicks/chapter2/GX-watch.php?sid=993916&h=t-axkrhg9wxaxlwkvk6trs9mqtfpm_agd7loc5xefn8/6xm1xbqrvshu-yfmbgfwtxpyuxfgkmcufvonyct-h1oxg2uekn_pwq53yuo6kk_1u4fw-gjw_kduxmxyqfu91pgpye-gqv1l1u8jcms1c8mrjv9gahh5ajmn70bip5fdoyqv1-1mqlj8mn4wzixc-w
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 18:33:39 GMT
Content-Type: application/octet-stream
Content-Length: 36500
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:08 GMT
ETag: "62e823e4-8e94"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0%2FiIdvxu%2F1oxCn9%2B1jfDj0nEAQRdDrI85zFAuejKsrZ52WpbuZWoqQgoyTqDpayCThtYRTm9s1p4bjKgYmUXluzujCP%2BV6RFyh5%2BcLVVUA7ZeFzAkEYv5jeoNLTOHMyj1%2Fpstug%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74cc2bd20cc01bfe-OSL
alt-svc: h2=":443"; ma=60
104.21.39.63
35.165.41.15
23.36.76.226
157.240.200.35
104.21.39.63
93.184.220.29