atbara.ahlamontada.net/t7786-topic
301 Moved Permanently 0 B URL HTTP/1.1 atbara.ahlamontada.net/t7786-topic
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t7786-topic HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 10 Nov 2022 12:58:46 GMT
Content-Length: 0
Location: https://atbara.ahlamontada.net/t7786-topic
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aabe410b4bbe4d8beb0e4561d3aa158e
e1788632902ddea62cdd9e7ad6009a75ffb69788
ad535e27b201e92670770b2b868c58f7c05633ec66490a41ef4592f062834c1f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD535E27B201E92670770B2B868C58F7C05633EC66490A41EF4592F062834C1F"
Last-Modified: Wed, 09 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3444
Expires: Thu, 10 Nov 2022 13:56:11 GMT
Date: Thu, 10 Nov 2022 12:58:47 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash a19a5555cc9ea92581b0cc504cb64345
01a86ce33d5eb33420ed76266360f32c62a96f31
9ebd48b4053bb4a7a27718670c44075b1f35d037be7fd16750fcbc3ffd68b18c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5872
Cache-Control: max-age=169812
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636cd2eb-1d7"
Expires: Sat, 12 Nov 2022 12:08:59 GMT
Last-Modified: Thu, 10 Nov 2022 10:31:07 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash a19a5555cc9ea92581b0cc504cb64345
01a86ce33d5eb33420ed76266360f32c62a96f31
9ebd48b4053bb4a7a27718670c44075b1f35d037be7fd16750fcbc3ffd68b18c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5872
Cache-Control: max-age=169812
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636cd2eb-1d7"
Expires: Sat, 12 Nov 2022 12:08:59 GMT
Last-Modified: Thu, 10 Nov 2022 10:31:07 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2b57492bf85f4ae6abbd1641b17dc9ab
008e71ec05d47bf025ca64e17da2ea1bd8e71111
17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12707
Expires: Thu, 10 Nov 2022 16:30:34 GMT
Date: Thu, 10 Nov 2022 12:58:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: imQdvNxAk1moGJwdTKz9CsO+KfX1H0jTvAhEp+LyVzuoN8Zbugz3kGt65SPUVRE3qo5C0WRXZys=
x-amz-request-id: PRPTAGAKD249TCH1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 10 Nov 2022 12:49:24 GMT
age: 563
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56bc1335a203b3a871d9efddd40f5295
9f29eb9019c080b6a04513bad14ee5f0d644398a
3e92720a96f05e2ca5aeb9beef5f514d3b03f83a0c229f754c4c87abe65cec5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E92720A96F05E2CA5AEB9BEEF5F514D3B03F83A0C229F754C4C87ABE65CEC5A"
Last-Modified: Wed, 09 Nov 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21594
Expires: Thu, 10 Nov 2022 18:58:41 GMT
Date: Thu, 10 Nov 2022 12:58:47 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 081ea13ba4390a4baab25cf57c2672f3
30cc9c329228e3d7bc6041f1aa553f06f8136eed
5a48c189581edd8ae4a4e58e2d54359bb75ba769828436394e4c256fe861814e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1654
Cache-Control: max-age=160540
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636cbf2d-1d7"
Expires: Sat, 12 Nov 2022 09:34:27 GMT
Last-Modified: Thu, 10 Nov 2022 09:06:53 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 55c8dc04bb7bbbb29a7059c7038e9345
9d84b86c8ba7586026193f4aee67e342ed5cf6b6
561db6b1b06c7c49d3eae77704a26092f2bab7e7a978e48715f9152b9e1f89f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5483
Cache-Control: max-age=151775
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c8dfb-117"
Expires: Sat, 12 Nov 2022 07:08:22 GMT
Last-Modified: Thu, 10 Nov 2022 05:36:59 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 55c8dc04bb7bbbb29a7059c7038e9345
9d84b86c8ba7586026193f4aee67e342ed5cf6b6
561db6b1b06c7c49d3eae77704a26092f2bab7e7a978e48715f9152b9e1f89f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5483
Cache-Control: max-age=151775
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c8dfb-117"
Expires: Sat, 12 Nov 2022 07:08:22 GMT
Last-Modified: Thu, 10 Nov 2022 05:36:59 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 55c8dc04bb7bbbb29a7059c7038e9345
9d84b86c8ba7586026193f4aee67e342ed5cf6b6
561db6b1b06c7c49d3eae77704a26092f2bab7e7a978e48715f9152b9e1f89f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5483
Cache-Control: max-age=151775
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c8dfb-117"
Expires: Sat, 12 Nov 2022 07:08:22 GMT
Last-Modified: Thu, 10 Nov 2022 05:36:59 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 69019e0965db576b78a2d2d9b3d43d75
7d1830adf55ea3ef73f7584c213abc3cf1ec5bae
9c132620db95f2fc904e09acc04422e5a1fadaf494952fd4e5baee028c04e07a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5366
Cache-Control: max-age=153838
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c967f-116"
Expires: Sat, 12 Nov 2022 07:42:45 GMT
Last-Modified: Thu, 10 Nov 2022 06:13:19 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2b6e814cf24d6076a53097eacb138a7f
7e3b9b5d44699f81209a7ea0182640f5596804a5
218be263224d3d1a01ba126d0a7311b972bd88744ec0919b5e471077abe68e03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2d46cc53a1538ba2f6bb280da629e041
2ef714b4f668272bd5ab9c1a27a7e5441c975b53
178465070084aced449db36199915decc6517938c9261ca1a9a0bf5b7d95a94d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 727 B IP
Hash 87573a3cd073ccbb2b9369f98adfeed2
9c9ad708fd1cbddb5b551060d12f79b2163ea896
dbc83ceba1eda4a0989e50b81964b322fa0c70563db7de9243762ccde4413ec9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3801
Cache-Control: max-age=105815
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636be105-2d7"
Expires: Fri, 11 Nov 2022 18:22:22 GMT
Last-Modified: Wed, 09 Nov 2022 17:19:01 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2b6e814cf24d6076a53097eacb138a7f
7e3b9b5d44699f81209a7ea0182640f5596804a5
218be263224d3d1a01ba126d0a7311b972bd88744ec0919b5e471077abe68e03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 313 B IP
Hash 97ec694c4c7fe980145f94c4bc4b3159
7ec97ed57b28b5f93a933acdbed42fe5567d98f1
634b4e298a699cf04b60cb63ada60a244ec8b19280218a0eb93a56884782d90a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5423
Cache-Control: max-age=123270
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c1ede-139"
Expires: Fri, 11 Nov 2022 23:13:17 GMT
Last-Modified: Wed, 09 Nov 2022 21:42:54 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Nov 2022 22:41:25 GMT
expires: Sat, 04 Nov 2023 22:41:25 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 483442
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-144347007-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-144347007-1
IP
File type ASCII text, with very long lines (1921)
Hash aabcd9db635146bb88d31ae8512ba0c3
866c677489f2dce964970385f3e794b50c370a72
aea23454e26fbd601e1f0642b8536ad76f376e7126a88c1a73382bb9d96037cf
GET /gtag/js?id=UA-144347007-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 10 Nov 2022 12:58:47 GMT
expires: Thu, 10 Nov 2022 12:58:47 GMT
cache-control: private, max-age=900
last-modified: Thu, 10 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43556
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=
200 OK 37 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP
File type ASCII text, with very long lines (1921)
Hash ff626976ba10579596e46a67b5bfe094
d6c2590f2c0e47fede29d313fff99b2bfba26981
5164e4f6fa2d7f1111ab8fa0eb307c518b61c4d0679f9bb35dcef9ee72a818bd
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 10 Nov 2022 12:58:47 GMT
expires: Thu, 10 Nov 2022 12:58:47 GMT
cache-control: private, max-age=900
last-modified: Thu, 10 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37412
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 55c8dc04bb7bbbb29a7059c7038e9345
9d84b86c8ba7586026193f4aee67e342ed5cf6b6
561db6b1b06c7c49d3eae77704a26092f2bab7e7a978e48715f9152b9e1f89f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2689
Cache-Control: max-age=148980
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c8dfb-117"
Expires: Sat, 12 Nov 2022 06:21:47 GMT
Last-Modified: Thu, 10 Nov 2022 05:36:59 GMT
Server: ECS (amb/6BB4)
X-Cache: HIT
Content-Length: 279
ocsp.usertrust.com/
200 OK 472 B IP
Hash 651a19f9e347f0d0c8864d4d0da7c58a
858c1aa1a762be16e6db1cf4b9eff7e3211febd7
a9fbf2e9bbb8ae1a4997cede204a5d4c132f4d2661754918720a4510d6e5f709
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 12:58:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:30:49 GMT
Expires: Tue, 15 Nov 2022 06:30:48 GMT
Etag: "858c1aa1a762be16e6db1cf4b9eff7e3211febd7"
Cache-Control: max-age=600524,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 767ef630e8c7b511-OSL
i.servimg.com/u/f26/11/76/67/12/canaio10.gif
200 OK 2.4 kB URL HTTP/2 i.servimg.com/u/f26/11/76/67/12/canaio10.gif
IP
File type GIF image data, version 89a, 95 x 29\012- data
Hash 93e2dde93b4d8cc0f136f4c6a635dccf
f7208ebd878c3cf3af445240b3d2f4a12f24dacf
d1cdc0e594c876739ad5a9811933a3e9fd2cc3c171b91864a153e4fb0c8a74d5
GET /u/f26/11/76/67/12/canaio10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: image/gif
content-length: 2374
last-modified: Wed, 13 Oct 2010 17:20:19 GMT
etag: "4cb5ea53-946"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Tue, 31 Oct 2023 08:43:53 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nrVejGdmXla6NLwMVJoW%2B1CzDImVMFWbl3FmPRTT%2BntyCx9i4ALoVYCb4zl3bnVIPiqeCvVZRTp2CPLgNpKQW1z9ssYXKESGmFDriTpWv20FG1ybeLtd8RbJCRtknsaD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 767ef630dbd8b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2d46cc53a1538ba2f6bb280da629e041
2ef714b4f668272bd5ab9c1a27a7e5441c975b53
178465070084aced449db36199915decc6517938c9261ca1a9a0bf5b7d95a94d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2b6e814cf24d6076a53097eacb138a7f
7e3b9b5d44699f81209a7ea0182640f5596804a5
218be263224d3d1a01ba126d0a7311b972bd88744ec0919b5e471077abe68e03
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 69019e0965db576b78a2d2d9b3d43d75
7d1830adf55ea3ef73f7584c213abc3cf1ec5bae
9c132620db95f2fc904e09acc04422e5a1fadaf494952fd4e5baee028c04e07a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2245
Cache-Control: max-age=150717
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:47 GMT
Etag: "636c967f-116"
Expires: Sat, 12 Nov 2022 06:50:44 GMT
Last-Modified: Thu, 10 Nov 2022 06:13:19 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
sd-2.archive-host.com/membres/up/24071559914142709/tuto_partager/partagerphpbb2.js
200 OK 1.2 kB URL HTTP/1.1 sd-2.archive-host.com/membres/up/24071559914142709/tuto_partager/partagerphpbb2.js
IP
File type HTML document, ASCII text, with very long lines (1162), with no line terminators
Hash 653c9d8d794b0a211a145dbb4808ef3e
ff6cf0f71935904f37a5354ca511955c22d32c03
7729116a1809e4fef0c22d194a50a95daaf7be8d57dea244d6f8920351ee1873
GET /membres/up/24071559914142709/tuto_partager/partagerphpbb2.js HTTP/1.1
Host: sd-2.archive-host.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTION
Content-Type: application/javascript
Accept-Ranges: bytes
ETag: "3817046028"
Last-Modified: Thu, 11 Nov 2010 17:53:51 GMT
Content-Length: 1162
Date: Thu, 10 Nov 2022 12:58:47 GMT
Server: Archive-Host serveur FILER-S2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5xGrejIiZmwR4bQRrVb9/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SOEiQkeIrjTyE1PROEDsRKZIXkA=
atbara.ahlamontada.net/0-rtl.css
200 OK 55 kB URL HTTP/2 atbara.ahlamontada.net/0-rtl.css
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash ee72358212a2a1c056650c9bec0799c3
b649d0c7366ee52b170d505f490e589278cb1c91
b4edc69b5ad96fbcf04654c3bee5c6f7347fbb31f52d6b1015e10f86087b63fc
GET /0-rtl.css HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/t7786-topic
Cookie: exadd=166809
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: text/css
content-length: 55228
last-modified: Thu, 10 Nov 2022 00:00:00 GMT
content-security-policy: upgrade-insecure-requests
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache-ma: MISS
X-Firefox-Spdy: h2
i.servimg.com/u/f26/11/76/67/12/iiaa10.gif
200 OK 2.3 kB URL HTTP/2 i.servimg.com/u/f26/11/76/67/12/iiaa10.gif
IP
File type GIF image data, version 89a, 95 x 29\012- data
Hash b137354e19c614d9fa0bf3075e3e29cf
02146df5e3e155130355018b9c9131e91f3f0b8f
1e81eb48e10ccfb2b957a990f2b9150fbc6b16a3d12f68860c3dd6978be2d7c7
GET /u/f26/11/76/67/12/iiaa10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 2333
last-modified: Wed, 13 Oct 2010 17:25:02 GMT
etag: "4cb5eb6e-91d"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Mon, 30 Oct 2023 10:21:40 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9cFKNed4JvnXIV83hijTdTq5DfPBB1V4kIaqf00MF1Cf7%2BjMpR62n%2FhOJKZqo%2Fs7%2FjW2Zi3DG%2BI%2FbvUJKtpm9M1jlmdMs9NQJko8lrnblHVd56lhnkYaPoPGlPpOYTl%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 767ef630dbc4b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.servimg.com/u/f26/11/76/67/12/caeoii10.gif
200 OK 2.3 kB URL HTTP/2 i.servimg.com/u/f26/11/76/67/12/caeoii10.gif
IP
File type GIF image data, version 89a, 95 x 29\012- data
Hash 44de96cb829ee0229bf5de825f7773ce
f8c4d2d2181d364859bf24ff43cd9d828f9e8c5c
2d7295a396f445460bc8f19c2a031ba37a9c26a0db75fb003ce471983cba2d00
GET /u/f26/11/76/67/12/caeoii10.gif HTTP/1.1
Host: i.servimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 2285
last-modified: Wed, 13 Oct 2010 17:24:34 GMT
etag: "4cb5eb52-8ed"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Sat, 04 Nov 2023 14:02:50 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fi92WWsi0ZlJUraXU%2FLE%2FEDws4jh3e4YMAO4qCp8pj3aRhawlPgBQhsMAR84h7mx8cRjy8QOo2CdW%2FqsvW2aEBkYhP4%2F0a6cl8AUM4XKLOm0zKDr%2F3CqBr9lVBM1oOeQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 767ef630dbc6b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/04/47/i_icon_minipost.gif
