www.aramcolife.com/sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=uswxqb3YIPrXjYD1GXU03d50D9vGTbD5JG52Ex2yAqVYIQx7Zn6ZzyZIy2SR1JuIrgzvjIhaWOYx1KDk2o5P7Xnl2bU94+kOpxOGOGG5cd0v67PN1QI9BszdwsR7yYTAgdil1PRZ1LW/HElWVHkKglT/IWIfjqeTr7oxINVpENDQOuDIIX40/I99BYLnOE7WCdqWvQpJ6oFUSu1P/owkXqmZBUgWCy0IrWnYbUeXXroSJucGJEtXhEM6TkayK44ptS3A/vB+CESLWSTU1H4pOfcWEX9HDia8Og7xtbNyAwZpXhuaJph0u9hKQ+9C1QmVe/AHM7s+icmen+MYhaTKb+RbgwLaACTvaqThX/a0Y6OHICJscPg6WhP9HBhZjyWNxEvr+4OGSl2e3AeEOiezBM/SOC1ONq6R+168pbf3bF55ejano3NSk3TGTPoyuPcYaP4qeL1NrF+nEUAWrk37B7asoEqZt7bc0Gb0FRA44wxs8eGA/17dtN7HTOTwFiEY
301 Moved Permanently 0 B URL HTTP/1.1 www.aramcolife.com/sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=uswxqb3YIPrXjYD1GXU03d50D9vGTbD5JG52Ex2yAqVYIQx7Zn6ZzyZIy2SR1JuIrgzvjIhaWOYx1KDk2o5P7Xnl2bU94+kOpxOGOGG5cd0v67PN1QI9BszdwsR7yYTAgdil1PRZ1LW/HElWVHkKglT/IWIfjqeTr7oxINVpENDQOuDIIX40/I99BYLnOE7WCdqWvQpJ6oFUSu1P/owkXqmZBUgWCy0IrWnYbUeXXroSJucGJEtXhEM6TkayK44ptS3A/vB+CESLWSTU1H4pOfcWEX9HDia8Og7xtbNyAwZpXhuaJph0u9hKQ+9C1QmVe/AHM7s+icmen+MYhaTKb+RbgwLaACTvaqThX/a0Y6OHICJscPg6WhP9HBhZjyWNxEvr+4OGSl2e3AeEOiezBM/SOC1ONq6R+168pbf3bF55ejano3NSk3TGTPoyuPcYaP4qeL1NrF+nEUAWrk37B7asoEqZt7bc0Gb0FRA44wxs8eGA/17dtN7HTOTwFiEY HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.aramcolife.com/sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=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
Date: Tue, 20 Sep 2022 15:50:20 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 14:52:35 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sx5BsKqUKgOhQtxKWwWSb3AK06IUs1oZNJcXMk3W2pDhGwqxoo0i2A==
Age: 3465
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5041
Expires: Tue, 20 Sep 2022 17:14:21 GMT
Date: Tue, 20 Sep 2022 15:50:20 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lyPiAI68DAJWjCvS2k6LvcoEirvS4-wdNlJ7_fL7GksDfQTkynTJsw==
age: 40507
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b921991dfbfa20dcb749dcd851f63417
2c4fc6404ebfd1f170c2311cebd0dd5e3d2b5d69
bf48daac503b11689f1e99f5d014e1505fe87d73ccb6a99dae662276752c9697
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4797
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 15:50:20 GMT
Last-Modified: Tue, 20 Sep 2022 14:30:23 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 15:50:20 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.aramcolife.com/sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=uswxqb3YIPrXjYD1GXU03d50D9vGTbD5JG52Ex2yAqVYIQx7Zn6ZzyZIy2SR1JuIrgzvjIhaWOYx1KDk2o5P7Xnl2bU94+kOpxOGOGG5cd0v67PN1QI9BszdwsR7yYTAgdil1PRZ1LW/HElWVHkKglT/IWIfjqeTr7oxINVpENDQOuDIIX40/I99BYLnOE7WCdqWvQpJ6oFUSu1P/owkXqmZBUgWCy0IrWnYbUeXXroSJucGJEtXhEM6TkayK44ptS3A/vB+CESLWSTU1H4pOfcWEX9HDia8Og7xtbNyAwZpXhuaJph0u9hKQ+9C1QmVe/AHM7s+icmen+MYhaTKb+RbgwLaACTvaqThX/a0Y6OHICJscPg6WhP9HBhZjyWNxEvr+4OGSl2e3AeEOiezBM/SOC1ONq6R+168pbf3bF55ejano3NSk3TGTPoyuPcYaP4qeL1NrF+nEUAWrk37B7asoEqZt7bc0Gb0FRA44wxs8eGA/17dtN7HTOTwFiEY
301 Moved Permanently 687 B URL HTTP/1.1 www.aramcolife.com/sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=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
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash b7d20d72289d5be6765d937d34d3455c
911ea3296c686143b3f804b964b7159ebe6850ad
40b42e825b2ea26abd52acc4559f6a4d5442c2265142a855701e4923af733b5c
GET /sitecore%20modules/Web/EXM/RedirectUrlPage.aspx?ec_eq=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 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Content-Length: 687
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Cache-Control: no-cache, no-store
Expires: -1
Location: /404
Pragma: no-cache
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Date: Tue, 20 Sep 2022 15:50:20 GMT
Connection: keep-alive
Set-Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; path=/; HttpOnly; SameSite=Lax
SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; expires=Fri, 17-Sep-2032 15:50:20 GMT; path=/; HttpOnly
ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76;Path=/;HttpOnly;Secure;Domain=www.aramcolife.com
ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.aramcolife.com
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 15:03:22 GMT
Expires: Tue, 20 Sep 2022 15:28:22 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: F-B1yvKR4cN08Oc5pCy4Gda_L0r7VRLHoGjghzTVb4pbDw-DgjtXaA==
Age: 2818
www.aramcolife.com/404
200 OK 13 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2699), with CRLF, LF line terminators
Hash 936e111419cf3f390c6429167aa5ae3f
8ed2172b1137cbd4c1e9773bafd16515bb7890fe
7793bfb9582b37cff6a5e41f762d13454aaf86ddafb2ee6af0f21ed257c107b7
GET /404 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Content-Length: 12627
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
Cache-Control: no-cache, no-store
Content-Encoding: gzip
Expires: -1
Pragma: no-cache
Vary: Accept-Encoding
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Date: Tue, 20 Sep 2022 15:50:20 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
ocsp.digicert.com/
200 OK 471 B IP
Hash edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1965
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 15:50:20 GMT
Last-Modified: Tue, 20 Sep 2022 15:17:35 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Bold.0711d632.woff
200 OK 32 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Bold.0711d632.woff
IP
File type Web Open Font Format, CFF, length 31868, version 0.0\012- data
Hash 0711d632b716160c71878c25482589ad
c5e36b12e539d1eefb6234197883346bf1eb5240
0a807d66009390b22aed3cad8d9240c23e037de8cef41a1310a4b745960ced60
GET /frontend/aramcolife/static/media/Ghawar-Bold.0711d632.woff HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 31868
Content-Type: application/font-woff
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53639
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
ocsp.digicert.com/
200 OK 279 B IP
Hash 0e1f3d25194ffcf4cd8c1628e734fc69
9d03162b368cf976c80c9883241af54ecd10cdc1
5c62ad8cff6895d8474dc752a6c569fc17205a4a7618dc1e638a61c463de2a7b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1041
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 15:50:21 GMT
Last-Modified: Tue, 20 Sep 2022 15:33:00 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 7.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
File type ASCII text, with very long lines (21747)
Hash ec12a4ed6414d59f440cc6667f54fa56
dc045fd45a736db97db94c22d5b4d3a29aa10ea6
1a4fd42ea4ea00d7762d0a273e6094ac7967db784c736280fe77328025427373
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: 7BKk7WQU1Z9EDMZmf1T6Vg==
last-modified: Mon, 19 Sep 2022 16:34:19 GMT
etag: 0x8DA9A5CCCD45951
x-ms-request-id: 63bd540c-a01e-009c-715b-cca35b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7696
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb75d7db2fab4-OSL
X-Firefox-Spdy: h2
www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Bold.a3de35fb.woff2
200 OK 30 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Bold.a3de35fb.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 29656, version 1.20381\012- data
Hash a3de35fbb68f45cc8698147d7df5f4b3
8fb4d712fe77831cee5c27e09650cacf25d84669
9a5a1de5ead3e65ff14d3ac193b0edd46cf8e1b40cbe313869bb5e8a627c2db7
GET /frontend/aramcolife/static/media/Ghawar-Bold.a3de35fb.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 29656
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53629
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Light.7fcb1cc3.woff2
200 OK 30 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Light.7fcb1cc3.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 29996, version 1.20381\012- data
Hash 7fcb1cc3659a08fef997697ac4ee4fc7
f323cf0aafef3e19552f3f1ff6c35ff113f4e7f0
7b17c3331c885c7e06ef138443673c3f27ecd0d6a29788179cdbf831471a7fa4
GET /frontend/aramcolife/static/media/Ghawar-Light.7fcb1cc3.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 29996
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=57369
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Regular.0eeda9fc.woff2