200 OK 529 B URL HTTP/2 2img.net/s/t/10/04/47/i_icon_minipost.gif
IP
File type GIF image data, version 89a, 10 x 11\012- data
Hash ebc07a50e1ca3687e367eb47b1a65c08
ce773918061456105d8ce300217469f9b7ffa836
3ab624806a767c14267be207bcc6903e36f987f1b10dbce32dd5220da809f6b4
GET /s/t/10/04/47/i_icon_minipost.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 529
last-modified: Tue, 15 Jan 2008 19:32:51 GMT
etag: "478d0a63-211"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2950501
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WuzYN5Z%2B5UP5VnDd7XT%2Bbli8muzDoXkaypiPJriOQfcED%2BVEP4DhnncHZ2807TTfm86Xd02FFflsaXeG6mMVl7JEYtvvA%2B81lZ7WAoYFnDs7K75ScbBnLWE3ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef631fc61dcd3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/i/empty.gif
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /i/empty.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 09 May 2016 08:45:50 GMT
etag: "57304e3e-2b"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2957992
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rDgSnCsP3538vuq1a82eVkJZ2cuGbeUw557r4PICUsYHKOSSVt%2FUz9VjWVqbfNHNUxNwimculCGa0aBmVmu6US2eTndvl%2FaQkxmEP%2FhVEZAl0yWy10zUyOPpZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6321ca5dcd3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/04/47/i_tabs_more.gif
200 OK 203 B URL HTTP/2 2img.net/s/t/10/04/47/i_tabs_more.gif
IP
File type GIF image data, version 87a, 11 x 11\012- data
Hash 13be49bf6b5f97cf0f6d293af48bd670
0617ffa24fa1329c9fe6704586104b7c234e4482
cf5bf79d2ecbc1f898b3bbfe37441b47da72c1b4cd5356070f54b77488dd913e
GET /s/t/10/04/47/i_tabs_more.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 203
last-modified: Wed, 27 Oct 2010 13:43:34 GMT
etag: "4cc82c86-cb"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 2950488
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aqs4dC%2B%2FiSNJDrvWQ4DdA6LWo2wANUt5d5wV%2BiSnmAt5Wz38C%2FIbtu3vm7oN4lgS7IhOf6ihXcD3nGtpA3rbayN6sVI6wKsCkX%2BQ2NI1PA2PEJXWXUUA6m%2BMRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6322cc3dcd3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/10/04/47/i_tabs_less.gif
200 OK 200 B URL HTTP/2 2img.net/s/t/10/04/47/i_tabs_less.gif
IP
File type GIF image data, version 87a, 11 x 11\012- data
Hash ab70b840dc37264ef40a016d5895b21f
9dcec01ba6c8c4e06cefcae56c3bfafe46a4ccb7
26b641746a2697b4c9884140c01f084e2bc4f1d4bc98cdb687e4f1c156e3ea0b
GET /s/t/10/04/47/i_tabs_less.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 200
last-modified: Wed, 27 Oct 2010 13:43:35 GMT
etag: "4cc82c87-c8"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 1869715
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2Fi4U5n2xGqrctVpBC9DVXzlnueCoATFVd3V7neFGjVMICNxLXtPR%2F1B6M%2FqTLbG6Octvnw2PLWeBsji2YLyc2kmRaY8c4dre1rinQYgvdcA6RN8NNyy4lA%2FNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6322cbddcd3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/s/t/12/72/84/i_icon_minitime.gif
200 OK 12 kB URL HTTP/2 2img.net/s/t/12/72/84/i_icon_minitime.gif
IP
File type GIF image data, version 89a, 40 x 40\012- data
Hash 00e0e1d24dda2c0d9a98ec656940690d
7f25e3cc28d6b4c6bdf8319200775caa5f35fda4
bf430b6097ec6403487fdbf2996a92a7e98a254cd7d8ac1f073526ea6593cdb3
GET /s/t/12/72/84/i_icon_minitime.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 11667
last-modified: Thu, 16 Oct 2008 10:05:31 GMT
etag: "48f711eb-2d93"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fw7gQfHJZCTmD%2FU70nuTzutsdz8FfMs9f9brrz%2BLHzQ0MKLj5%2Fui8rAwtYojbTVfNtNy%2FV0wHfH%2Bhr0O5WBB0if4%2F%2FLs%2B8eKQRDiMYVsA%2Bp14qqSgRJcBkLYYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6321c93dcd3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
2img.net/h/saaid.net/twage3/161.gif
200 OK 30 kB URL HTTP/2 2img.net/h/saaid.net/twage3/161.gif
IP
File type GIF image data, version 89a, 127 x 160\012- data
Hash e33b94dba7aa72ff2e3fb9a45f0bcac9
f691119977995bb2d45f4131894c259870089334
e5abec5ea43a5f447cd89d3968168907f28fbfe8741c4aaa642eb58298f31ffc
GET /h/saaid.net/twage3/161.gif HTTP/1.1
Host: 2img.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 29962
last-modified: Fri, 25 Nov 2005 13:31:08 GMT
etag: "4387121c-750a"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aouBUZQsJI3tSTuO1fq4EXbfM3wb96CjZqWPKx8edwTutp1pGGjSfoBafsCOC%2B8TePNA%2FqDwhlfCYU%2FtVTboy4s6HfmKImIbtBp6FRJFvW0vrbJorESGhiT%2B%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6321c9fdcd3-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
atbara.ahlamontada.net/serviceworker.js
200 OK 4.0 kB URL HTTP/2 atbara.ahlamontada.net/serviceworker.js
IP
Hash 796824b2c5b09a907981004d232dc718
8c6a91ef58b523f92b673ac38e0be58997d30204
d132f640562d37a6217587a40fa4c99383027d0e4f1f067bf82c2603dca755d9
GET /serviceworker.js HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: exadd=166809; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/javascript
last-modified: Thu, 25 Feb 2021 14:30:57 GMT
etag: W/"6037b4a1-b0d"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85b9cf3234f7ad8606144d5325bfc692
0c10e679676bace4cbd537157b054930ebc45eb1
44f3ef513f3774b0f6a33d9590a638021f328b4177ae5c76b2a511ed255b9e1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44F3EF513F3774B0F6A33D9590A638021F328B4177AE5C76B2A511ED255B9E1C"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4316
Expires: Thu, 10 Nov 2022 14:10:44 GMT
Date: Thu, 10 Nov 2022 12:58:48 GMT
Connection: keep-alive
sd-2.archive-host.com/membres/up/24071559914142709/tuto_partager/partager.png
200 OK 18 kB URL HTTP/1.1 sd-2.archive-host.com/membres/up/24071559914142709/tuto_partager/partager.png
IP
File type PNG image data, 424 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash d35e795222e13aa393f286e05de60160
c99013abfa6e0bd37d299c0ce262ccc17c91a674
b56d4ad98d9f72920d661acb22b7a2a287365c5e9a17b007b0b9f6c8add01ac6
GET /membres/up/24071559914142709/tuto_partager/partager.png HTTP/1.1
Host: sd-2.archive-host.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTION
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1957721545"
Last-Modified: Wed, 10 Nov 2010 17:33:24 GMT
Content-Length: 18371
Date: Thu, 10 Nov 2022 12:58:47 GMT
Server: Archive-Host serveur FILER-S2
ocsp.digicert.com/
200 OK 312 B IP
Hash 153057d828bfc2c259b3a7a35b8f320c
96e62861ca3786a298c2440ea85079b37e28d93a
5ef7af58a2f09c6061bd6a326dcbf8f3d5a13cf17216c7949e9e2231afea62ec
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3490
Cache-Control: max-age=169567
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:48 GMT
Etag: "636cdb45-138"
Expires: Sat, 12 Nov 2022 12:04:55 GMT
Last-Modified: Thu, 10 Nov 2022 11:06:45 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=atbara.ahlamontada.net&var=&ymid=&var_3=
200 OK 758 B URL HTTP/2 stootsou.net/zone?pub=0&zone_id=2308013&is_mobile=false&domain=atbara.ahlamontada.net&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (757)
Hash fe4794a4830798bd9731d203808aaa56
24e5a6f88e95eb0cd0940e1025c3f5f6fde11d48
4745885adab5236a77a2f2446106407c465fa5e556828c6cd4974b34b3201b8c
Analyzer Verdict Alert quad9 Sinkholed
GET /zone?pub=0&zone_id=2308013&is_mobile=false&domain=atbara.ahlamontada.net&var=&ymid=&var_3= HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/json; charset=utf-8
content-length: 758
x-trace-id: 5446773e47ca17638bad3be964c6975f
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 6593e65d597d67f18516ea05b02deb3e
44d98f7304969b3d44f9c76494a45baaac3c8ee5
e197f38b07b3b078d7801fc33d35f08e525d0c45ed90ab2e10178bb2a7a1a420
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3632
Cache-Control: max-age=107121
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:48 GMT
Etag: "636be6c9-139"
Expires: Fri, 11 Nov 2022 18:44:09 GMT
Last-Modified: Wed, 09 Nov 2022 17:43:37 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
atbara.ahlamontada.net/users/2913/88/89/93/smiles/266541.gif
200 OK 3.4 kB URL HTTP/2 atbara.ahlamontada.net/users/2913/88/89/93/smiles/266541.gif
IP
File type GIF image data, version 89a, 179 x 41\012- data
Hash 45992f584a91b15b150bba67e4b2c8e9
fb88f9230c932c6dfc9129a6dde4fe3e72e171c4
2d2567f79a654cddd8a53e8314168aeb1a30388429b3aed9884b364747f4347d
GET /users/2913/88/89/93/smiles/266541.gif HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/t7786-topic
Cookie: exadd=166809
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: image/gif
content-length: 3448
last-modified: Mon, 01 Jan 2001 00:00:00 GMT
etag: "3a4fc880-d78"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash f3ffd30de5ae018552a7efe2ce98ca25
623918a32216fedcd071a0c1b4254d28da44b463
df7563da7de356d53a16f467fd153cbcc4232d66dbd883ead9695acaedeb617d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6352
Cache-Control: max-age=134298
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:48 GMT
Etag: "636c4652-117"
Expires: Sat, 12 Nov 2022 02:17:06 GMT
Last-Modified: Thu, 10 Nov 2022 00:31:14 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=yZNvZV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnp5cHdzNEZyY24wMDE5NWI3anBHRkQ; expires=Tue, 05 Dec 2023 12:58:48 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 367825
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cdn.viglink.com/api/vglnk.js
200 OK 29 kB URL HTTP/2 cdn.viglink.com/api/vglnk.js
IP
File type ASCII text, with very long lines (693)
Hash 072eaf64a771815874455704fca9301b
6c6226d00f14bb800cd4390b3cd42df941be43b1
bb35c8c300bd1acfe7ed86eb988f74ff2e8d86a4fb0409c5d78a890f9fd14b8e
GET /api/vglnk.js HTTP/1.1
Host: cdn.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: text/javascript
content-length: 28567
x-amz-id-2: kFPAC60DOwNQb4CdhqHG+tKjRF2TQjxpEdeKJyhLPdvjoiSwXPmNvXMEMMBRIwIu/QGXu5HJg1c=
x-amz-request-id: NTCW971RKN3GM3ZQ
last-modified: Wed, 02 Dec 2020 18:57:12 GMT
etag: "072eaf64a771815874455704fca9301b"
cache-control: public, max-age=604800
content-encoding: gzip
cf-cache-status: HIT
age: 1781581
expires: Thu, 17 Nov 2022 12:58:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6368adfb527-OSL
X-Firefox-Spdy: h2
stootsou.net/pfe/current/universal.min.js?v=3.1.403
200 OK 59 kB URL HTTP/2 stootsou.net/pfe/current/universal.min.js?v=3.1.403
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 085e84da85a45c3dbe27193e0ea59d55
7d39812002453c4d9991fc6b61b909b57829af22
22e49c738d278104962197c127443a038c64713386daf893b34597084bb13c1a
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/universal.min.js?v=3.1.403 HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 14:20:39 GMT
etag: W/"636a65b7-180b9"
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 10 Nov 2022 12:41:09 GMT
expires: Thu, 10 Nov 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 1059
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash a4bdcb1760e810efffba7a17887a7063
1bc8eac7b19de71df85e753c61f2659aede88760
c7e0d1c9421b05bae7a333f6d13388db08ed1c5a48be7daa1bba6ef7564c8522
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5189
Cache-Control: max-age=167326
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:48 GMT
Etag: "636ccbe1-138"
Expires: Sat, 12 Nov 2022 11:27:34 GMT
Last-Modified: Thu, 10 Nov 2022 10:01:05 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
200 OK 312 B IP
Hash a4bdcb1760e810efffba7a17887a7063
1bc8eac7b19de71df85e753c61f2659aede88760
c7e0d1c9421b05bae7a333f6d13388db08ed1c5a48be7daa1bba6ef7564c8522
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5220
Cache-Control: max-age=167357
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:48 GMT
Etag: "636ccbe1-138"
Expires: Sat, 12 Nov 2022 11:28:05 GMT
Last-Modified: Thu, 10 Nov 2022 10:01:05 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 312
illiweb.com/rs3/64/frm/jquery/marquee/jquery.marquee.min.js
200 OK 7.9 kB URL HTTP/2 illiweb.com/rs3/64/frm/jquery/marquee/jquery.marquee.min.js
IP
File type HTML document, ASCII text, with very long lines (4467), with no line terminators
Hash 9f0423fb0d84d4e6920e1a45710e31e2
3cdb8d57ccbacb9cc60353e4a96859df8fc898cc
97ef18d00b37fb433641b27f0f2c293375047ed96b413b191476f7a8b8c6d39a
GET /rs3/64/frm/jquery/marquee/jquery.marquee.min.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: application/x-javascript
last-modified: Tue, 27 Aug 2019 14:00:14 GMT
expires: Tue, 07 Nov 2023 08:27:36 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
cf-cache-status: HIT
age: 275471
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4Z02PW8RZKYfEeeEPhEBx2%2BbBUm%2FwVdQ4jU6BGg2JojepdL7cngvdy0SscUXwADUOA3eIsjS4%2BiSSY%2B438aM0GtpcVVWIcNsWmrWEVwddBLbeT1tbAZCybVYpBd%2F0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef630cb53b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/impl.20221108-4-RELEASE.js
200 OK 146 kB URL HTTP/2 cdn.taboola.com/libtrc/impl.20221108-4-RELEASE.js
IP
File type ASCII text, with very long lines (65509)
Size 146 kB (146001 bytes)
Hash 88c487ac892a30204e98821760358d3a
a15fe00062e424617d405b27c3376831d502cb90
caed01e353e989f88d91dbea2b18991c111c4acdece297d0ff65eb50ffd5fd8b
GET /libtrc/impl.20221108-4-RELEASE.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7NIfjc5DF1L2B/kzlgqwEMQz6AeXPHeJ8bdJplySczuZ/p+wuSvwQmO0NIljPmdKYCKWw7PfupA=
x-amz-request-id: EGG6QY2K8WHEN44M
last-modified: Tue, 08 Nov 2022 09:41:14 GMT
etag: "88c487ac892a30204e98821760358d3a"
content-encoding: br
x-amz-version-id: Hr3XNjpCCkEC_aHpskXb5vO2HjdO2stg
content-type: application/javascript
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:48 GMT
via: 1.1 varnish
age: 11854
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 3854
x-timer: S1668085129.807418,VS0,VE0
cache-control: private,max-age=31536000
vary: Accept-Encoding
abp: 2
server: AmazonS3-br
content-length: 146001
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 510 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
Hash c2c688c3aeac3f88149d228174d4f558
a0fffb540ea470600fd8f8484c49b862cf095ea2
87ce512a5bafd8d712b0ebf55b4fd9e18759925dcf8a37c20d127eec49311a41
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 88320
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc-events.taboola.com/forumotion-ar/log/2/debug?tim=12%3A58%3A45.087&type=usage&msg=rtus&llvl=2&id=7810&cv=20221108-4-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/forumotion-ar/log/2/debug?tim=12%3A58%3A45.087&type=usage&msg=rtus&llvl=2&id=7810&cv=20221108-4-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=12%3A58%3A45.087&type=usage&msg=rtus&llvl=2&id=7810&cv=20221108-4-RELEASE<=deflated&file=rtus.js&method=injectRtus&position=default&extraData=%7B%7D HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
x-fastly-to-nlb-rtt: 22397
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.viglink.com/api/ping
200 OK 259 B IP
File type ASCII text, with no line terminators
Hash 9a6a41407f8c1d79ff75ec181df5da41
89c4ba5c8ccbb600dbd2e096b17bb8e0e8ec2000
fdd5c70b02ec4767f241531fee5319d004f0fec9b65b7158feb1ebaa2ef5fe20
POST /api/ping HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 142
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://atbara.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Thu, 10 Nov 2022 12:58:48 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 259
Connection: keep-alive
atbara.ahlamontada.net/images/icons-180.png
200 OK 22 kB URL HTTP/2 atbara.ahlamontada.net/images/icons-180.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash c09abdd2df6f44c15c23ca18e3b28777
58c655daeafee56f5a25f93520b5c8e2d0fadd8d
055e818a263d30964deb881dbed63d2ef518aaa09cef46e7adbe1a6d8a591dae
GET /images/icons-180.png HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/t7786-topic
Cookie: exadd=166809; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: image/png
content-length: 21616
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Thu, 10 Nov 2022 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
x-cache-ic: MISS
X-Firefox-Spdy: h2
api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
200 OK 43 B URL HTTP/1.1 api.viglink.com/api/sync.js?key=74bad24252620514d1244cfba01f2ee2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /api/sync.js?key=74bad24252620514d1244cfba01f2ee2 HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: image/gif;charset=UTF-8
Date: Thu, 10 Nov 2022 12:58:48 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 43
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c89768eee117880b59f8644d2138e52
49a829a38293c8f1eb86dbbccc82017f1d5d86bb
c512960cca090441f3c7e9ffea25448965eb4068d1506b8afa6d391b3c3a07be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=360362150.1668085125&jid=153113392&gjid=158055833&_gid=2064001388.1668085125&_u=YEBAAUAAAAAAACAAI~&z=1996943530
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=360362150.1668085125&jid=153113392&gjid=158055833&_gid=2064001388.1668085125&_u=YEBAAUAAAAAAACAAI~&z=1996943530
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-144347007-1&cid=360362150.1668085125&jid=153113392&gjid=158055833&_gid=2064001388.1668085125&_u=YEBAAUAAAAAAACAAI~&z=1996943530 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://atbara.ahlamontada.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 10 Nov 2022 12:58:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.js
200 OK 40 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.js
IP
Hash 339dc161462639d817df2f5dfa10b06d
af22c7d203d32d093b21f16b552d965f47f4d6c0
7b4a17b426ca8c571e1549b951cdb9ebdda212030e7d885c0dceec17c90513f8
GET /js/ld/publishertag.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-1e444"
expires: Fri, 11 Nov 2022 12:58:47 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8566
Expires: Thu, 10 Nov 2022 15:21:35 GMT
Date: Thu, 10 Nov 2022 12:58:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8566
Expires: Thu, 10 Nov 2022 15:21:35 GMT
Date: Thu, 10 Nov 2022 12:58:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8566
Expires: Thu, 10 Nov 2022 15:21:35 GMT
Date: Thu, 10 Nov 2022 12:58:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe468f92f-2486-4c80-ab37-4225f9f983cc.webp
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe468f92f-2486-4c80-ab37-4225f9f983cc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5fc04eddc597d6b10db5d59c53f20aec
dddc0da13526d24aaea990cc1d68d9212612da43
a7e2d1fd141c4383de3411be95b8875c9d969d5f001020793a2b4d939aaa780b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe468f92f-2486-4c80-ab37-4225f9f983cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12268
x-amzn-requestid: cd9ea4f7-9a75-47b4-a0ad-817c821a592e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlpZHbBIAMFfUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1ca2-69a98f453929cc817bead2c7;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Xq1vIovXXR0pPaaHjKWeLcZszoEkISrYvqKvshtQ9dFTf6CUwxmIWA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 22:16:00 GMT
etag: "dddc0da13526d24aaea990cc1d68d9212612da43"
content-type: image/jpeg
age: 52969
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8566
Expires: Thu, 10 Nov 2022 15:21:35 GMT
Date: Thu, 10 Nov 2022 12:58:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a929256680885031f55121c35d626bcc
9caf2466f70995d5763b970f916c4944b364a4ff
9366db1c171fe9dae5946198415c9a02005a432fccd359896f94bce874c91027
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9283
x-amzn-requestid: c800cccd-80cc-4cd6-8856-66cfd07141c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWmC2HnpIAMF3kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1d45-686eac2b6c65b8dd41dfb44a;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2SqQjq27y6Vrwzl9a_ho6sOPImE7Fpbyxie8_fuPGa6bf8fn-yX0Jw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 22:13:45 GMT
age: 53104
etag: "9caf2466f70995d5763b970f916c4944b364a4ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash feb275cc5fa7b13e70522cb76f001bbc
80ca9cf6cbbc73a884c3a839ace9a7aa191a8504
a5680637b55669355967b87fd4be4881a3e4dea746b7c420acf4dcb46b8a28de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8242
x-amzn-requestid: 1ab9c180-7e6b-4eae-a6cf-6a45c96fdc4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlrkE_2oAMFk2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1cb0-0089846803d11bb649874507;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6xhB_vy5Aj6ScBQuTwWX93HFG5eS3SZHr7dP2Qsz-Q1P1pcXk339gQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:43:10 GMT
age: 54939
etag: "80ca9cf6cbbc73a884c3a839ace9a7aa191a8504"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74db090f-5da5-464b-91b1-7fac90d3e5eb.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74db090f-5da5-464b-91b1-7fac90d3e5eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d68ac59950c3276cd8f92b777a004df1
94c0ee5c14e8e8cdf95883582ba8084cc5867f93
b02d6d61c1fae8260d1fc30c0a78ebbc3482a3aa0acafb58d8269942ff8e732b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74db090f-5da5-464b-91b1-7fac90d3e5eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7987
x-amzn-requestid: 6a465dcd-6a4e-49fb-9fa9-169678d39b5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlo7HBFIAMFSQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c9f-4ffe8f2534aeaef73329a8cd;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:19 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gbK3hyzE9RBuLiIQHUrouV-Kqe6r2cTMLYauv9W0ych9irxQexKWAQ==
via: 1.1 637ef0a7bc474e9a314fa064b65e8082.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:53:35 GMT
age: 54314
etag: "94c0ee5c14e8e8cdf95883582ba8084cc5867f93"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c2db9097ad95b726c65a3130483daf7
2b6dbe326a49e03a0f8d1a5d15930fd7870f6f79
1da5e63e7a3e837c758bb365e5e99e6dfb6c54e9b2fe038c3eb1334a86dc4d74
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7723
x-amzn-requestid: 1e07419e-8cd6-43d6-b0bb-61183502ee40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlpGHFKIAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1ca0-751c8b152ea5c28f5a78bf46;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: BXdwO74rhbF9575IFRz-DNbcEFNiX7JiCtsvghmUE8zOju0eyuFjow==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 22:16:00 GMT
etag: "2b6dbe326a49e03a0f8d1a5d15930fd7870f6f79"
content-type: image/jpeg
age: 52969
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c89768eee117880b59f8644d2138e52
49a829a38293c8f1eb86dbbccc82017f1d5d86bb
c512960cca090441f3c7e9ffea25448965eb4068d1506b8afa6d391b3c3a07be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 178b1b5efcd0c5997d0e5b820193abe2
460630852800c0304295c78df268bfec64416f98
9822d2ef4199dcc01f81a8e6d3a91d9545466c17abfca4eb30e0a49ca8301da6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3445
x-amzn-requestid: 92b5ba7a-e45a-495c-89ae-9738fd5644bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWloyHMpoAMF-Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c9e-5508b96c349a34537809ef0e;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3-XU3AO60wbMDZcPshBPHvxEFAQHVs7-dlg52BfbxkSlDAEx9kaeeg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:50:01 GMT
age: 54528
etag: "460630852800c0304295c78df268bfec64416f98"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 41 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 68959ceaf74f467f7152257e4012612a
48b13b71f4a9feb836511604b7eaa6d421facb26
74b68e2f4b363bc3666f9cfa257df6ee8747a82646e6bede2a2ef125fffe97f8
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 351
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://atbara.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Thu, 10 Nov 2022 12:58:48 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 41
Connection: keep-alive
stootsou.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Content-Type: application/json
Origin: https://atbara.ahlamontada.net
Content-Length: 392
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: eec2c8cd90dbe2eb0db03d6308f6097f
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Content-Type: application/json
Origin: https://atbara.ahlamontada.net
Content-Length: 756
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 91305a48c092b8bf120af8102bfc7735
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
stootsou.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert quad9 Sinkholed
POST /custom HTTP/1.1
Host: stootsou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Content-Type: application/json
Origin: https://atbara.ahlamontada.net
Content-Length: 473
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4b527a26942e87b7df9a588d3ec447da
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c6b9a9dd398128374d389792bb6de39c
7e5db06007ca1b6660a1e89d0f2634d30236db4c
9c1ec3ee781e08645a1c70637a3bc8e2d04745dd375353e24c8cee9bfb8f02c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C1EC3EE781E08645A1C70637A3BC8E2D04745DD375353E24C8CEE9BFB8F02C5"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3040
Expires: Thu, 10 Nov 2022 13:49:29 GMT
Date: Thu, 10 Nov 2022 12:58:49 GMT
Connection: keep-alive
cdn.taboola.com/libtrc/cta-component.20221108-4-RELEASE.es6.js
200 OK 5.1 kB URL HTTP/2 cdn.taboola.com/libtrc/cta-component.20221108-4-RELEASE.es6.js
IP
File type ASCII text, with very long lines (18924)
Hash b0c3f7f5fa992fa4f90289b4bc8073d8
48082ca2bc1c9ee7267b19d5ed3cb2b83753fee2
591be28041918d0649ced1ebd784fe6cf65f5937ce8fe59f8dd51eb4cf584a19
GET /libtrc/cta-component.20221108-4-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ojRELAKDoDSxX+IYsfAVmbijwGsSQT6r1oQEJG5Wv3PKOyh6nP4+ukzvEGmfHC4JuEzrubUjHDs=
x-amz-request-id: QJS8NG5DR3YWENAM
x-amz-replication-status: PENDING
last-modified: Tue, 08 Nov 2022 19:33:11 GMT
etag: "7b9609f73c2e63980062421a43baf646"
x-amz-version-id: NSquFNXPLbn2OL1WjBrsZ0lNv2zYybql
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
via: 1.1 varnish
age: 43
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 9
x-timer: S1668085129.454187,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 2
content-length: 5108
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/userx.20221108-4-RELEASE.es6.js
200 OK 5.4 kB URL HTTP/2 cdn.taboola.com/libtrc/userx.20221108-4-RELEASE.es6.js
IP
File type ASCII text, with very long lines (17842)
Hash 963d77ca83c1ef5c8c622f69fcaa7cd6
88c3b40efed3822d2dbea0e42bd0756c37628814
d89ac78823b96fe54d5b90628e7879f235e9090e0160d0f37ccab22d1ef69c69
GET /libtrc/userx.20221108-4-RELEASE.es6.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GDnYjBbCiwHp61EcLghxyjr3oq5xzh2Eac7lyvlx+wORECinvMlUAQDcfbvFLT89+7IHtSoOyLI=
x-amz-request-id: 0JCWFZ09W7Y8GE4S
x-amz-replication-status: PENDING
last-modified: Tue, 08 Nov 2022 19:34:09 GMT
etag: "8be6f968f7c696b0b12bbfa029abd2bd"
x-amz-version-id: Ps6T8wFCySZBAs8KjVLJqdGfJsa23oNM
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
via: 1.1 varnish
age: 98