200 OK 78 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Regular.0eeda9fc.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 77684, version 1.22478\012- data
Hash 0eeda9fc98a31854dc7a84efba3e12f1
a743834f349602c7ef3c329455607ce080dbffa3
cc16b018e3dc91a911dc044018a1c487e3283195669884ee5a7c4b379976b93e
GET /frontend/aramcolife/static/media/Haradh-Regular.0eeda9fc.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 77684
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "2e6318498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=31768
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Bold.7fb80d67.woff2
200 OK 92 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Bold.7fb80d67.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 91936, version 1.22478\012- data
Hash 7fb80d6729c922a6f153cf3547e2dcef
c90f30a87670093291e4697a8a467b99ebb62d2e
640a8acaa3e6dac3a124142220a64ac0064850d43912a5aaf624bc0a5fb789e6
GET /frontend/aramcolife/static/media/Haradh-Bold.7fb80d67.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 91936
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=15348
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Bold.aefede7a.woff
200 OK 107 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Bold.aefede7a.woff
IP
File type Web Open Font Format, CFF, length 107404, version 0.0\012- data
Size 107 kB (107404 bytes)
Hash aefede7a500641617bd6c0f2abcae4ff
606e838abee3c4697aacc2c105dfca14a5906153
fd7b425404fc9fb1f0584427f6bb666e6cd495a01dd60f0f3d617eeebffb4de7
GET /frontend/aramcolife/static/media/Haradh-Bold.aefede7a.woff HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 107404
Content-Type: application/font-woff
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "fa9c32498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53564
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/ManifaPro2_453-Bold.fcfc96d3.woff2
200 OK 54 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/ManifaPro2_453-Bold.fcfc96d3.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 54448, version 2.29687\012- data
Hash fcfc96d3d18a631e103797fd3f3cfd8b
6d52db16d1e02b1db46bbbed479143c3de7dff75
07c3a4c6f48eac6f4e6fa30b04b873eafc7d7be70b182318a1bf4dfa654950d0
GET /frontend/aramcolife/static/media/ManifaPro2_453-Bold.fcfc96d3.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 54448
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "fa9c32498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53658
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Light.a8090a9f.woff
200 OK 32 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Ghawar-Light.a8090a9f.woff
IP
File type Web Open Font Format, CFF, length 31680, version 0.0\012- data
Hash a8090a9f2d4b48ddb0863f99f72e8664
657e326368215eb7f76829d21fd036b88ea30b79
dfc132219d9dfd4b49a54b95914967c9cf6ae703e8e117647d12f29d4774f2da
GET /frontend/aramcolife/static/media/Ghawar-Light.a8090a9f.woff HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 31680
Content-Type: application/font-woff
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "96bed488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53702
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Regular.e7f70e8f.woff
200 OK 92 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/Haradh-Regular.e7f70e8f.woff
IP
File type Web Open Font Format, CFF, length 91600, version 0.0\012- data
Hash e7f70e8f0113bad7a1c6a124d6a262b4
111f91363e1e9dcef4edab3db38db844ea2e7278
2cad02229d14f3fdc0d6416cf2fcd389f2e434c65f88b35a181ed8b3a4fe3eb5
GET /frontend/aramcolife/static/media/Haradh-Regular.e7f70e8f.woff HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 91600
Content-Type: application/font-woff
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "901329498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53685
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/ManifaPro2_453-Light.19bc6340.woff2
200 OK 54 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/ManifaPro2_453-Light.19bc6340.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 53612, version 2.29687\012- data
Hash 19bc6340701d190810e48c129ded8805