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 11
x-timer: S1668085129.454413,VS0,VE0
cache-control: private,max-age=14400
vary: Accept-Encoding
abp: 2
content-length: 5397
X-Firefox-Spdy: h2
atbara.ahlamontada.net/sw.js
200 OK 32 kB URL HTTP/2 atbara.ahlamontada.net/sw.js
IP
File type ASCII text, with very long lines (60076)
Hash 1c099443db331965f35663340b2d101d
a234ece16e9b0277b2721759721ee89f305e9023
1d1fc6281595de7f234172b19d3ba00c388ae5c865f96f131cf0578ecf8d0fde
GET /sw.js HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/t7786-topic
Connection: keep-alive
Cookie: exadd=166809; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D; _ga=GA1.2.360362150.1668085125; _gid=GA1.2.2064001388.1668085125; _gat_gtag_UA_144347007_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/javascript
last-modified: Tue, 27 Aug 2019 13:54:01 GMT
etag: W/"5d6535f9-1554"
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9b27d0bfaf6ec30690eba902f50ce1ce
b274adea0a925d814dfd0ad80d1888dd06f4e269
f66f94bb109a214e8d83f5112c7468c729357833cf65e2d7db4f49564fac3485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2817ce33ca8b3667491f155a141abfa7
c39855bf058d975083bd145b944a438b47307a36
33bb12b05df7cb1e19ba5647d57b5cc5f0a79095a2ca40a04e5fe076b7e33422
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//rtvoo.com/content/cfa59c61-c53b-4187-b667-2cb5d1bd5e6a
200 OK 14 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//rtvoo.com/content/cfa59c61-c53b-4187-b667-2cb5d1bd5e6a
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash efae1e10e36621d8185389584ca74e42
f8c8ae4df7551d355431e1038108bfd2c6fbbdde
93d12d4cbad3eff089cbf262d24008ec8eec79f4887fa20feeed97f2899d5205
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//rtvoo.com/content/cfa59c61-c53b-4187-b667-2cb5d1bd5e6a HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 590574895698910013621130037032475758841,523272642140522660213979017363544863538,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 590574895698910013621130037032475758841,523272642140522660213979017363544863538,29ecf9b93bbf306179626feeda1fab70
etag: "33017b26afce59b98db4fab33c1fec18"
last-modified: Thu, 22 Sep 2022 14:34:49 GMT
req-referer: https://www.hankyung.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 931eb7be31d674643cbfd15b4d1b39ae
x-envoy-upstream-service-time: 677
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb802
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
age: 2575556
x-served-by: cache-iad-kcgs7200045-IAD, cache-iad-kiad7000063-IAD, cache-lga21980-LGA, cache-iad-kcgs7200119-IAD, cache-bma1672-BMA
x-cache: HIT, HIT, HIT, MISS, HIT
x-cache-hits: 1, 3, 1, 0, 1
x-timer: S1668085130.523500,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_180%2Cw_360%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//rtvoo.com/content/cfa59c61-c53b-4187-b667-2cb5d1bd5e6a
x-vcl-time-ms: 2
content-length: 13938
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=360362150.1668085125&jid=153113392&_u=YEBAAUAAAAAAACAAI~&z=1072969783
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=360362150.1668085125&jid=153113392&_u=YEBAAUAAAAAAACAAI~&z=1072969783
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-144347007-1&cid=360362150.1668085125&jid=153113392&_u=YEBAAUAAAAAAACAAI~&z=1072969783 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 10 Nov 2022 12:58:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=atbara.ahlamontada.net&info=PY-MV180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnd1cWJVSHhBeWxUNTc1TXRlbmcwdjc&idsd=-926013448,-1077012019&cw=1&lsw=1
200 OK 533 B URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=atbara.ahlamontada.net&info=PY-MV180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnd1cWJVSHhBeWxUNTc1TXRlbmcwdjc&idsd=-926013448,-1077012019&cw=1&lsw=1
IP
Hash 482846b13f5b0adf1c449a82840170f6
744a8d7a428879b43fa19e865486fecff7a0ae95
01b5233c5ae8091cd095930041ded0ee66e8c4bbfa2449292052946ec198f2bc
GET /sid/json?origin=publishertag&domain=ahlamontada.net&sn=FirefoxSyncframe&so=0&topUrl=atbara.ahlamontada.net&info=PY-MV180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnd1cWJVSHhBeWxUNTc1TXRlbmcwdjc&idsd=-926013448,-1077012019&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1021024
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=atbara.ahlamontada.net&bundle=k_CfMl9zWDlVWWxKVEJBMU0wNnpqVjlBQkc2eDB0cXpxb3RFY3BSUWN1TVB0c2xuOHlQWm1FQkFwazFGRGhhMkJCb3JTU1l4eW5INW9yY29ITXlzNkhrUFklMkZwNXU1OTJoYyUyQlpDR2YyRjM2ViUyRnJtZWxMMjhPWGVsZUZWY1FKU0NieVR1TER0Z0ZNVVJlNWdQQ3VXdWlDTlFQZkElM0QlM0Q&info=FGDw7180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnlQMHM2elBiYjNLbFdWMTA2SDdBSkY&idsd=-926013448,-1077012019&cw=1&rtusCallerId=72&lsw=1
200 OK 790 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=atbara.ahlamontada.net&bundle=k_CfMl9zWDlVWWxKVEJBMU0wNnpqVjlBQkc2eDB0cXpxb3RFY3BSUWN1TVB0c2xuOHlQWm1FQkFwazFGRGhhMkJCb3JTU1l4eW5INW9yY29ITXlzNkhrUFklMkZwNXU1OTJoYyUyQlpDR2YyRjM2ViUyRnJtZWxMMjhPWGVsZUZWY1FKU0NieVR1TER0Z0ZNVVJlNWdQQ3VXdWlDTlFQZkElM0QlM0Q&info=FGDw7180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnlQMHM2elBiYjNLbFdWMTA2SDdBSkY&idsd=-926013448,-1077012019&cw=1&rtusCallerId=72&lsw=1
IP
Hash 1d1ea1a73cf6a400f958f836ed5070bb
948666f16079440f363fe2eae6faea39134d0530
e6f62791755cd7f5736c18cf0eab5700dc042a0b4ed806db13dc66894c5d996b
GET /sid/json?origin=rtus&domain=ahlamontada.net&sn=FirefoxSyncframe&so=3&topUrl=atbara.ahlamontada.net&bundle=k_CfMl9zWDlVWWxKVEJBMU0wNnpqVjlBQkc2eDB0cXpxb3RFY3BSUWN1TVB0c2xuOHlQWm1FQkFwazFGRGhhMkJCb3JTU1l4eW5INW9yY29ITXlzNkhrUFklMkZwNXU1OTJoYyUyQlpDR2YyRjM2ViUyRnJtZWxMMjhPWGVsZUZWY1FKU0NieVR1TER0Z0ZNVVJlNWdQQ3VXdWlDTlFQZkElM0QlM0Q&info=FGDw7180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnlQMHM2elBiYjNLbFdWMTA2SDdBSkY&idsd=-926013448,-1077012019&cw=1&rtusCallerId=72&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1458881
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 9.4 kB IP
Hash eebf6a8eed64a2caabdd90f2091fbd55
6d7174778401d3b7b8bbc1cee6f1a16ffc108728
c1548b2085f6666fd94d492732b0e32402be528ea52146451aecaa69a44f3513
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=yZNvZV80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnp5cHdzNEZyY24wMDE5NWI3anBHRkQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=PY-MV180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3c1WmFDMGZrYUkyaHJkZGlMSWRnQnd1cWJVSHhBeWxUNTc1TXRlbmcwdjc; expires=Tue, 05 Dec 2023 12:58:49 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 352882
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8af9489e21335e095cadbe716ea9267a
59e3ef7cc22ef2093d1454be3f395ebb691ff8dd
49c1a8961499cfffcebf02a1a6a154f0dda49f55ad199da2fc9e8828ca7470a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5695
Cache-Control: max-age=161703
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:49 GMT
Etag: "636cb3f1-117"
Expires: Sat, 12 Nov 2022 09:53:52 GMT
Last-Modified: Thu, 10 Nov 2022 08:18:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
bidder.criteo.com/csm/events
204 No Content 0 B URL HTTP/2 bidder.criteo.com/csm/events
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csm/events HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 370
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 10 Nov 2022 12:58:49 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://atbara.ahlamontada.net
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 8af9489e21335e095cadbe716ea9267a
59e3ef7cc22ef2093d1454be3f395ebb691ff8dd
49c1a8961499cfffcebf02a1a6a154f0dda49f55ad199da2fc9e8828ca7470a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5695
Cache-Control: max-age=161703
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:49 GMT
Etag: "636cb3f1-117"
Expires: Sat, 12 Nov 2022 09:53:52 GMT
Last-Modified: Thu, 10 Nov 2022 08:18:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//hitsk.in/t/16/13/46/i_logo.png
200 OK 13 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//hitsk.in/t/16/13/46/i_logo.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 672a18b1f7ac0e98d494774e97ee6eca
d2bf36e86372dc869cc6db7c51e017424c07c1a4
9b689f55ab2df9487fcd903769d19cf578e60eae9ceec8eec9dd23e8be59fdbd
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//hitsk.in/t/16/13/46/i_logo.png HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 300655712052199171545574879548997087647,440009874943970692176080915478359259825,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 300655712052199171545574879548997087647,440009874943970692176080915478359259825,29ecf9b93bbf306179626feeda1fab70
etag: "34ecfb149365bf77309df36056fe2549"
expiration: expiry-date="Fri, 30 Sep 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Tue, 30 Aug 2022 08:55:20 GMT
req-referer: https://al-ruqya.ahlamontada.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 905
x-backend-name: CH_DIR:3FP7YNX3LMizprTZsG7BSW--F_CH_nlb802
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
age: 4806174
x-served-by: cache-iad-kjyo7100177-IAD, cache-iad-kiad7000052-IAD, cache-lga21922-LGA, cache-iad-kjyo7100051-IAD, cache-bma1672-BMA
x-cache: MISS, HIT, HIT, HIT, HIT
x-cache-hits: 0, 1, 1, 8, 1
x-timer: S1668085130.852407,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//hitsk.in/t/16/13/46/i_logo.png
x-vcl-time-ms: 1
content-length: 13336
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f62/13/32/79/54/uaouo10.gif
200 OK 22 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f62/13/32/79/54/uaouo10.gif
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x200, components 3\012- data
Hash 7d053860d9fad0b100131520c50f069b
33ecfc2fc59d7ecfbecff569778d8d9e8aa55d05
f7082f1724ff5f0b8bf8cbefeaf5969d2aac04ef488c559b37edc13279198a32
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f62/13/32/79/54/uaouo10.gif HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 538475434606933197924381234642994484733,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
content-type: image/jpeg
edge-cache-tag: 538475434606933197924381234642994484733,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "7d053860d9fad0b100131520c50f069b"
expiration: expiry-date="Sun, 06 Nov 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Thu, 06 Oct 2022 18:01:26 GMT
server: cloudinary
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-backend-name: CLOUDINARY:3FP7YNX3LMizprTZsG7BSW--F_addr_taboola_res_cloudinary_com
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
age: 1842102
x-served-by: cache-iad-kjyo7100031-IAD, cache-iad-kjyo7100118-IAD, cache-bma1672-BMA
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 83, 1
x-timer: S1668085130.852755,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f62/13/32/79/54/uaouo10.gif
x-vcl-time-ms: 1
content-length: 22462
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
200 OK 12 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7e2823d12a0e69784dd9f2ccaef4af99
aa947ae91377e23dea893475dba70c3be8ef1ede
61d9bf4438034b826c366ab50bfb546989ed5c3cddd19f6569705d6030ec4abf
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 352690306229506137798207407469809578240,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 352690306229506137798207407469809578240,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "b3c9505a19038b4db67c1b73ca53d270"
last-modified: Tue, 04 Oct 2022 10:35:32 GMT
req-referer: https://espoir.yoo7.com/
status: 200 OK
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-request-id: 2326e4eb2090fbf37472b9c3ee9648d9
x-envoy-upstream-service-time: 1304
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb204
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
age: 1841899
x-served-by: cache-iad-kcgs7200155-IAD, cache-iad-kcgs7200020-IAD, cache-lax10633-LGB, cache-iad-kcgs7200059-IAD, cache-bma1672-BMA
x-cache: MISS, HIT, HIT, HIT, HIT
x-cache-hits: 0, 1, 1, 46, 1
x-timer: S1668085130.852819,VS0,VE1
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f21/19/73/51/38/vente-10.jpg
x-vcl-time-ms: 1
content-length: 12202
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f55/15/01/00/96/x1010.gif
200 OK 5.3 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f55/15/01/00/96/x1010.gif
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x200, components 3\012- data
Hash 4b5e3cbabbbeaff48c08fdf44433b8c7
7906f97afbb61e888de8b84ad47d2aa879b5c8a3
42ac80be23888b7dc033fb681a72d1a683d1dc3c95b0009c6beba14f150eeca6
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f55/15/01/00/96/x1010.gif HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 574731196228743971934801897732286999556,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
content-type: image/jpeg
edge-cache-tag: 574731196228743971934801897732286999556,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "4b5e3cbabbbeaff48c08fdf44433b8c7"
last-modified: Wed, 09 Nov 2022 02:55:57 GMT
server: cloudinary
status: 200 OK
timing-allow-origin: *
x-request-id: 1b2635a2147296a382b2df9a3106fb13
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
x-backend-name: CLOUDINARY:3FP7YNX3LMizprTZsG7BSW--F_addr_taboola_res_cloudinary_com
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
age: 121960
x-served-by: cache-iad-kiad7000022-IAD, cache-iad-kjyo7100135-IAD, cache-bma1672-BMA
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 15, 1
x-timer: S1668085130.852797,VS0,VE2
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f55/15/01/00/96/x1010.gif
x-vcl-time-ms: 2
content-length: 5336
X-Firefox-Spdy: h2
images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
200 OK 8.6 kB URL HTTP/2 images.taboola.com/taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0d730728cd19c8bb7337ab619d412568
050455bf29bd27121b0151d9f82c3739f173dd48
c737b8c625f0881771f52bfd92a45407ae550b515b1e5212c1cfbc63c9c0a653
GET /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg HTTP/1.1
Host: images.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-tag: 549930644253185078118877309127813515040,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
edge-cache-tag: 549930644253185078118877309127813515040,378603099105430713408637329582199312940,29ecf9b93bbf306179626feeda1fab70
etag: "9f4fd3f25295fc11b6ab3597fc8b7691"
expiration: expiry-date="Thu, 27 Oct 2022 00:00:00 GMT", rule-id="delete fetch for taboola after 30 days"
last-modified: Mon, 26 Sep 2022 18:23:49 GMT
req-referer: https://ksa001.ahlamontada.com/
timing-allow-origin: *
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
x-ratelimit-reset: 1
x-envoy-upstream-service-time: 105
x-backend-name: LA_DIR:3FP7YNX3LMizprTZsG7BSW--F_LA_nlb204
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
age: 2597448
x-served-by: cache-iad-kjyo7100073-IAD, cache-iad-kiad7000119-IAD, cache-lax10667-LGB, cache-iad-kcgs7200117-IAD, cache-bma1672-BMA
x-cache: HIT, MISS, MISS, HIT, HIT
x-cache-hits: 1, 0, 0, 124, 1
x-timer: S1668085130.852779,VS0,VE7
vary: ImageFormat
x-debug: /taboola/image/fetch/f_jpg%2Cq_auto%2Ch_200%2Cw_240%2Cc_fill%2Cg_faces:auto%2Ce_sharpen/https%3A//i.servimg.com/u/f37/14/77/75/59/wqaa2110.jpg
x-vcl-time-ms: 7
content-length: 8588
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://atbara.ahlamontada.net
server-processing-duration-in-ticks: 561875
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
api.viglink.com/api/domains
200 OK 42 B URL HTTP/1.1 api.viglink.com/api/domains
IP
File type ASCII text, with no line terminators
Hash 626137d7dca0885dd022bc5fa3e695f1
217e2ff73b8e92f05702bca624d210039caee545
7bb573f5245d179bb66a867397480ec7b7f07c93107fe00a6c7e229fcdc1249d
POST /api/domains HTTP/1.1
Host: api.viglink.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 306
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://atbara.ahlamontada.net
Cache-Control: no-cache, no-store
Content-Type: text/javascript;charset=UTF-8
Date: Thu, 10 Nov 2022 12:58:48 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="ALL IND DSP COR CUR ADM TAIo PSDo OUR COM INT NAV PUR STA UNI"
Pragma: no-cache
Server: Apache-Coyote/1.1
Content-Length: 42
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2fe5c9e4eb3628bf2ec24516ac5b1efd
d5d6e1081969ccb5a2c859dbb08ac31079d6ab75
11f8421ed48150683cdab40019b712583b575b36adc3878142b336138607da0a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 12:58:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 07 Nov 2022 06:25:22 GMT
Expires: Mon, 14 Nov 2022 06:25:21 GMT
Etag: "d5d6e1081969ccb5a2c859dbb08ac31079d6ab75"
Cache-Control: max-age=321391,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 767ef63dc865b518-OSL
my.rtmark.net/gid.js?userId=2da4800bfd2c4ecda79b047f25d2b85b
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=2da4800bfd2c4ecda79b047f25d2b85b
IP
File type JSON data\012- , ASCII text
Hash 67357011cd4a4dfb4232772528401b40
193dfd55b97d1887dcc40b318db28726fc07c7b1
c51d234c2cec9f2691afea228f73df76100444aec205bfd422c541a88b09eac4
GET /gid.js?userId=2da4800bfd2c4ecda79b047f25d2b85b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2da4800bfd2c4ecda79b047f25d2b85b; expires=Fri, 10 Nov 2023 12:58:49 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/3/abtests?route=AM:IL:V<i=deflated&ri=3eaa812bdff4ea7c18b439f8807fdcce&sd=v2_bed54a5b121175a591d511c8bfde034a_76b6af2e-c555-479a-bdc8-704f588dc5f4-tucta667b09_1668085129_1668085129_CNawjgYQ3pxDGOOf_IzGMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=76b6af2e-c555-479a-bdc8-704f588dc5f4-tucta667b09&pi=/t7786-topic&wi=-1897847504340416909&pt=text&vi=1668085125091&d=%7B%22abTestsEventType%22%3A%22simple%22%2C%22name%22%3A%22cta-lazy-module%22%2C%22type%22%3A%22%7B%5C%22v%5C%22%3A%5C%222%5C%22%2C%5C%22location%5C%22%3A%5C%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%5C%22%2C%5C%22itemId%5C%22%3A%5C%22~~V1~~-851394649769953964~~AVEcCAE50PECu%5C%22%2C%5C%22text%5C%22%3A%5C%22S%C3%B8k%20n%C3%A5%5C%22%2C%5C%22type%5C%22%3A%5C%22event%5C%22%2C%5C%22module%5C%22%3A%5C%22cta-lazy-module%5C%22%2C%5C%22event%5C%22%3A%5C%22CTA-event-rendered%5C%22%2C%5C%22cardIndexOnPage%5C%22%3A0%2C%5C%22index%5C%22%3A0%2C%5C%22placement%5C%22%3A%5C%22728x90%20Thumbnails%5C%22%2C%5C%22innerText%5C%22%3A%5C%22Hva%20er%20den%20billigste%20elbilen%20i%20Oslo%3F%5C%5CnElbiler%20%7C%20S%C3%B8keannonser%5C%22%2C%5C%22config%5C%22%3A%7B%5C%22borderColor%5C%22%3A%5C%22black%5C%22%2C%5C%22fontWeight%5C%22%3A%5C%22bold%5C%22%2C%5C%22isInheritTitleColor%5C%22%3A%5C%22true%5C%22%7D%7D%22%2C%22eventTime%22%3A1668085125700%7D&tim=12%3A58%3A45.700&id=4706&llvl=2&cv=20221108-4-RELEASE&
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/3/abtests?route=AM:IL:V<i=deflated&ri=3eaa812bdff4ea7c18b439f8807fdcce&sd=v2_bed54a5b121175a591d511c8bfde034a_76b6af2e-c555-479a-bdc8-704f588dc5f4-tucta667b09_1668085129_1668085129_CNawjgYQ3pxDGOOf_IzGMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=76b6af2e-c555-479a-bdc8-704f588dc5f4-tucta667b09&pi=/t7786-topic&wi=-1897847504340416909&pt=text&vi=1668085125091&d=%7B%22abTestsEventType%22%3A%22simple%22%2C%22name%22%3A%22cta-lazy-module%22%2C%22type%22%3A%22%7B%5C%22v%5C%22%3A%5C%222%5C%22%2C%5C%22location%5C%22%3A%5C%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%5C%22%2C%5C%22itemId%5C%22%3A%5C%22~~V1~~-851394649769953964~~AVEcCAE50PECu%5C%22%2C%5C%22text%5C%22%3A%5C%22S%C3%B8k%20n%C3%A5%5C%22%2C%5C%22type%5C%22%3A%5C%22event%5C%22%2C%5C%22module%5C%22%3A%5C%22cta-lazy-module%5C%22%2C%5C%22event%5C%22%3A%5C%22CTA-event-rendered%5C%22%2C%5C%22cardIndexOnPage%5C%22%3A0%2C%5C%22index%5C%22%3A0%2C%5C%22placement%5C%22%3A%5C%22728x90%20Thumbnails%5C%22%2C%5C%22innerText%5C%22%3A%5C%22Hva%20er%20den%20billigste%20elbilen%20i%20Oslo%3F%5C%5CnElbiler%20%7C%20S%C3%B8keannonser%5C%22%2C%5C%22config%5C%22%3A%7B%5C%22borderColor%5C%22%3A%5C%22black%5C%22%2C%5C%22fontWeight%5C%22%3A%5C%22bold%5C%22%2C%5C%22isInheritTitleColor%5C%22%3A%5C%22true%5C%22%7D%7D%22%2C%22eventTime%22%3A1668085125700%7D&tim=12%3A58%3A45.700&id=4706&llvl=2&cv=20221108-4-RELEASE&
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/3/abtests?route=AM:IL:V<i=deflated&ri=3eaa812bdff4ea7c18b439f8807fdcce&sd=v2_bed54a5b121175a591d511c8bfde034a_76b6af2e-c555-479a-bdc8-704f588dc5f4-tucta667b09_1668085129_1668085129_CNawjgYQ3pxDGOOf_IzGMCABKAEwogE434cMQJ6XEEj5qNkDUN6lI1gAYABop5bpoOzs57vmAXAA&ui=76b6af2e-c555-479a-bdc8-704f588dc5f4-tucta667b09&pi=/t7786-topic&wi=-1897847504340416909&pt=text&vi=1668085125091&d=%7B%22abTestsEventType%22%3A%22simple%22%2C%22name%22%3A%22cta-lazy-module%22%2C%22type%22%3A%22%7B%5C%22v%5C%22%3A%5C%222%5C%22%2C%5C%22location%5C%22%3A%5C%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%5C%22%2C%5C%22itemId%5C%22%3A%5C%22~~V1~~-851394649769953964~~AVEcCAE50PECu%5C%22%2C%5C%22text%5C%22%3A%5C%22S%C3%B8k%20n%C3%A5%5C%22%2C%5C%22type%5C%22%3A%5C%22event%5C%22%2C%5C%22module%5C%22%3A%5C%22cta-lazy-module%5C%22%2C%5C%22event%5C%22%3A%5C%22CTA-event-rendered%5C%22%2C%5C%22cardIndexOnPage%5C%22%3A0%2C%5C%22index%5C%22%3A0%2C%5C%22placement%5C%22%3A%5C%22728x90%20Thumbnails%5C%22%2C%5C%22innerText%5C%22%3A%5C%22Hva%20er%20den%20billigste%20elbilen%20i%20Oslo%3F%5C%5CnElbiler%20%7C%20S%C3%B8keannonser%5C%22%2C%5C%22config%5C%22%3A%7B%5C%22borderColor%5C%22%3A%5C%22black%5C%22%2C%5C%22fontWeight%5C%22%3A%5C%22bold%5C%22%2C%5C%22isInheritTitleColor%5C%22%3A%5C%22true%5C%22%7D%7D%22%2C%22eventTime%22%3A1668085125700%7D&tim=12%3A58%3A45.700&id=4706&llvl=2&cv=20221108-4-RELEASE& HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=12%3A58%3A45.715&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=3215&cv=20221108-4-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=12%3A58%3A45.715&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=3215&cv=20221108-4-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=12%3A58%3A45.715&type=warn&msg=TRC.TranslationsManager%20-%20missing%20feature%20in%20translationMap%3A%20userx.&llvl=2&id=3215&cv=20221108-4-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
x-fastly-to-nlb-rtt: 88791
access-control-allow-credentials: true
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 1a88dedaa4bb73b0f25be3faaa0e7f7d
216d7d09518975f3aff7d619b3ac1b1e9c0b6203
050bef8b7a59e691885e7d6389dff21e10617418f49784c154471abfb3ab82a2
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3908
Cache-Control: max-age=130759
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:50 GMT
Etag: "636c420d-1d7"
Expires: Sat, 12 Nov 2022 01:18:09 GMT
Last-Modified: Thu, 10 Nov 2022 00:13:01 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 1a88dedaa4bb73b0f25be3faaa0e7f7d
216d7d09518975f3aff7d619b3ac1b1e9c0b6203
050bef8b7a59e691885e7d6389dff21e10617418f49784c154471abfb3ab82a2
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3908
Cache-Control: max-age=130759
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:50 GMT
Etag: "636c420d-1d7"
Expires: Sat, 12 Nov 2022 01:18:09 GMT
Last-Modified: Thu, 10 Nov 2022 00:13:01 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6bde7ba2-60f7-11ed-946c-107c10e90206; expires=Thu, 08-Dec-2022 12:58:50 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6bde7bf8-60f7-11ed-946c-107c10e90206
X-fe: 85
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
File type C source, ASCII text, with very long lines (29462)
Hash 1fb104ffacde845b28f4135846dad81a
f4050b3df8cd5e1481b22a95eb9b494652c9640c
8db7d21fa655db29a23669d1ec1938377cb4aae6565536081b6cd60e2c18c4aa
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
x-crto-bundle: lqv4X194T1FBb0xnNVJPOWJkUVFUNU5DZVZHV2VUaHBTJTJGd2RTV3ZZY0Q2VGtEM3VOMGVEJTJGS08xMWFvRzRBdlhra1R4QSUyQnFGNHEwZ0VzekNCUmpHbzN4ZkMxTUFmJTJCOWdVaUVva3d0RWRPOTZSRnRrUDVoTVE2TTBrTFJYNVZLNFNiM3pyY3dPbEF4QUphUURjd0o1dWNPT1F5dyUzRCUzRA
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://atbara.ahlamontada.net
server-processing-duration-in-ticks: 1474359
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&excid=22&docw=0&cijs=1&nlb=false
200 OK 742 B URL HTTP/2 am-match.taboola.com/sync?dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (742), with no line terminators
Hash 98a76f3a7fd5e8337ef3301d5d69d0d7
f7c260a4e32ec68e61dc6e25c3b7e4d2b572c6a6
878a2c6c7257a40f4bd4a98b8e865f1307fadd09a359b067f19049d6f096a4c3
GET /sync?dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3408
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6be9109f-60f7-11ed-bf83-1e5bf6c20406; expires=Thu, 08-Dec-2022 12:58:50 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be910d7-60f7-11ed-bf83-1e5bf6c20406
X-fe: 68
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6bebe824-60f7-11ed-b0f0-1384e0ef0506; expires=Thu, 08-Dec-2022 12:58:50 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6bebe87d-60f7-11ed-b0f0-1384e0ef0506
X-fe: 45
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be2d38a-60f7-11ed-b497-162d46060206
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be2d38a-60f7-11ed-b497-162d46060206
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be2d38a-60f7-11ed-b497-162d46060206 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6bec7da5-60f7-11ed-8012-1bbe6fc50206; expires=Thu, 08-Dec-2022 12:58:50 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 71
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&cmcv=&pix=31589837&cb=1668085126025&uv=3240&tms=1668085126025&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668085122893!ts:1668085126025&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&cmcv=&pix=31589837&cb=1668085126025&uv=3240&tms=1668085126025&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668085122893!ts:1668085126025&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=66361655&crid=-1&dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&cmcv=&pix=31589837&cb=1668085126025&uv=3240&tms=1668085126025&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668085122893!ts:1668085126025&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:50 GMT
content-length: 0
X-Firefox-Spdy: h2
am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&cmcv=&pix=31589837&cb=1668085126272&uv=3240&tms=1668085126272&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668085122893!ts:1668085126272&mntl=1
200 OK 0 B URL HTTP/2 am-vid-events.taboola.com/st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&cmcv=&pix=31589837&cb=1668085126272&uv=3240&tms=1668085126272&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668085122893!ts:1668085126272&mntl=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /st?cijs=convusmp&ttype=45&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&cmcv=&pix=31589837&cb=1668085126272&uv=3240&tms=1668085126272&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&debug=pn:!sqg:!torgn:1668085122893!ts:1668085126272&mntl=1 HTTP/1.1
Host: am-vid-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:50 GMT
content-length: 0
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6bebe87d-60f7-11ed-b0f0-1384e0ef0506
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6bebe87d-60f7-11ed-b0f0-1384e0ef0506