4c57c9c7d0bc8abaac6d00928f475dd93e66ee03
375f6e66594b4ca5698816d8dd6f156a2a29eb42d9dda2960d4e3b5408b14e62
GET /frontend/aramcolife/static/media/ManifaPro2_453-Light.19bc6340.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 53612
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53725
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/manifaPro2_2.223-regular-hidden-tashkeel.76321e06.woff2
200 OK 43 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/manifaPro2_2.223-regular-hidden-tashkeel.76321e06.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 43052, version 2.14614\012- data
Hash 76321e06ec2eb884b28c11eb4960a3b6
62c88acb1f26d096c4b94e8a1abba4162f99732e
5008b928850ae6905348c682e8cd483ca279301d96d56bcdf692d05f1e77c7d7
GET /frontend/aramcolife/static/media/manifaPro2_2.223-regular-hidden-tashkeel.76321e06.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 43052
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53735
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/media/ManifaPro2_453-Regular.831d8639.woff2
200 OK 54 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/media/ManifaPro2_453-Regular.831d8639.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 53988, version 2.29687\012- data
Hash 831d863906495ce4c5c74458d61a5582
236d89c605c60f010dd19d862676512cde85f118
cedff3906e2f782252ba0ebd2df9141fcbcad46918e04cec578ee49aba6b4ae0
GET /frontend/aramcolife/static/media/ManifaPro2_453-Regular.831d8639.woff2 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 53988
Content-Type: application/font-woff2
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=53754
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/layouts/system/VisitorIdentification.js
200 OK 910 B URL HTTP/1.1 www.aramcolife.com/layouts/system/VisitorIdentification.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 0690bd029ab146f4bba02c5c7c5d08dc
90594dc8344651b55abd18bd03ab4d766a11e514
5896eda5caefe2252f525509efeb45d6eb5cf435d4b520b25c6bebb800f32e65
GET /layouts/system/VisitorIdentification.js HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 910
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Aug 2020 14:48:30 GMT
Accept-Ranges: bytes
ETag: "073bea1257ad61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/js/runtime-styles.modern.92ed129e.js
200 OK 957 B URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/js/runtime-styles.modern.92ed129e.js
IP
File type ASCII text, with very long lines (1513), with no line terminators
Hash 9017581b84a66e848666528ea7040796
29ab56a71aa7e6589edca8cca4d9e324de2c145f
f8dc1e56a6366da3fef909846c00faf753cd4e22b7720b5f51d19f8bb2166abd
GET /frontend/aramcolife/static/js/runtime-styles.modern.92ed129e.js HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 957
Content-Type: application/x-javascript
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "c18eb488fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:44 GMT
Vary: Accept-Encoding
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=25970
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/css/styles.modern.adea634c.chunk.css
200 OK 63 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/css/styles.modern.adea634c.chunk.css
IP
File type Unicode text, UTF-8 text, with very long lines (53615)
Hash 4857ecf30e923de7330b89b9aef15c91
bdd4887b693c734b2d4aa45c2f7b161287ac3707
228b0c6a2dc17466ea0418db5d944a1fd2c3f4015de6461efef158e40907b380
GET /frontend/aramcolife/static/css/styles.modern.adea634c.chunk.css HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 62759
Content-Type: text/css
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "947137498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Vary: Accept-Encoding
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Cache-Control: max-age=16985
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 26fcf8aea27805b4a6a29e3e2a4ba19b
f920fd6c5a79a4adb2f456edcee678757ff1602c
7aa63d03f514e4f51190e85f167f747563f980e0e6fdee6cce9393321dff1038
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 15:50:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.aramcolife.com/-/media/aramco-life/app-promotion/google-play-badge.svg?iar=0&hash=47876ECAA77F8ED88B7660389807B7D7
200 OK 4.7 kB URL HTTP/1.1 www.aramcolife.com/-/media/aramco-life/app-promotion/google-play-badge.svg?iar=0&hash=47876ECAA77F8ED88B7660389807B7D7
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (5516)
Hash bf1ca09e2ce09dcc8ce7a23bf19a17b2
99c07e7ede910accbc9438dfd2ee9c8896390927
b769e3f0bb3a64b42b6369c8b162120cb8e602b7e4c0c4555d957a6d291c31e4
GET /-/media/aramco-life/app-promotion/google-play-badge.svg?iar=0&hash=47876ECAA77F8ED88B7660389807B7D7 HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Fri, 13 Nov 2020 09:50:51 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Content-Disposition: inline; filename="Google Play Badge.svg"
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4665
Cache-Control: private, max-age=17164
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
cdn.cookielaw.org/consent/2750d700-308e-4f5e-a65d-36e8752d82aa/2750d700-308e-4f5e-a65d-36e8752d82aa.json
200 OK 1.4 kB URL HTTP/2 cdn.cookielaw.org/consent/2750d700-308e-4f5e-a65d-36e8752d82aa/2750d700-308e-4f5e-a65d-36e8752d82aa.json
IP
File type JSON data\012- , ASCII text, with very long lines (3087), with no line terminators
Hash 03128e4186381087248346acbda7d1d9
902b3a95e6e92d92cd338a44c734418cce676864
b5801f77a0348a4d11823feccbd634e1e508e2f1a40b88f534cc4f986c350726
GET /consent/2750d700-308e-4f5e-a65d-36e8752d82aa/2750d700-308e-4f5e-a65d-36e8752d82aa.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.aramcolife.com
Connection: keep-alive
Referer: https://www.aramcolife.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/x-javascript
content-length: 1354
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: AxKOQYY4EIckg0asvafR2Q==
last-modified: Thu, 23 Jun 2022 14:23:28 GMT
etag: 0x8DA5523F160A2CC
x-ms-request-id: e572f852-701e-007b-150c-87b356000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
expires: Tue, 20 Sep 2022 19:50:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb75e2b88b527-OSL
X-Firefox-Spdy: h2
www.aramcolife.com/-/media/aramco-life/app-promotion/app-store-badge.svg?iar=0&hash=54DF6AB6E3E1FF4D5F696EDC3752678E
200 OK 6.7 kB URL HTTP/1.1 www.aramcolife.com/-/media/aramco-life/app-promotion/app-store-badge.svg?iar=0&hash=54DF6AB6E3E1FF4D5F696EDC3752678E
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (7685)
Hash 87db471eb77db65c05193a7cfbfaf662
2a0002ba959fb880519a012feb6067bcc112fa9d
224636f1de975035a1ec420f72cdc5bbf9975789ecb98fb5e8c01da22b27d195
GET /-/media/aramco-life/app-promotion/app-store-badge.svg?iar=0&hash=54DF6AB6E3E1FF4D5F696EDC3752678E HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Fri, 13 Nov 2020 09:49:43 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Content-Disposition: inline; filename="App Store Badge.svg"
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6675
Cache-Control: private, max-age=17187
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/-/media/aramco-life/logos/footer/sa-logo.svg
200 OK 11 kB URL HTTP/1.1 www.aramcolife.com/-/media/aramco-life/logos/footer/sa-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (24071)
Hash fa29fb7101196b4898c7e8567400d446
365df9f195838c32f2e6fe5ec324f8b45cae5df9
9e271aad3a1399433770121a19e152bb2144cea7e9621ebbe582886536b1f203
GET /-/media/aramco-life/logos/footer/sa-logo.svg HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Mon, 26 Oct 2020 16:36:47 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Content-Disposition: inline; filename="sa-logo.svg"
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11368
Cache-Control: private, max-age=17155
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.googletagmanager.com/gtm.js?id=GTM-TCR9P46
200 OK 64 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TCR9P46
IP
File type ASCII text, with very long lines (33534)
Hash 7919032dee3b692dc32878ce2ea31aaa
68e293d05758aa7553a3b17c2da1abd028cd75a9
931c1c5745e4cca24db361cc77e00210825791942a62625ee79e9243f68ec4b2