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6bebe87d-60f7-11ed-b0f0-1384e0ef0506 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6bf1d04b-60f7-11ed-a121-155da6fd0306; expires=Thu, 08-Dec-2022 12:58:50 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 91
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 853a3a2fa13925895c6072c4bd6a091e
83d0146ae5769893a4c8541fcebf42a066ff8473
78627d650ff59c600967f39ae82176e10cba558fb54bf1c1981c689f07411776
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 14 Nov 2022 12:08:55 GMT
ETag: "83d0146ae5769893a4c8541fcebf42a066ff8473"
Last-Modified: Thu, 10 Nov 2022 12:08:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 162
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 767ef6406e2bb527-OSL
il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=12%3A58%3A46.008&type=warn&msg=video%20tag%20loader%20-%20didn%27t%20find%20enough%20sponsored%20items%20for%20integrated%20widget%20replacement&llvl=2&id=7341&cv=20221108-4-RELEASE<=deflated&pct=1
204 No Content 0 B URL HTTP/2 il-trc-events.taboola.com/forumotion-ar/log/2/debug?tim=12%3A58%3A46.008&type=warn&msg=video%20tag%20loader%20-%20didn%27t%20find%20enough%20sponsored%20items%20for%20integrated%20widget%20replacement&llvl=2&id=7341&cv=20221108-4-RELEASE<=deflated&pct=1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /forumotion-ar/log/2/debug?tim=12%3A58%3A46.008&type=warn&msg=video%20tag%20loader%20-%20didn%27t%20find%20enough%20sponsored%20items%20for%20integrated%20widget%20replacement&llvl=2&id=7341&cv=20221108-4-RELEASE<=deflated&pct=1 HTTP/1.1
Host: il-trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 10 Nov 2022 12:58:50 GMT
x-fastly-to-nlb-rtt: 85672
access-control-allow-credentials: true
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be910d7-60f7-11ed-bf83-1e5bf6c20406
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be910d7-60f7-11ed-bf83-1e5bf6c20406
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6be910d7-60f7-11ed-bf83-1e5bf6c20406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6bf9d99b-60f7-11ed-a07b-192cb16e0106; expires=Thu, 08-Dec-2022 12:58:50 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 100
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
vidstat.taboola.com/vpaid/units/32_4_0/assets/css/cmOsUnit.css
200 OK 8.3 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_4_0/assets/css/cmOsUnit.css
IP
Hash a28320a69408adba1f01f56d6eb80708
8012c7108fab547cf31481cfda7cb49e654a0542
befbb274b7045e7e5791a4badbe46e1a2e367e6570da7cd0ac127acc4b8e8991
GET /vpaid/units/32_4_0/assets/css/cmOsUnit.css HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: tIg/hKLcW6qfi+fFp0e1GbvkIZXdjk731nDnqNNarCvs/VGQnjcx55POYcGfoUonQ6WaW/7c/wg=
x-amz-request-id: D0ZQ7CPRECCA5TY8
last-modified: Tue, 08 Nov 2022 10:51:55 GMT
etag: "a28320a69408adba1f01f56d6eb80708"
x-amz-meta-ctime: 1667904714
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1667904714
content-type: text/css
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
age: 180202
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 27626
x-timer: S1668085130.321814,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 8297
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 268365dcfbdd18903e254fe7835baeb0
cb5ec2742a1bbbdd1344f284eba85ea45a3b743d
9bffcf096caffde79602f45ae1bc4c4aae28a5810b63499536f6e908bc1d1d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5936
Cache-Control: max-age=104720
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:50 GMT
Etag: "636bd46a-13a"
Expires: Fri, 11 Nov 2022 18:04:10 GMT
Last-Modified: Wed, 09 Nov 2022 16:25:14 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 314
cdn.betgorebysson.club/?rb=lsfYESZQdjQDx1ay9Ma7s7L6rXkFtWXlGRv9WM1Ji-v7HmJZvahTjRMaqK-ZelYONh-Ehwdm1nfjTBDwlhcQU44j3bGMz4AAskKhSeIbl6Ed0AyHVk1C-_OOmMCxXMdca_a73-p4fFrsd49fWf05eQ7GzBRJ_lrz9YfRg6rnv_U6BnrXLfAs4D4UBRDoFRCc6q3_S52k-_wivryfAnQfZ6H4du_-1WirhB_sqdhQ5Py7xQZ2TZJ1hA%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.448.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.448.1&bs=bfba26dd-2720-42c4-91ba-6010ef8b6555&userId=2da4800bfd2c4ecda79b047f25d2b85b&m=link
200 OK 2.7 kB URL HTTP/2 cdn.betgorebysson.club/?rb=lsfYESZQdjQDx1ay9Ma7s7L6rXkFtWXlGRv9WM1Ji-v7HmJZvahTjRMaqK-ZelYONh-Ehwdm1nfjTBDwlhcQU44j3bGMz4AAskKhSeIbl6Ed0AyHVk1C-_OOmMCxXMdca_a73-p4fFrsd49fWf05eQ7GzBRJ_lrz9YfRg6rnv_U6BnrXLfAs4D4UBRDoFRCc6q3_S52k-_wivryfAnQfZ6H4du_-1WirhB_sqdhQ5Py7xQZ2TZJ1hA%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.448.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.448.1&bs=bfba26dd-2720-42c4-91ba-6010ef8b6555&userId=2da4800bfd2c4ecda79b047f25d2b85b&m=link
IP
Hash d034df02ab440943aa8cedab8c9180d4
992d44fe87324cf80639e363adfb32a8c9b733af
63ffbf39d66895b93aaa3de83e7d5df6e6088fd1cdb641d4d061b596e13d15d6
GET /?rb=lsfYESZQdjQDx1ay9Ma7s7L6rXkFtWXlGRv9WM1Ji-v7HmJZvahTjRMaqK-ZelYONh-Ehwdm1nfjTBDwlhcQU44j3bGMz4AAskKhSeIbl6Ed0AyHVk1C-_OOmMCxXMdca_a73-p4fFrsd49fWf05eQ7GzBRJ_lrz9YfRg6rnv_U6BnrXLfAs4D4UBRDoFRCc6q3_S52k-_wivryfAnQfZ6H4du_-1WirhB_sqdhQ5Py7xQZ2TZJ1hA%3D%3D&request_ab2=0&zoneid=3765907&js_build=iclick-v1.448.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.448.1&bs=bfba26dd-2720-42c4-91ba-6010ef8b6555&userId=2da4800bfd2c4ecda79b047f25d2b85b&m=link HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Cookie: OAID=2da4800bfd2c4ecda79b047f25d2b85b; oaidts=1668085129
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:50 GMT
content-type: application/json
x-trace-id: 6feae7f845bf020f7821bb2d65c3c9fb
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=2da4800bfd2c4ecda79b047f25d2b85b; expires=Fri, 10 Nov 2023 12:58:50 GMT; path=/; secure; SameSite=None
oaidts=1668085130; expires=Fri, 10 Nov 2023 12:58:50 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 17 Nov 2022 12:58:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
200 OK 43 B URL HTTP/2 csm.fr.eu.criteo.net/iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.72.Events.StartInit~1&entry=c~Idfs.Rtus.72.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.72.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.72.Headers.Bundle~1&entry=c~Idfs.Rtus.72.Events.InitiateFetch~1 HTTP/1.1
Host: csm.fr.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:50 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2cbfec6a87b270b91242f8d302859be0
daac67292af88836a276be7ffaab4333fdd5f40b
2b83625a1c178708d64a169b1491f3ba72a13919e0b0f3c4ff80a0da1a1309a5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6576
Cache-Control: max-age=100991
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 12:58:50 GMT
Etag: "636bc359-1d7"
Expires: Fri, 11 Nov 2022 17:02:01 GMT
Last-Modified: Wed, 09 Nov 2022 15:12:25 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
vidstat.taboola.com/vpaid/units/32_4_0/infra/cmTagWIDGET_ITEM.js
200 OK 128 kB URL HTTP/2 vidstat.taboola.com/vpaid/units/32_4_0/infra/cmTagWIDGET_ITEM.js
IP
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Size 128 kB (127530 bytes)
Hash 151facb98d755a46fd260231d78130a9
f10823c4a61f363f3256882cea2ca31881e4afd5
678985021845d0de22cd87f7cfe9f174f170791fbd99d91237fb9ad6742f72e5
GET /vpaid/units/32_4_0/infra/cmTagWIDGET_ITEM.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2WnZafNgayNGg+hLtGCqAx1p07TfXbxQG5XfpfV5iuwBMxhR9zYT1BszMooeWITwU7keutULzzg=
x-amz-request-id: 8TBZWE7SRD839KKA
last-modified: Tue, 08 Nov 2022 10:51:04 GMT
etag: "151facb98d755a46fd260231d78130a9"
x-amz-meta-ctime: 1667904663
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1667904662
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
age: 180198
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 13387
x-timer: S1668085130.435522,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 127530
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 10 Nov 2022 12:58:50 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIr1bGMCEDvxgXNdWRC5P5mMzEeISy0FEgEBAQFHbmN2YwAAAAAA_eMAAA&S=AQAAAnhuLXY8HfPpQ7TWlAWyAlU; Expires=Fri, 10 Nov 2023 18:58:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3cc07b61932a71e9b0b0aa90a9410f72
7110b80220f1656df488b694431a45bddc72fb40
2277a8bc62898fb420cd5cf544ac68ca73e8b953b6a5b0af5ca195577b408c43
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105002
Date: Thu, 10 Nov 2022 12:58:50 GMT
Etag: "636bdfaa-1d7"
Expires: Fri, 11 Nov 2022 18:08:52 GMT
Last-Modified: Wed, 09 Nov 2022 17:13:14 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oJ2ad8-k-qUqpqra2jal9eKskFtBqPvhO1ORAVmZIXVVvFMzYtKe9g==
Age: 3338
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 904
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://atbara.ahlamontada.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imprammp.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 10 Nov 2022 12:58:50 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIr1bGMCEEnIUfX2ZVqbaWECnnsOnbUFEgEBAQFHbmN2YwAAAAAA_eMAAA&S=AQAAAmMt3jsUb--zlH1uNSqp6ls; Expires=Fri, 10 Nov 2023 18:58:50 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
200 OK 254 B URL HTTP/2 cdn.taboola.com/libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png
IP
File type PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced\012- data
Hash dfa7b52c86e56bd67fa4002f6ed19854
7df722645482433c2b5c8d8ab4272a9874592f27
f68019eb4b4e5933301d4ee75969e0cb94ed8333bf514630fa749eb9c3e483c9
GET /libtrc/static/thumbnails/f539211219b796ffbb49949997c764f0.png HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: c3AK0F63Rmz1U+ZkwDZRH6hJiJRTGpZB8kTBPWz0vwbg9siBxtMOH8aEqr1NtVeNHtLhLAVUR9E=
x-amz-request-id: 4JKSR0YA3KVH073N
x-amz-replication-status: COMPLETED
last-modified: Wed, 24 Jun 2015 07:14:11 GMT
etag: "dfa7b52c86e56bd67fa4002f6ed19854"
x-amz-meta-s3cmd-attrs: uid:0/gname:root/uname:root/gid:0/mode:33188/mtime:1377415166/atime:1435052450/md5:dfa7b52c86e56bd67fa4002f6ed19854/ctime:1422381567
x-amz-version-id: hL.cyLD7Q4TL5ceY.7JQwF9m5IYI8mkC
content-type: image/png
server: AmazonS3
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
age: 19611
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 2877
x-timer: S1668085131.586171,VS0,VE0
cache-control: private,max-age=31536000
abp: 2
content-length: 254
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
204 No Content 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /forumotion-ar/log/3/bulk?route=AM%3AIL%3AV<i=deflated&bulkSize=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3391
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085131.520486,VS0,VE90
x-vcl-time-ms: 90
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash f2bf220293c15a10a1f4963464dc0089
8d9786276f8b125c54a069a48db1021b0610c98a
e5b9e54958b15d8fc1a4e1852c530e09cd52d0cc66848d1dc251302d30c70eb4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 13:56:48 GMT
Expires: Tue, 15 Nov 2022 13:56:47 GMT
Etag: "8d9786276f8b125c54a069a48db1021b0610c98a"
Cache-Control: max-age=434876,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 767ef6411c211c0a-OSL
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imprammp.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Thu, 10 Nov 2022 12:58:50 GMT
Content-Length: 43
Connection: keep-alive
vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
200 OK 87 kB URL HTTP/2 vidstat.taboola.com/vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js
IP
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash dcfe04133edaa84ac4a7356299134bf2
600265d1e188692d5cb0b9dbc828c708181bd3d8
1f50ba3994c74af69746c8db181597b9e74d7bb53c808ce9f7014facf0c59bfd
GET /vpaid/vPlayer/player/v14.8.8/OvaMediaPlayer.js HTTP/1.1
Host: vidstat.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: DH4gCSpZOjdiQ2RHNdcZaQ1gWcI8EDnhtXKaFZT4JUmiFDacp53eylqcVHaDpMgh56JBtwAdvTI=
x-amz-request-id: M2DJX9S4FNAQPE8Z
last-modified: Thu, 27 Oct 2022 07:34:53 GMT
etag: "dcfe04133edaa84ac4a7356299134bf2"
x-amz-meta-ctime: 1666856092
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1666856080
content-type: application/javascript
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
age: 1229008
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 140660
x-timer: S1668085131.731517,VS0,VE0
vary: Accept-Encoding
server: AmazonS3-br
content-encoding: br
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-length: 87152
X-Firefox-Spdy: h2
vidstatb.taboola.com/vid/blackScreen5.mp4
206 Partial Content 91 kB URL HTTP/2 vidstatb.taboola.com/vid/blackScreen5.mp4
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash b2b087fe4ae638c533731c347fcd4df8
62851c888c21bb51cc04f13b6fc0451279fe0425
0407dafc112212a135d1aa4dd9b40ba0208c6bb6b1959f5535af093254189d66
GET /vid/blackScreen5.mp4 HTTP/1.1
Host: vidstatb.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Sun, 02 Jul 2017 20:40:57 GMT
etag: "b2b087fe4ae638c533731c347fcd4df8"
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1497790207
server: AmazonS3
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: gopM2XYfUoVUFmJXQ0440-QEF6IoAyvdLK0EUOquu3M35zK6ZGLwLg==
cache-control: public, max-age=2592000
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
age: 1497895
x-served-by: cache-bma1672-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 284669
x-timer: S1668085131.966368,VS0,VE0
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS, HEAD
access-control-allow-headers: *
content-range: bytes 0-90783/90784
content-length: 90784