GET /gtm.js?id=GTM-TCR9P46 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Sep 2022 15:50:21 GMT
expires: Tue, 20 Sep 2022 15:50:21 GMT
cache-control: private, max-age=900
last-modified: Tue, 20 Sep 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64286
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 26fcf8aea27805b4a6a29e3e2a4ba19b
f920fd6c5a79a4adb2f456edcee678757ff1602c
7aa63d03f514e4f51190e85f167f747563f980e0e6fdee6cce9393321dff1038
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 15:50:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4tkGocQSbuJCTB1wTclCEQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: f2V4C6p5Vl97u/HPqvqQ/hLY4bc=
www.aramcolife.com/favicon-dark.ico
200 OK 1.2 kB URL HTTP/1.1 www.aramcolife.com/favicon-dark.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d7b2bbd8908e6ac79a24f2cd9cf70977
bccfc2167f07adbbbee09d102acae47860d94796
06700d66f51997915f34d5a0a0be49cb4e7aacd836893aa0a5f85cb93e896916
GET /favicon-dark.ico HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 1150
Content-Type: image/x-icon
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "8cd0b8468fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:41 GMT
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/js/main.modern.cf69a1de.chunk.js
200 OK 113 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/js/main.modern.cf69a1de.chunk.js
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size 113 kB (113038 bytes)
Hash 88aa9b160815b011c80fae67c8cca9f8
0df5f764b8e86b6583498b0900c95c5c7de97026
fe5d9c04aebba061c6208e2105da46112da094afd25d53a07c12e09bb3364583
GET /frontend/aramcolife/static/js/main.modern.cf69a1de.chunk.js HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "5aae62498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Vary: Accept-Encoding
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Content-Length: 113038
Cache-Control: max-age=37581
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
www.aramcolife.com/frontend/aramcolife/static/js/5.modern.bf86f4b7.chunk.js
200 OK 71 kB URL HTTP/1.1 www.aramcolife.com/frontend/aramcolife/static/js/5.modern.bf86f4b7.chunk.js
IP
File type Unicode text, UTF-8 text, with very long lines (46415)
Hash eaedb2d3fc344e8914bad4e28d20e2c0
6ad0d577c25abe8b5bc35dcb5f021d1d0e0778f4
59c016d32d3bc4e25e5066880a0edaca5a64015e1a1d04bbd52c38e919acd818
GET /frontend/aramcolife/static/js/5.modern.bf86f4b7.chunk.js HTTP/1.1
Host: www.aramcolife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/404
Cookie: ASP.NET_SessionId=vbujssnbmfxspjttw3xvjkia; SC_ANALYTICS_GLOBAL_COOKIE=dc572f49deac474091a5410a1f7400ae|False; ARRAffinity=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76; ARRAffinitySameSite=b67cf4989142f516cf1224c1da63f82fb954c6d5a9d7f17d287740c0647a1f76
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "947137498fc9d81:0"
Last-Modified: Fri, 16 Sep 2022 05:43:45 GMT
Vary: Accept-Encoding
Request-Context: appId=cid-v1:4e55a9ee-bf0b-435c-8889-4bd7ce994be1
Content-Length: 71282
Cache-Control: max-age=37733
Date: Tue, 20 Sep 2022 15:50:21 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
cdn.cookielaw.org/scripttemplates/6.21.0/otBannerSdk.js
200 OK 76 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.21.0/otBannerSdk.js
IP
File type ASCII text, with very long lines (65455)
Hash a4618cb4837ace59d6e796c6375344df
be7c1789ab600623f0ecd468a89aeb852f002ea2
c0e1bed7a1ae97342732651c422512f10d708f1722f1c683ebf33247d5a0414d
GET /scripttemplates/6.21.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.aramcolife.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/javascript
content-length: 75797
content-encoding: gzip
content-md5: pGGMtIN6zlnW55bGN1NE3w==
last-modified: Fri, 23 Jul 2021 01:58:45 GMT
etag: 0x8D94D7D67DF8167
x-ms-request-id: 291e792a-e01e-00b9-2e6c-c43be8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 29086959
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb7606f6cfab4-OSL
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 1.2 kB URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