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 10 Nov 2022 12:58:51 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6c6fea2c-60f7-11ed-ae1f-1a404fd50106; expires=Thu, 08-Dec-2022 12:58:51 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6c6fea9f-60f7-11ed-ae1f-1a404fd50106
X-fe: 35
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 10 Nov 2022 12:58:51 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6c712830-60f7-11ed-bf0a-17d925990106; expires=Thu, 08-Dec-2022 12:58:51 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6c71288b-60f7-11ed-bf0a-17d925990106
X-fe: 4
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6c6fea9f-60f7-11ed-ae1f-1a404fd50106
204 No Content 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6c6fea9f-60f7-11ed-ae1f-1a404fd50106
IP
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?gdpr=1&adv_id=8532&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Fspotx-rtb-network%2F1%2Frtb-h%3Ftaboola_hm%3D%24SPOTX_USER_ID%26orig%3Dvideo%26us_privacy%3D1---gdpr%3D1%26&__user_check__=1&sync_id=6c6fea9f-60f7-11ed-ae1f-1a404fd50106 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 10 Nov 2022 12:58:51 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=6c74cf31-60f7-11ed-98b5-1d21b9eb0306; expires=Thu, 08-Dec-2022 12:58:51 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 73
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
am-match.taboola.com/sync?dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&excid=22&docw=0&cijs=1&nlb=true
200 OK 928 B URL HTTP/2 am-match.taboola.com/sync?dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&excid=22&docw=0&cijs=1&nlb=true
IP
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (928), with no line terminators
Hash 6087b19dd14fb022fbcb7db31b864876
abc6de7677cd257ac0839b73a6d3cea6e31f89ac
66447cfc636542b4acdb280f4d41993dd18718ba71c208ef9b74f24ca508353d
GET /sync?dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&excid=22&docw=0&cijs=1&nlb=true HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:50 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?gdpr=1&ttd_pid=054f32o&us_privacy=1---&ttd_tpi=1 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:51 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/sync?gdpr=1&us_privacy=1---&ssp=taboola
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?gdpr=1&us_privacy=1---&ssp=taboola HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Thu, 10 Nov 2022 12:58:51 GMT
Content-Length: 43
Connection: keep-alive
ups.analytics.yahoo.com/ups/58534/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 10 Nov 2022 12:58:51 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58534/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIv1bGMCEJ9rt9NWB2ljzLKPu2-QVVIFEgEBAQFHbmN2YwAAAAAA_eMAAA&S=AQAAAl1xuo2kZIs7bHBfNnfXcD8; Expires=Fri, 10 Nov 2023 18:58:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58534/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58534/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58534/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://am-match.taboola.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 10 Nov 2022 12:58:51 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIv1bGMCEFsl5xVEpMvPXDm5sK-_AAAFEgEBAQFHbmN2YwAAAAAA_eMAAA&S=AQAAAuG4HHNm5mjNdQWoe27mcPo; Expires=Fri, 10 Nov 2023 18:58:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
cdn.taboola.com/scripts/cds-pips.js
200 OK 1.3 kB URL HTTP/2 cdn.taboola.com/scripts/cds-pips.js
IP
File type ASCII text, with very long lines (3545), with no line terminators
Hash 780c5c514014519ce276709f515905a0
04fe86d00b9c9077effe05171d066d243ecab221
015db06150b62ad2ad533883652174ebb6f07e24a7147fdac01a0ccd266e3f30
GET /scripts/cds-pips.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2KBeU0d7OyPXtZDYUoIqlTBmhGhsve90tjYoemCxISjKQrNgcxT28sPXVt5KfJt+6r7dFoJgA8g=
x-amz-request-id: NFWGDQGY1WQ95XHE
x-amz-replication-status: COMPLETED
last-modified: Wed, 12 Oct 2022 13:57:57 GMT
etag: "383fa66d2a0a09f4a6e64a9593ad43bb"
x-amz-version-id: z5FoayaLm_Bvew3pbkytkoHczFCvkPwT
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:51 GMT
via: 1.1 varnish
age: 3385
x-served-by: cache-bma1672-BMA
x-cache: HIT
x-cache-hits: 3493
x-timer: S1668085131.426154,VS0,VE0
vary: Accept-Encoding
abp: 2
cache-control: private, max-age=3600
content-length: 1340
X-Firefox-Spdy: h2
pips.taboola.com/
200 OK 4 B IP
File type ASCII text, with no line terminators
Hash 6c3e226b4d4795d518ab341b0824ec29
eef19c54306daa69eda49c0272623bdb5e2b341f
fb329000228cc5a24c264c57139de8bf854fc86fc18bf1c04ab61a2b5cb4b921
GET / HTTP/1.1
Host: pips.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-methods: GET
access-control-allow-origin: https://atbara.ahlamontada.net
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:51 GMT
via: 1.1 varnish
x-served-by: cache-bma1655-BMA
x-cache: HIT
x-cache-hits: 0
cache-control: no-store
content-length: 4
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:56 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 1befadc0fd1cf6ec58bb54a9d3286879
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=c8655321d71445a084000e158bb5f9c7&zoneId=2308013&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=c8655321d71445a084000e158bb5f9c7&zoneId=2308013&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 67357011cd4a4dfb4232772528401b40
193dfd55b97d1887dcc40b318db28726fc07c7b1
c51d234c2cec9f2691afea228f73df76100444aec205bfd422c541a88b09eac4
GET /gid.js?pub=0&userId=c8655321d71445a084000e158bb5f9c7&zoneId=2308013&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Cookie: ID=2da4800bfd2c4ecda79b047f25d2b85b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:56 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2da4800bfd2c4ecda79b047f25d2b85b; expires=Fri, 10 Nov 2023 12:58:56 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/embed/FA_Embed.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/embed/FA_Embed.js
IP
GET /rs3/64/frm/embed/FA_Embed.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:53 GMT
last-modified: Tue, 20 Apr 2021 14:17:00 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 275514
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=56CKdeQSB1Xjjn6F5G1foa0hjnF3ej2TLZUnW8lnrdmTXP2Z9A6OyzXcSQ5b9Sao6Fl%2BIgfcRCBmVVLHfCsA3VNPPI96eB27Fbkwfx1kROs02YnWjanSRyUZ0NkyBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef630bb40b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
twemoji.maxcdn.com/twemoji.min.js
200 OK 0 B URL HTTP/2 twemoji.maxcdn.com/twemoji.min.js
IP
GET /twemoji.min.js HTTP/1.1
Host: twemoji.maxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 31 Mar 2022 03:24:15 GMT
access-control-allow-origin: *
etag: W/"62451edf-3bc8"
expires: Sat, 10 Dec 2022 12:58:47 GMT
cache-control: max-age=2592000
x-proxy-cache: MISS
x-github-request-id: B5FC:2175:C309F5:C881C1:636AA98C
vary: Accept-Encoding
x-fastly-request-id: 48372c21b0bf5018e69e7ec519f4fa657be68bc8
server: NetDNA-cache/2.2
powered-by: MaxCDN
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
trc.taboola.com/forumotion-ar/trc/3/json?tim=12%3A58%3A45.092<i=deflated&data=%7B%22id%22%3A427%2C%22ii%22%3A%22%2Ft7786-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1667901069188%2C%22vi%22%3A1668085125091%2C%22cv%22%3A%2220221108-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%22%2C%22vpi%22%3A%22%2Ft7786-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3574%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A333.5%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A3417.5%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft7786-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
200 OK 0 B URL HTTP/2 trc.taboola.com/forumotion-ar/trc/3/json?tim=12%3A58%3A45.092<i=deflated&data=%7B%22id%22%3A427%2C%22ii%22%3A%22%2Ft7786-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1667901069188%2C%22vi%22%3A1668085125091%2C%22cv%22%3A%2220221108-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%22%2C%22vpi%22%3A%22%2Ft7786-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3574%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A333.5%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A3417.5%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft7786-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2
IP
GET /forumotion-ar/trc/3/json?tim=12%3A58%3A45.092<i=deflated&data=%7B%22id%22%3A427%2C%22ii%22%3A%22%2Ft7786-topic%22%2C%22it%22%3A%22text%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22uifp%22%3Anull%2C%22lbt%22%3A1667901069188%2C%22vi%22%3A1668085125091%2C%22cv%22%3A%2220221108-4-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%22%2C%22ul%22%3A%5B%22en-US%22%2C%22en%22%5D%2C%22btv%22%3A%220%22%2C%22bu%22%3A%22https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic%22%2C%22vpi%22%3A%22%2Ft7786-topic%22%2C%22bad%22%3A-1%2C%22sw%22%3A1280%2C%22sh%22%3A1002%2C%22bw%22%3A1280%2C%22sde%22%3A%221.000%22%2C%22bh%22%3A939%2C%22dw%22%3A1268%2C%22dh%22%3A3574%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A1%2C%22uim%22%3A%22thumbnails-728x90%3Aabp%3D0%22%2C%22uip%22%3A%22728x90%20Thumbnails%22%2C%22orig_uip%22%3A%22728x90%20Thumbnails%22%2C%22cd%22%3A333.5%2C%22mw%22%3A0%7D%2C%7B%22li%22%3A%22rbox-t2m%22%2C%22s%22%3A5%2C%22uim%22%3A%22thumbnails-desktop-a%3Aabp%3D0%22%2C%22uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22orig_uip%22%3A%22Below%20Desktop%20Forum%20Thumbnails%22%2C%22cd%22%3A3417.5%2C%22mw%22%3A1000%7D%5D%2C%22cacheKey%22%3A%22text%3D%2Ft7786-topic%2C728x90%20Thumbnails%3Dthumbnails-728x90%3Aabp%3D0%2C%2CBelow%20Desktop%20Forum%20Thumbnails%3Dthumbnails-desktop-a%3Aabp%3D0%22%2C%22cb%22%3A%22TRC.callbacks.recommendations_1%22%2C%22lt%22%3A%22deflated%22%7D&llvl=2 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085129.974617,VS0,VE418
vary: Accept-Encoding
x-vcl-time-ms: 418
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668085126277&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=620412931&tz=0&viewable=true&ddast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668085126277&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=620412931&tz=0&viewable=true&ddast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668085126277&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=620412931&tz=0&viewable=true&ddast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1465
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085130.249392,VS0,VE250
vary: Accept-Encoding
X-Firefox-Spdy: h2
atbara.ahlamontada.net/t7786-topic
200 OK 0 B URL HTTP/2 atbara.ahlamontada.net/t7786-topic
IP
GET /t7786-topic HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache
pragma: no-cache
expires: Thu, 10 Nov 2022 00:00:00 GMT
last-modified: Thu, 10 Nov 2022 12:58:47 GMT
vary: User-Agent
set-cookie: exadd=166809; expires=Thu, 10-Nov-2022 16:58:47 GMT; Max-Age=14400
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&cmcv=&pix=undefined&cb=1668085126026&uv=3240&tms=1668085126026&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=1a4f8b87-e145-4922-b73b-ca3c56c97d18&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&cmcv=&pix=undefined&cb=1668085126026&uv=3240&tms=1668085126026&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=1a4f8b87-e145-4922-b73b-ca3c56c97d18&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=66361655&crid=-1&dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&cmcv=&pix=undefined&cb=1668085126026&uv=3240&tms=1668085126026&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=1a4f8b87-e145-4922-b73b-ca3c56c97d18&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:49 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085130.900732,VS0,VE26
vary: Accept-Encoding
X-Firefox-Spdy: h2
atbara.ahlamontada.net/?utm_source=pwa
200 OK 0 B URL HTTP/2 atbara.ahlamontada.net/?utm_source=pwa
IP
GET /?utm_source=pwa HTTP/1.1
Host: atbara.ahlamontada.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://atbara.ahlamontada.net/serviceworker.js
Connection: keep-alive
Cookie: exadd=166809; _fa-screen=%7B%22w%22%3A1280%2C%22h%22%3A939%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: text/html; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 10 Nov 2022 00:00:00 GMT
last-modified: Thu, 10 Nov 2022 12:58:48 GMT
vary: User-Agent
content-security-policy: upgrade-insecure-requests
x-content-type-options: nosniff
x-xss-protection: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
connect.topicit.net/button/light?id=topicit-connect-0&redirect=https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic&lang=ar&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Fatbara.ahlamontada.net%2Ftopicit%2Findex.php%2Fconnect&version=1
200 OK 0 B URL HTTP/2 connect.topicit.net/button/light?id=topicit-connect-0&redirect=https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic&lang=ar&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Fatbara.ahlamontada.net%2Ftopicit%2Findex.php%2Fconnect&version=1
IP
GET /button/light?id=topicit-connect-0&redirect=https%3A%2F%2Fatbara.ahlamontada.net%2Ft7786-topic&lang=ar&loc=https%3A%2F%2Fconnect.topicit.net%2F&login=https%3A%2F%2Fatbara.ahlamontada.net%2Ftopicit%2Findex.php%2Fconnect&version=1 HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, post-check=0, pre-check=0, private
last-modified: Thu, 10 Nov 2022 12:58:44 GMT
expires: Thu, 10 Nov 2022 00:00:00 GMT
set-cookie: XSRF-TOKEN=eyJpdiI6IjIxZEVIc1lYYWlIcGMzZDRVYTBlSXc9PSIsInZhbHVlIjoiQ1RwVWVQc0dmQ1RhSUZ1dFZYcWpMaFNzanhtWnNJTmxjU1hKZnNHWDc2MDZ3YjZOemlPTjV3MHRwRWhjbGJGTCIsIm1hYyI6IjRhODc1MjQ2MDY1MjVjMGNhZDcwZGE0YTEwZDFjMmI5NzYwNWFhOWQwMDUyZThkODg4MjZiZTZiM2JmMWRkZGIifQ%3D%3D; expires=Thu, 10-Nov-2022 14:58:44 GMT; Max-Age=7200; path=/; domain=.topicit.net
topicit_session=ZGgykTsUUYdAHmtbR34HfndOffMvInDJITlMCOHL; expires=Thu, 10-Nov-2022 14:58:44 GMT; Max-Age=7200; path=/; domain=.topicit.net; httponly
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-cache-ne: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q5hoii2Wfgxf33wVyUZ%2BMABymRoV99Orjfd7P1oSucrOVjlytzq97E1CW6vmrP7LJ7KvJJVPONNT89AfLaDTW0jMi5ht7KWtPgKdT0MTvwPov%2FeP8Nvc27ItbkYQaP4sNyYt31AO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767ef6353899b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&cmcv=&pix=undefined&cb=1668085126273&uv=3240&tms=1668085126273&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=bc8ff2ef-3cd6-4864-a603-f97981abb064&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
200 OK 0 B URL HTTP/2 imprammp.taboola.com/st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&cmcv=&pix=undefined&cb=1668085126273&uv=3240&tms=1668085126273&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=bc8ff2ef-3cd6-4864-a603-f97981abb064&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1
IP
GET /st?cijs=convusmp&ttype=0&cisd=convusmp&cipid=8083555&crid=5664665&dast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&cmcv=&pix=undefined&cb=1668085126273&uv=3240&tms=1668085126273&abt=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&ft=0&unm=WIDGET_ITEM&aure=false&agl=1&cirid=bc8ff2ef-3cd6-4864-a603-f97981abb064&excid=e22lLINE_ITEM_ID_WILL_BE_HERE_ON_SERVINGc&tst=1&docw=0&cs=true&cias=1 HTTP/1.1
Host: imprammp.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: text/html;charset=ISO-8859-1
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085130.140116,VS0,VE21
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=atbara.ahlamontada.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=atbara.ahlamontada.net
IP
GET /syncframe?origin=publishertag&topUrl=atbara.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=3f8fdf1e-cc86-4c3d-be16-1455eb4ca4c4; expires=Tue, 05 Dec 2023 12:58:47 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 676740
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS
IP
GET /sync?c=72&r=2&j=TRC.getRTUS HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 633258
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=atbara.ahlamontada.net
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=atbara.ahlamontada.net
IP
GET /syncframe?origin=rtus&topUrl=atbara.ahlamontada.net HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=db2dbed2-cb38-463a-9c2d-1f65f4a27b6b; expires=Tue, 05 Dec 2023 12:58:48 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 533750
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
200 OK 0 B URL HTTP/2 taboola-supply-partners.tremorhub.com/sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo
IP
GET /sync?UISTB=%3CtaboolaUserId%3E&gdpr=1&us_privacy=1---&redir=https%3A%2F%2Fsync-t1.taboola.com%2Fsg%2Ftelaria-rtb-network%2F1%2Frtb-h%2F%3Fgdpr%3D1%26us_privacy%3D1---%26taboola_hm%3D%5BTVUSER_ID%5D%26orig%3Dvideo HTTP/1.1
Host: taboola-supply-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://am-match.taboola.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:51 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668085131348&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=-723425188&tz=0&viewable=true&ddast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!nrlc_vA!smbs!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668085131348&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=-723425188&tz=0&viewable=true&ddast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!nrlc_vA!smbs!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668085131348&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=-723425188&tz=0&viewable=true&ddast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!nrlc_vA!smbs!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1419
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:55 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085135.214961,VS0,VE69
vary: Accept-Encoding
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668085131408&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=-723425188&tz=0&viewable=true&ddast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!nrlc_vA!smbs!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668085131408&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=-723425188&tz=0&viewable=true&ddast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!nrlc_vA!smbs!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=388&height=218&pubid=169497&tagid=953497&crid=5664665&noaop=5&sortOrderType=0&cb=1668085131408&mimes=5,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=2&pv=1488&pt=-723425188&tz=0&viewable=true&ddast=V7qZICFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJOIxzmyWlc2t2Zhsa9FwNlorbIPNWubcLYeLhcVimI2GQGKDmWWz8XjcipVh4RbtBpu1xOXZrIUzh28wGdl8y9XGCh7CMvt9BxHL8zX9DQcZ3_J6G0RF19tidzjNnjeooOl0-Fz3eoXp4rA87Aqj2eH2200Pk8Mud5n-ot9uOFuL_oanxw4AAAAADwBWb5kQP4AAABEAAAAAEgAAAAAUARX_FgIXAAAAABgABiQXGgCfHATvOfv9AQDQsAUCACCAQQIwsBpQAvBxvnICAAAAAAAAAMDy____HwOwhzUmAzCyv9MD8OAD8EBUcFjECAAAAGBLS0XzaFInVBZVAAAE6VYAVwAAAYRhnyE9YQAAAAFjC_Sw-P1mh13jd7sMAAAAAAAAAMDs_-wfTeht9DotiGX0Wu0XEABg7RcQAIBN3QAA3gLggo6gFYPB6hRiN5wtdqPZZjQ7AAAAgLv___9_PRBxmVyjhWvimCwWu9XCtVyMXIvFxjixmVyGzWjhvWazKV0jWtnYPg9hmf2-g4jl-Zr-hoOMb3m9DaKi622xO5xmz_0oWrLcLXer0WQxGi2Xm91wMxrsbyAGqwFOxGC5nEwWk91qtBpthrvRbLBAgRhMkKIlq-VyudpsVqvdaDEbbJbDzQYpWrWajTaD4Wo2me12q-FguByNkKIly91ytxpNFqPRcrnZDTejwRBhbjaxLWyWlVvjWq3Wot1y4ZaYPMa1bjCauYbDkcc1M61Fr4_pYZvtJoblFgUDOPYiuEgnMr_l9fabnn67W2G5iCWak0U6kV32FZfJNVq4Jo7JYrFbLVzLxci1WGyME5vJZdiMFv7ebGJb2Cwrt8a1Wq1Fu-XCLTF5jGvdYDRzDYcjj2tmWoteH9PDNttNDMt9YzYbDoarxWS5b8xmw8FwtZgs9x06w3f1ORudwfHE4_Np_ib1x-YwKFwGi_f3uUib0cbNqNKGLRbVtbhzTaw6bexk7BzMBoVveE0Mfz_189rN3g5ig0ERSwSni3QiehlPF7FE8rRIJyKXZ7Ma7Ta-hW1ksS2cE8PCsPKNHIvlaLlyTRYTsURpukgnetFvN5ytRX_D02NR_5EhF3PlYC6azBWr0SoBAAAAAAAAACxhzrwJAAAAwGkgo8FmuFouAISzly4AAAAAAAAAwG55ah9wQLvhXHHjxw3mt7zeftPTb3crLFcGeKAmZ97smSDWarWsAQAABLABAAACuHXzFoDNyO0DUZ0q9MCNXvMT5GC5Gg!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=Noappq22_vD!mprdctdt6_vA!nrlc_vA!smbs!ufm_vA&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1456
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:55 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085135.272314,VS0,VE49
vary: Accept-Encoding
X-Firefox-Spdy: h2
am-match.taboola.com/sync?dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&excid=22&docw=0&cijs=1&nlb=false
200 OK 0 B URL HTTP/2 am-match.taboola.com/sync?dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&excid=22&docw=0&cijs=1&nlb=false
IP
ASN #200478 Taboola.com ltd
GET /sync?dast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&excid=22&docw=0&cijs=1&nlb=false HTTP/1.1
Host: am-match.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:50 GMT
content-type: text/html;charset=ISO-8859-1
machineid: 3402
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/jquery/cookie/jquery.cookie.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/jquery/cookie/jquery.cookie.js
IP
GET /rs3/64/frm/jquery/cookie/jquery.cookie.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:26:48 GMT
last-modified: Wed, 09 Sep 2020 09:40:28 GMT
x-cache-ne: HIT
x-cache-pr: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 275519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bB0FQuQ9nx%2BzuabUFine8MvN27ClgQbD%2Fsd0XCPX8NA1Q6s0R0vQ6cwMdH2Ghecb62lfT7PZ1m7YwrxFPjRYE7k4jZ6nE1YSZETXvfssP37NmKvx%2B932nzw%2FgXbFVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef630ab24b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
illiweb.com/rs3/64/frm/lang/ar.js
200 OK 0 B URL HTTP/2 illiweb.com/rs3/64/frm/lang/ar.js
IP
GET /rs3/64/frm/lang/ar.js HTTP/1.1
Host: illiweb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:47 GMT
content-type: application/x-javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=74879
access-control-allow-origin: *
expires: Tue, 07 Nov 2023 08:39:39 GMT
last-modified: Thu, 08 Sep 2022 07:38:48 GMT
x-cache-ne: EXPIRED
x-cache-pr: EXPIRED
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 274748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f0m%2BsR9hfpAvDSWRObykmQri2EvB5llGOnI1GJ27pP4iEAv6yZ7EyyQX8cdnxoX9BqCpAxBddqQ0PPejX8rk131ka6zAXlNzbgIW6UbV3X4Jdq4BWv8xNOagyViJgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6308b0db50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D4iGt4hgaduRwpyEwxcwjaQMfHzWUePfMB6SPbjDKTYJkKdWvpzCvmIBA7C8y8bRruB%2ByfPAsQK2vEoxYYslWSqAGtHnUjxLy5b57Qq1Z%2BFe%2BGB16r%2B8ACF%2BidNKpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef63cadbab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.topicit.net/scripts/connect.js
200 OK 0 B URL HTTP/2 connect.topicit.net/scripts/connect.js
IP
GET /scripts/connect.js HTTP/1.1
Host: connect.topicit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 12:58:48 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5437
access-control-allow-origin: *
etag: W/"5d653880-153d"
last-modified: Tue, 27 Aug 2019 14:04:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=86400
cf-cache-status: HIT
age: 1281
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y0CJ%2Fu%2B0TYbzaaTI71h5kdw7S4FcDPENk9cTd9qS9Dal9rAJ4joDQ32qNPBTyMvPHJluWWIDhD6ndHeE0J0uIcRhq4AtmZu9uedocOqhgV7eE19UuIqbf25bz8QpI1QfqNXzf2sO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ef6351867b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.betgorebysson.club/apu.php?zoneid=3765907
200 OK 0 B URL HTTP/2 cdn.betgorebysson.club/apu.php?zoneid=3765907
IP
Analyzer Verdict Alert fortinet Malware
GET /apu.php?zoneid=3765907 HTTP/1.1
Host: cdn.betgorebysson.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 12:58:49 GMT
content-type: application/javascript
x-trace-id: b5169662d7d1d07cfeb6ff01c267e3e7
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=2da4800bfd2c4ecda79b047f25d2b85b; expires=Fri, 10 Nov 2023 12:58:49 GMT; path=/; secure; SameSite=None
oaidts=1668085129; expires=Fri, 10 Nov 2023 12:58:49 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668085126041&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=620412931&tz=0&viewable=true&ddast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
200 OK 0 B URL HTTP/2 wf.taboola.com/VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668085126041&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=620412931&tz=0&viewable=true&ddast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1
IP
POST /VideoBidRequestHandlerServlet?oid=15&width=728&height=409&pubid=169497&tagid=953497&crid=-1&noaop=5&sortOrderType=0&cb=1668085126041&mimes=5,10,11,12&isvideo=0&plmd=2&mindur=1&maxdur=210&minbr=1&maxbr=10000&st=0&seq=1&pv=1488&pt=620412931&tz=0&viewable=true&ddast=V7L-wCFgNeN9ubGsSvIAReN9ubGsSvIAUAAAAGBuIHJLEwzYwT426tcoxWa9FyMllLfJuJW-PwbFyzjXM3cgyHQBIL08w4Me7WKsdotRYtJ5O1xLeZuDUOz8Y12zh3I8dwChE3GQ6fg4Go6Hpb7A6n2fMGFTSdDp_rXq8wXRyWh11hNDvcfrvpYXLY5S7TX_TbDWdr0d_w9NgBAAAA4OH___8fAgAAACACAAAAQAIAAACAIqDi30LgAgAAAADj____XwPgk4PgPWe_PwAAAABAAAAAAEgABlYDSgA-zldO_v________9jBugzb2T-____bwx6AB58AB6EAAAALob-E5f_tfeRM4gKQosYAQAAAGxpqWgeTeqEyqLq__-_3wrgCgAggDDs8yMvS3dQ4i0MAAAgYGyBHha_3-ywa_xul_3_________m_2f_aMJvY1epwWxjF6r_QICAKz9AgIAsKkbAMBbAFzQEbRiMFidQuyGs8VuNNuMZgcAAABw9____68HIi6Ta7RwTRyTxWK3WriWi5FrsdgYJzaTy7AZLbzXbDala0QrG9sXcZPh8DkYiIqut8XucJo996NoyXK33K1Gk8VotFxudsPNaLC_gRisBjgRg-VyMllMdqvRarQZ7kazwQIFYjBBipaslsvlarNZrXajxWywWQ43G6Ro1Wo22gyGq9lkttuthoPhcjRCipYsd8vdajRZjEbL5WY33IwGQ4S52cS2sFlWbo1rtVqLdsuFW2LyGNe6wWjmGg5HHtfMtBa9PqaHbbabGJZbFAzg2IvkaZFONCuHw7iYTEw2m2nl8G0cw4lps5wZh4PdzOTxuCxiieZkkU5kl33FZXKNFq6JY7JY7FYL13Ixci0WG-PEZnIZNqOFvzeb2BY2y8qtca1Wa9FuuXBLTB7jWjcYzVzD4cjjmpnWotfH9LDNdhPDct-YzYaD4WoxWe4bs9lwMFwtJst9h87wXX3ORmdwPPH4fJq_Sf2xOQwKl8Hi_X0u0ma0cTOqtGGLRXUt7lwTq04bOxk7B7NB4RteE8PfT_28drO3g9hgUMQSwUU6kfktr7ff9PTb3QrLRSxRmi7SiV702w1na9Hf8PRYxBLB6SKdiF7G00X9R4ZczJWDuWgyV6xGqwQAAAAAAAAAsIQ58yYAAAAAp4GMBpvhap0HMlgOdsvVcgEgnL10AQAAAAAAAAB2y1P7gAPaDeeKGz9uML_l9fabnn67W2G5MsADNTnz5s8EsVarZQ0AACCADQAAEMCtm7cAbCb-____Pw4AAEBGjh4AAEB8H4jqVKEHbvSanyAHy9UA!&proto=2,3,5,6&encoded=1&pstn=vforce2&callback=&wfv=1&=0&qsz=7&ft=0&pb=0&pagg=1&sd=undefined&ctsldr=0&dtagid=2090795&dpubid=240385&abtst=mprdctdt6_vA!Noappq22_vD!nrlc_vA!smbs!ufm&mPre=0.025&cirf=https%3A%2F%2Fatbara.ahlamontada.net&en=1 HTTP/1.1
Host: wf.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 133
Origin: https://atbara.ahlamontada.net
Connection: keep-alive
Referer: https://atbara.ahlamontada.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/json;charset=utf-8
machineid: 1467
pragma: no-cache
cache-control: no-cache,must-revalidate,no-store,max-age=0,s-maxage=0
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://atbara.ahlamontada.net
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 12:58:50 GMT
via: 1.1 varnish
x-served-by: cache-bma1672-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1668085130.248357,VS0,VE49
vary: Accept-Encoding
X-Firefox-Spdy: h2
178.33.43.178
3.208.157.225
23.36.77.32
151.101.85.44
139.45.195.253
104.21.235.175
185.94.180.126
3.67.143.136
185.106.33.48
34.248.173.75
94.23.76.111