File type JSON data\012- , ASCII text, with very long lines (1580), with no line terminators
Hash 200c1cc7c4bbf9c18fd25ef191a0fad7
5e65d87e53234b2d850823c3f331654017468aaf
308ffad48e9e25b385855ebe4fbb70a82af344e24822ebaad4f6e8d954fd310c
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.aramcolife.com
Connection: keep-alive
Referer: https://www.aramcolife.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74dbb75fdd7ab527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/2750d700-308e-4f5e-a65d-36e8752d82aa/56bedc13-4597-4126-8774-2e313dbce492/en.json
200 OK 11 kB URL HTTP/2 cdn.cookielaw.org/consent/2750d700-308e-4f5e-a65d-36e8752d82aa/56bedc13-4597-4126-8774-2e313dbce492/en.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (40496), with no line terminators
Hash 5653a6f25e23727e71afdff1c2d61478
94fb34986f2d0d9eef9a209316ef1631eaaf24fe
fac84dc78c99d8a772b0923a437320c86c46cf6c0b221b0b982e9a4c7c66c7ab
GET /consent/2750d700-308e-4f5e-a65d-36e8752d82aa/56bedc13-4597-4126-8774-2e313dbce492/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.aramcolife.com/
Origin: https://www.aramcolife.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/x-javascript
content-length: 11245
cache-control: public, max-age=14400
content-encoding: gzip
content-md5: VlOm8l4jcn5xr9/xwtYUeA==
last-modified: Thu, 23 Jun 2022 14:23:33 GMT
etag: 0x8DA5523F3F14D94
x-ms-request-id: 0a3f37d5-801e-0148-0a0c-87ac2e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
expires: Tue, 20 Sep 2022 19:50:21 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb760eedcb527-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.21.0/assets/v2/otPcCenter.json
200 OK 12 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.21.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (37251)
Hash 3d4a4c92ad525cca95e7264176bab6af
2e223f3dcd7a7048fc282fb149c6727d65e0129c
25b8484cb9cd880581d4af5bc54a445d000607249b80f092e26ea10785ce2707
GET /scripttemplates/6.21.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.aramcolife.com/
Origin: https://www.aramcolife.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/json
content-length: 11523
content-encoding: gzip
content-md5: PUpMkq1SXMqV5yZBdrq2rw==
last-modified: Fri, 23 Jul 2021 01:58:41 GMT
etag: 0x8D94D7D65056FF9
x-ms-request-id: 79a6f6bc-101e-0060-2f34-569dc4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb7615f5db527-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.21.0/assets/otFlat.json
200 OK 3.0 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.21.0/assets/otFlat.json
IP
File type JSON data\012- , ASCII text, with very long lines (10843)
Hash 876ee8ce73032130b94551242d9b702b
295e0d8870639b948535953427a04db598e13a4f
4921d2bcffd42663e84a1dc7990eede1d17729ff8b1c2f14d6ab39dccad90115
GET /scripttemplates/6.21.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.aramcolife.com/
Origin: https://www.aramcolife.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/json
content-length: 2950
content-encoding: gzip
content-md5: h27oznMDITC5RVEkLZtwKw==
last-modified: Fri, 23 Jul 2021 01:58:39 GMT
etag: 0x8D94D7D641A6DE0
x-ms-request-id: dbcab8a6-f01e-00a6-493f-57e0f8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb7614f5ab527-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.21.0/assets/otCookieSettingsButton.json
200 OK 2.2 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.21.0/assets/otCookieSettingsButton.json
IP
File type JSON data\012- , ASCII text, with very long lines (2779)
Hash 5817ffc4cbb65454b586ca2d381e9968
5a54cb2695d9634d1c534f345d0b0ad69e39afe5
4171768e29e958fb24d57aaba9495cdc8ad074fcadba842891ebbe63fa3da66f
GET /scripttemplates/6.21.0/assets/otCookieSettingsButton.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.aramcolife.com/
Origin: https://www.aramcolife.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: application/json
content-length: 2180
content-encoding: gzip
content-md5: WBf/xMu2VFS1hsotOB6ZaA==
last-modified: Fri, 23 Jul 2021 01:58:39 GMT
etag: 0x8D94D7D63C93122
x-ms-request-id: 6e0da85c-b01e-0140-2c50-4eb75d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb7615f5fb527-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Tue, 20 Sep 2022 16:29:24 GMT
Date: Tue, 20 Sep 2022 15:50:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Tue, 20 Sep 2022 16:29:24 GMT
Date: Tue, 20 Sep 2022 15:50:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Tue, 20 Sep 2022 16:29:24 GMT
Date: Tue, 20 Sep 2022 15:50:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Tue, 20 Sep 2022 16:29:24 GMT
Date: Tue, 20 Sep 2022 15:50:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Tue, 20 Sep 2022 16:29:24 GMT
Date: Tue, 20 Sep 2022 15:50:22 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7sCevVX1nGXxZxnrXSURjUcap1a7vCZwrMMIXfzcBPR1srMxJHLGUg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:07:05 GMT
age: 63797
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a7d863845e96c5927e812f325c08c16
b8484fb5443344b03e52dd56b1d6c5682eb6221a
fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zDPKSOJ7SJImKcluUMhGvVMHv4t2oKLD2AJfGKAFSfedsdSA4VgZ_g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:56 GMT
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
content-type: image/jpeg
age: 64046
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c283017ec789693602177a2785177e21
ff8286c4d2cf87a1865d56d082bc5235dba60ad7
520db2567ad5529d35d2ac63b94d4186848382e9c86d0c4355ab979b34f0e0ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11145
x-amzn-requestid: dcb726a6-2f43-4170-a53c-4f0d2883309e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7yHfHIAMFu4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-11bf06e96123e01c11854cbb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DwufJXA1yHz_jnJL0PWjCQYF9fa3jlJ0e-2hIomInAXCpmPISX3mjg==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:33 GMT
age: 64069
etag: "ff8286c4d2cf87a1865d56d082bc5235dba60ad7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:50:04 GMT
age: 64818
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30fbdfee7ec4513a5ff3dfcb7282f816
a852edb64a7220532aa619ab2a440c3a7e11b97a
4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: y3urrVdjZEds_DKf3yL2XfaOy-5UPBwU-YVWe5eKYsDpl3JPmqffsw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:23:30 GMT
age: 62812
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 11:48:25 GMT
age: 14518
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
privacyportal-de.onetrust.com/request/v1/consentreceipts
201 Created 0 B URL HTTP/2 privacyportal-de.onetrust.com/request/v1/consentreceipts
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Generic/Spear Phishing
POST /request/v1/consentreceipts HTTP/1.1
Host: privacyportal-de.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 7892
Origin: https://www.aramcolife.com
Connection: keep-alive
Referer: https://www.aramcolife.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 201 Created
date: Tue, 20 Sep 2022 15:50:29 GMT
content-length: 0
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74dbb78f9955b51d-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 0 B IP
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3496
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 15:50:21 GMT
Last-Modified: Tue, 20 Sep 2022 14:52:05 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 278
cdn.cookielaw.org/scripttemplates/6.21.0/assets/otCommonStyles.css
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.21.0/assets/otCommonStyles.css
IP
GET /scripttemplates/6.21.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.aramcolife.com/
Origin: https://www.aramcolife.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 15:50:21 GMT
content-type: text/css
content-md5: F/Fs54+x9bQK/ULkNRp4fA==
last-modified: Fri, 23 Jul 2021 01:58:50 GMT
x-ms-request-id: b98043c4-a01e-0139-6250-4ede17000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74dbb7615f60b527-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
23.61.218.119
104.16.148.64
142.250.74.3
93.184.220.29
23.36.76.226